OpenStack Identity (Keystone)
Go to file
Brant Knudson 6cbf835542 Fix revocation event handling with MySQL
When MySQL is used to store revocation events, events are returned
from the database with the timestamps truncated to the second. This
causes a revocation event for a token (which has the issued_at
timestamp to the microsecond) to not match the revocation event and
therefore the token is not considered to be revoked.

The fix is to have the revocation events and token timestamps both
always be truncated to the second. This will cause all tokens for a
user that are issued within a second to be revoked when any of those
tokens are revoked, which shouldn't be a problem.

Conflicts:

	keystone/tests/test_v3_os_revoke.py

Change-Id: Ibd82b4ce910206dfd504c396614ae2ebed025e9b
Closes-Bug: #1347961
(cherry picked from commit 7aee6304f6)
2014-08-05 13:19:01 -05:00
bin explicitly import gettext function 2014-03-20 15:03:05 -05:00
doc Make LIVE Tests configurable with ENV 2014-03-17 13:52:55 -07:00
etc Change the default version discovery URLs 2014-03-25 10:15:15 +10:00
examples/pki Modified keystone endpoint-create default region 2014-02-03 09:41:16 -06:00
httpd Enable lazy translations in httpd/keystone.py 2014-03-26 16:09:40 +00:00
keystone Fix revocation event handling with MySQL 2014-08-05 13:19:01 -05:00
tools Update config options with helpstrings and generate sample 2014-02-20 19:18:49 -08:00
.coveragerc Add tests dir to the coverage omit list 2013-09-30 16:07:03 -04:00
.gitignore Fixes documentation building 2013-12-13 02:47:37 +00:00
.gitreview Opening stable/icehouse 2014-04-17 14:32:03 +02:00
.mailmap reverse my preferred mailmap 2014-02-12 10:46:38 -06:00
.testr.conf Add support for parallel testr workers in Keystone 2014-03-21 11:15:18 -07:00
CONTRIBUTING.rst Migrate to pbr. 2013-05-23 16:59:08 +02:00
HACKING.rst Make common log import consistent 2014-01-11 16:55:59 -08:00
LICENSE Added Apache 2.0 License information. 2012-02-15 17:48:33 -08:00
MANIFEST.in Create TMPDIR for tests recursively 2014-03-24 18:46:36 +01:00
README.rst Keystone team uses #openstack-keystone now 2014-02-18 10:57:25 -08:00
babel.cfg setting up babel for i18n work 2012-06-21 18:03:09 -07:00
openstack-common.conf drop key distribution from icehouse 2014-03-03 20:04:29 -08:00
requirements.txt Updated from global requirements 2014-07-24 16:47:19 +00:00
run_tests.sh Adds run_tests.sh cli option to stop on failure 2014-01-18 10:17:55 -05:00
setup.cfg Bump stable/icehouse next version to 2014.1.2 2014-06-24 01:52:03 +02:00
setup.py Sync with global requirements 2013-09-30 17:03:58 -04:00
test-requirements.txt Updated from global requirements 2014-07-24 16:47:19 +00:00
tox.ini Don't override tox envdir for pep8 2014-08-04 16:42:04 -05:00

README.rst

OpenStack Keystone

Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.

Developer documentation, the source of which is in doc/source/, is published at:

http://keystone.openstack.org/

The API specification is available at:

https://github.com/openstack/identity-api

The API documentation is available at:

http://api.openstack.org/api-ref-identity.html

The canonical client library is available at:

https://github.com/openstack/python-keystoneclient

Documentation for cloud administrators is available at:

http://docs.openstack.org/

The source of documentation for cloud administrators is available at:

https://github.com/openstack/openstack-manuals

Information about our team meeting is available at:

https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting

Bugs and feature requests are tracked on Launchpad at:

https://bugs.launchpad.net/keystone

Future design work is tracked at:

https://blueprints.launchpad.net/keystone

Contributors are encouraged to join IRC (#openstack-keystone on freenode):

https://wiki.openstack.org/wiki/IRC

For information on contributing to Keystone, see CONTRIBUTING.rst.