OpenStack Identity (Keystone)
Go to file
Matthieu Huin db9e0c6c4a Limited use trusts
Trusts now have a "remaining_uses" field that tracks how many times
a trust can still issue a token. It is decremented by 1 each time a
trust related authentication occurs (call to /auth/tokens), until it
reaches 0 and no token can be issued through this trust anymore. If
set to null (default value), trusts can be used indefinitely to
authenticate.

Closes-Bug: #1250617
Implements: bp trusts-chained-delegation
DocImpact
Co-Authored-By: Florent Flament <florent.flament-ext@cloudwatt.com>

Change-Id: I2c80b6d548a6715da0366c6f64ee58fbce514adb
2014-03-03 18:01:20 -06:00
bin Merge "Remove vim header" 2014-02-13 03:43:19 +00:00
doc Support for mongo as dogpile cache backend. 2014-02-26 09:57:11 -08:00
etc Merge "Remove "test-only" pam config options" 2014-03-03 00:54:22 +00:00
examples/pki Modified keystone endpoint-create default region 2014-02-03 09:41:16 -06:00
httpd Merge "Remove vim header" 2014-02-13 03:43:19 +00:00
keystone Limited use trusts 2014-03-03 18:01:20 -06:00
tools Update config options with helpstrings and generate sample 2014-02-20 19:18:49 -08:00
.coveragerc Add tests dir to the coverage omit list 2013-09-30 16:07:03 -04:00
.gitignore Fixes documentation building 2013-12-13 02:47:37 +00:00
.gitreview Add .gitreview config file for gerrit. 2011-10-24 14:48:03 -04:00
.mailmap reverse my preferred mailmap 2014-02-12 10:46:38 -06:00
.testr.conf Changes to testr as the test runner 2013-10-15 12:28:38 +00:00
CONTRIBUTING.rst Migrate to pbr. 2013-05-23 16:59:08 +02:00
HACKING.rst Make common log import consistent 2014-01-11 16:55:59 -08:00
LICENSE Added Apache 2.0 License information. 2012-02-15 17:48:33 -08:00
MANIFEST.in Move 'tests' directory into 'keystone' package 2013-08-14 01:30:01 -03:00
README.rst Keystone team uses #openstack-keystone now 2014-02-18 10:57:25 -08:00
babel.cfg setting up babel for i18n work 2012-06-21 18:03:09 -07:00
openstack-common.conf Setup code for auto-config sample generation 2014-02-16 20:41:00 +00:00
requirements.txt Updated from global requirements 2014-02-25 06:32:10 +00:00
run_tests.sh Adds run_tests.sh cli option to stop on failure 2014-01-18 10:17:55 -05:00
setup.cfg Setup code for auto-config sample generation 2014-02-16 20:41:00 +00:00
setup.py Sync with global requirements 2013-09-30 17:03:58 -04:00
test-requirements.txt Support for mongo as dogpile cache backend. 2014-02-26 09:57:11 -08:00
tox.ini Uses the venv virtualenv for the pep8 command 2014-02-21 17:04:04 +00:00

README.rst

OpenStack Keystone

Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.

Developer documentation, the source of which is in doc/source/, is published at:

http://keystone.openstack.org/

The API specification is available at:

https://github.com/openstack/identity-api

The API documentation is available at:

http://api.openstack.org/api-ref-identity.html

The canonical client library is available at:

https://github.com/openstack/python-keystoneclient

Documentation for cloud administrators is available at:

http://docs.openstack.org/

The source of documentation for cloud administrators is available at:

https://github.com/openstack/openstack-manuals

Information about our team meeting is available at:

https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting

Bugs and feature requests are tracked on Launchpad at:

https://bugs.launchpad.net/keystone

Future design work is tracked at:

https://blueprints.launchpad.net/keystone

Contributors are encouraged to join IRC (#openstack-keystone on freenode):

https://wiki.openstack.org/wiki/IRC

For information on contributing to Keystone, see CONTRIBUTING.rst.