Shulou(Shulou.com)05/31 Report--

Today, I would like to talk to you about how to achieve Openstack fernet token parsing, many people may not know much about it. In order to make you understand better, the editor has summarized the following content for you. I hope you can get something according to this article.

For Newton version

Keystone.conf

1.expiration

# The amount of time that a token should remain valid (in seconds). Drastically# reducing this value may break "long-running" operations that involve multiple# services to coordinate together, and will force users to authenticate with# keystone more frequently. Drastically increasing this value will increase# load on the `[token] driver`, as more tokens will be simultaneously valid.# Keystone tokens are also bearer tokens, so a shorter duration will also# reduce the potential security impact of a compromised token. (integer value) # Minimum value: Maximum value: 9223372036854775807#expiration = 3600

Token expiration time. Default is one hour.

2.max_active_keys

# This controls how many keys are held in rotation by `keystone-manage# fernet_ rotate` before they are discarded. The default value of 3 means that# keystone will maintain one staged key (always index 0), one primary key (the# highest numerical index), and one secondary key (every other index). # Increasing this value means that additional secondary keys will be kept in# the rotation. (integer value) # Minimum value: 1#max_active_keys = 3

Maximum number of active key. Default is 3.

After reading the above, do you have any further understanding of how to implement Openstack fernet token parsing? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.