Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/trusts-redelegation. Description: Add support to trusts such that redelegation between consumers of trusts (trustees, which are services for the currently expected use-cases) is possible. Specification URL (additional information): None
Nathan, need more on the success criteria here; i've read the full spec here but still feel i need some direction on how to test. thx a lot.
(In reply to Mike Abrams from comment #2) > Nathan, need more on the success criteria here; i've read the full spec here > but still feel i need some direction on how to test. thx a lot. So this new "allow_redelegation" setting essentially just lets you create a trust using a trust token. This previously was not possible. Aditionally, there is a counter to say how many times a trust can be redelegated . You should do some basic tests for this: - Attempt to create a trust to redelegate using a trust token when allow_redelegation is not set (should fail - negative test). - Attempt to create a trust to redelegate using a trust token when allow_redelegation is set, then execute that new trust (should pass). - Set a counter for the max number of delegations to something like 2, then make sure if can only be chained that many times.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2015:1548