diff --git a/security-guide/source/block-storage/checklist.rst b/security-guide/source/block-storage/checklist.rst index d5d13a2c..30833d46 100644 --- a/security-guide/source/block-storage/checklist.rst +++ b/security-guide/source/block-storage/checklist.rst @@ -96,13 +96,13 @@ try to eavesdrop on the channel in order to get access to sensitive information. Thus all the components must communicate with each other using a secured communication protocol. -**Pass:** If value of parameter ``auth_uri`` under +**Pass:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/cinder/cinder.conf`` is set to Identity API endpoint starting with ``https://`` and value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same ``/etc/cinder/cinder.conf`` is set to ``False``. -**Fail:** If value of parameter ``auth_uri`` under +**Fail:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/cinder/cinder.conf`` is not set to Identity API endpoint starting with ``https://`` or value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same diff --git a/security-guide/source/compute/checklist.rst b/security-guide/source/compute/checklist.rst index 385e98cc..38c061c9 100644 --- a/security-guide/source/compute/checklist.rst +++ b/security-guide/source/compute/checklist.rst @@ -105,13 +105,13 @@ try to eavesdrop on the channel in order to get access to sensitive information. All the components must communicate with each other using a secured communication protocol. -**Pass:** If value of parameter ``auth_uri`` under +**Pass:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/nova/nova.conf`` is set to Identity API endpoint starting with ``https://`` and value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same ``/etc/nova/nova.conf`` is set to ``False``. -**Fail:** If value of parameter ``auth_uri`` under +**Fail:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/nova/nova.conf`` is not set to Identity API endpoint starting with ``https://`` or value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same diff --git a/security-guide/source/image-storage/checklist.rst b/security-guide/source/image-storage/checklist.rst index f6d40db2..04e4a387 100644 --- a/security-guide/source/image-storage/checklist.rst +++ b/security-guide/source/image-storage/checklist.rst @@ -116,17 +116,17 @@ may try to eavesdrop on the channel in order to get access to sensitive information. All components must communicate with each other using a secured communication protocol. -**Pass:** If value of parameter ``auth_uri`` under ``[keystone_authtoken]`` -section in ``/etc/glance/glance-api.conf`` is set to the Identity API endpoint -starting with ``https://``, and the value of the parameter ``insecure`` is under -the same ``[keystone_authtoken]`` section in the same -``/etc/glance/glance-registry.conf`` is set to ``False``. +**Pass:** If value of parameter ``www_authenticate_uri`` under +``[keystone_authtoken]`` section in ``/etc/glance/glance-api.conf`` is set to +the Identity API endpoint starting with ``https://``, and the value of the +parameter ``insecure`` is under the same ``[keystone_authtoken]`` section +in the same ``/etc/glance/glance-registry.conf`` is set to ``False``. -**Fail:** If value of parameter ``auth_uri`` under ``[keystone_authtoken]`` -section in ``/etc/glance/glance-api.conf`` is not set to Identity API endpoint -starting with ``https://``, or value of parameter ``insecure`` under the same -``[keystone_authtoken]`` section in the same ``/etc/glance/glance-api.conf`` -is set to ``True``. +**Fail:** If value of parameter ``www_authenticate_uri`` under +``[keystone_authtoken]`` section in ``/etc/glance/glance-api.conf`` is not set +to Identity API endpoint starting with ``https://``, or value of parameter +``insecure`` under the same ``[keystone_authtoken]`` section in the same +``/etc/glance/glance-api.conf`` is set to ``True``. .. _check_image_05: diff --git a/security-guide/source/networking/checklist.rst b/security-guide/source/networking/checklist.rst index 50cc4525..5b340636 100644 --- a/security-guide/source/networking/checklist.rst +++ b/security-guide/source/networking/checklist.rst @@ -97,13 +97,13 @@ try to eavesdrop on the channel in order to get access to sensitive information. Thus all the components must communicate with each other using a secured communication protocol. -**Pass:** If value of parameter ``auth_uri`` under +**Pass:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/neutron/neutron.conf`` is set to Identity API endpoint starting with ``https://`` and value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same ``/etc/neutron/neutron.conf`` is set to ``False``. -**Fail:** If value of parameter ``auth_uri`` under +**Fail:** If value of parameter ``www_authenticate_uri`` under ``[keystone_authtoken]`` section in ``/etc/neutron/neutron.conf`` is not set to Identity API endpoint starting with ``https://`` or value of parameter ``insecure`` under the same ``[keystone_authtoken]`` section in the same