Bug 1029671 - Keystone SQL Backend does not remove expired tokens
Summary: Keystone SQL Backend does not remove expired tokens
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-packstack
Version: 4.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: z2
: 4.0
Assignee: Martin Magr
QA Contact: Udi Kalifon
URL:
Whiteboard:
Depends On: 908355 990584
Blocks: RHOS50RFE 1011091 1011093 1049118
TreeView+ depends on / blocked
 
Reported: 2013-11-12 21:31 UTC by Adam Young
Modified: 2022-07-09 06:33 UTC (History)
13 users (show)

Fixed In Version: openstack-packstack-2013.2.1-0.23.dev979.el6ost
Doc Type: Bug Fix
Doc Text:
Clone Of: 908355
Environment:
Last Closed: 2014-03-04 19:12:38 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1032633 0 None None None Never
OpenStack gerrit 28133 0 None None None Never
OpenStack gerrit 68616 0 None None None Never
OpenStack gerrit 69598 0 None None None Never
Red Hat Issue Tracker OSP-16417 0 None None None 2022-07-09 06:33:31 UTC
Red Hat Product Errata RHSA-2014:0233 0 normal SHIPPED_LIVE Important: openstack-packstack security and bug fix update 2014-03-05 00:10:57 UTC

Comment 1 Adam Young 2013-11-12 21:35:23 UTC
To support cleaning the token table, puppet needs to schedule a periodic task: keystone-manage token-flush.  This should probably run once a minute, since the longer we go between runsm, the more of a performance impact we might see from table locking.

Comment 3 Alvaro Lopez Ortega 2014-01-07 17:40:19 UTC
It'll require us to use a new Puppet module. Setting Mid-Feb so we have time to test it properly.

Comment 4 Martin Magr 2014-01-23 11:17:16 UTC
After investigating I found that Puppet actually has cron job resource. Since this bug is A2 targeted we need patch ASAP, hence I'm taking it.

Comment 7 Udi Kalifon 2014-02-19 09:41:04 UTC
Tested with:
openstack-keystone-2013.2.2-1.el6ost.noarch
python-keystoneclient-0.4.1-4.el6ost.noarch
python-keystone-2013.2.2-1.el6ost.noarch

Comment 11 errata-xmlrpc 2014-03-04 19:12:38 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2014-0233.html


Note You need to log in before you can comment on or make changes to this bug.