yahoo-eng-team team mailing list archive

[Matt Fischer <matt@xxxxxxxxxxxxxxx>]

Public bug reported:

Keystone middleware's caching of tokens offers HMAC validation and
encryption of the tokens in the cache. This is important because
memcache has literally zero authentication or protection from any user
on the system.  So this feature should be ported in from keystone
middleware into keystone.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1578466

Title:
  keystone token cache should offer encryption like the middleware cache
  does

Status in OpenStack Identity (keystone):
  New

Bug description:
  Keystone middleware's caching of tokens offers HMAC validation and
  encryption of the tokens in the cache. This is important because
  memcache has literally zero authentication or protection from any user
  on the system.  So this feature should be ported in from keystone
  middleware into keystone.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1578466/+subscriptions