Bug 986057

Summary: [RFE] Pluggable token formats
Product: Red Hat OpenStack Reporter: Adam Young <ayoung>
Component: openstack-keystoneAssignee: Adam Young <ayoung>
Status: CLOSED ERRATA QA Contact: Jeremy Agee <jagee>
Severity: high Docs Contact:
Priority: medium    
Version: 4.0CC: ayoung, dpal, kbanerje, mlopes, nkinder, sgordon
Target Milestone: Upstream M2Keywords: FutureFeature
Target Release: 4.0   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/keystone/+spec/pluggable-token-format
Whiteboard:
Fixed In Version: openstack-keystone-2013.2-0.5.b2.el6ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-20 00:13:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 975499    

Description Adam Young 2013-07-18 21:29:57 UTC
This bugzilla is designed to track the inclusion of an upstream blueprint in the RHOS 4.0 release. Please see the URL field above for details.

Comment 2 Dmitri Pal 2013-07-23 21:28:06 UTC
How to test:
Switch back and forth between UUID and PKI provider. Do regression testing.

Comment 4 Jeremy Agee 2013-10-17 17:36:15 UTC
2013.2-0.14.rc1.el6ost

/etc/keystone/keystone.conf 
token_format =PKI

keystone token-get
|     id    | MIILMAYJKoZIhvcNAQcCoIILITCCCx0CAQExCTAHBgUrDgMCGjCCCYYGCSqGSIb3DQEHAaCCCXcEgglzeyJhY2Nlc3MiOiB7InRva2VuIjogeyJpc3N1ZWRfYXQiOiAiMjAxMy0xMC0xN1QxNjo1NjoyNS4wODYzNTkiLCAiZXhwaXJlcyI6ICIyMDEzLTEwLTE4VDE2OjU2OjI1WiIsICJpZCI6ICJwbGFjZWhvbGRlciIsICJ0ZW5hbnQiOiB7ImRlc2NyaXB0aW9uIjogImFkbWluIHRlbmFudCIsICJlbmFibGVkIjogdHJ1ZSwgImlkIjogIjM3NDA5YzA5NjAyNzRlZjY5ODZlYzE1MTUwMGFlMDlkIiwgIm5hbWUiOiAiYWRtaW4ifX0sICJzZXJ2aWNlQ2F0YWxvZyI6IFt7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3NC92Mi8zNzQwOWMwOTYwMjc0ZWY2OTg2ZWMxNTE1MDBhZTA5ZCIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3NC92Mi8zNzQwOWMwOTYwMjc0ZWY2OTg2ZWMxNTE1MDBhZTA5ZCIsICJpZCI6ICIwMWU3Y2NjNDJlNjA0NTUyYmE2NDQ0NmU0MzczNTQwZiIsICJwdWJsaWNVUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDo4Nzc0L3YyLzM3NDA5YzA5NjAyNzRlZjY5ODZlYzE1MTUwMGFlMDlkIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogImNvbXB1dGUiLCAibmFtZSI6ICJub3ZhIn0sIHsiZW5kcG9pbnRzIjogW3siYWRtaW5VUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDo5Njk2LyIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6OTY5Ni8iLCAiaWQiOiAiMTQwNTg4Y2FkMDUyNDdjOWJhYjJlOGJkMDhhMDhkNWYiLCAicHVibGljVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6OTY5Ni8ifV0sICJlbmRwb2ludHNfbGlua3MiOiBbXSwgInR5cGUiOiAibmV0d29yayIsICJuYW1lIjogIm5ldXRyb24ifSwgeyJlbmRwb2ludHMiOiBbeyJhZG1pblVSTCI6ICJodHRwOi8vMTkyLjE2OC4wLjY0OjkyOTIiLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vMTkyLjE2OC4wLjY0OjkyOTIiLCAiaWQiOiAiNjYxOGIxMWU3NGUzNDE1NzliMjJkNWNjOGIzYmM3NWIiLCAicHVibGljVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6OTI5MiJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJpbWFnZSIsICJuYW1lIjogImdsYW5jZSJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3Ni92MS8zNzQwOWMwOTYwMjc0ZWY2OTg2ZWMxNTE1MDBhZTA5ZCIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3Ni92MS8zNzQwOWMwOTYwMjc0ZWY2OTg2ZWMxNTE1MDBhZTA5ZCIsICJpZCI6ICIyNWI3N2I4YTBiMmU0NGVmYjk4MzRiMmJkNzQ5OTVhZCIsICJwdWJsaWNVUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDo4Nzc2L3YxLzM3NDA5YzA5NjAyNzRlZjY5ODZlYzE1MTUwMGFlMDlkIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogInZvbHVtZSIsICJuYW1lIjogImNpbmRlciJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3My9zZXJ2aWNlcy9BZG1pbiIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6ODc3My9zZXJ2aWNlcy9DbG91ZCIsICJpZCI6ICIxZDJjNjU4NjQ3M2U0MmYzYTZhYzNjMjVlNjMzYWFhMSIsICJwdWJsaWNVUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDo4NzczL3NlcnZpY2VzL0Nsb3VkIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogImVjMiIsICJuYW1lIjogIm5vdmFfZWMyIn0sIHsiZW5kcG9pbnRzIjogW3siYWRtaW5VUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDozNTM1Ny92Mi4wIiwgInJlZ2lvbiI6ICJSZWdpb25PbmUiLCAiaW50ZXJuYWxVUkwiOiAiaHR0cDovLzE5Mi4xNjguMC42NDo1MDAwL3YyLjAiLCAiaWQiOiAiNjA4ZTFiMjJjZTFmNDNhMThmMzJmMjJhMDU3ZTdmMjEiLCAicHVibGljVVJMIjogImh0dHA6Ly8xOTIuMTY4LjAuNjQ6NTAwMC92Mi4wIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogImlkZW50aXR5IiwgIm5hbWUiOiAia2V5c3RvbmUifV0sICJ1c2VyIjogeyJ1c2VybmFtZSI6ICJhZG1pbiIsICJyb2xlc19saW5rcyI6IFtdLCAiaWQiOiAiNjFkMDEwY2YwZThkNGZhYjgxYmZkNTBlZWQ4OWNkNzkiLCAicm9sZXMiOiBbeyJuYW1lIjogIl9tZW1iZXJfIn0sIHsibmFtZSI6ICJhZG1pbiJ9XSwgIm5hbWUiOiAiYWRtaW4ifSwgIm1ldGFkYXRhIjogeyJpc19hZG1pbiI6IDAsICJyb2xlcyI6IFsiOWZlMmZmOWVlNDM4NGIxODk0YTkwODc4ZDNlOTJiYWIiLCAiMWZiMjk1YTU2ZjczNDkyNzk3ZTVlNDMwM2QxODdkNDkiXX19fTGCAYEwggF9AgEBMFwwVzELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVVuc2V0MQ4wDAYDVQQHDAVVbnNldDEOMAwGA1UECgwFVW5zZXQxGDAWBgNVBAMMD3d3dy5leGFtcGxlLmNvbQIBATAHBgUrDgMCGjANBgkqhkiG9w0BAQEFAASCAQBybUxc3IZGEGLMHLJI5Efc9HTYg6NIheBaqHFRcXFtkMTlFtXJFjXCvkKpYbslR7iBGed17NMP8bkaa-Ik6CxCq1oFWbR-yMN8J4R8lB88SRlC3Gv+0LRv6yfIoJHlZK5tOQnc4yzvbD0hF8wxpZEpK0iCgnuUGyxDSzqwXKTQ4SDPLSpA5goQxOHKgwfsjRcfQFEDmbSo4C0fGSi-w8oO+POIRmTVoiddmRzzJbp8tfPGU0m43zT1gGVxYEMNYCYPW-Kmi8iQz9Y2-kMe22tAzMvg40NcjTxt6+TPJgGUkWrgiOx+GSoWlTRHJK6uNevRms5wYjTvKyhoTPZwvuiR |


/etc/keystone/keystone.conf 
token_format = UUID

keystone token-get
|     id    | 85fdec032fb341cd80f4ddd7f1c27c66 |

Comment 7 errata-xmlrpc 2013-12-20 00:13:28 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2013-1859.html