yahoo-eng-team team mailing list archive

[Guang Yee <1810485@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Looks like the description for domain re-enable is incorrect.

https://developer.openstack.org/api-ref/identity/v3/?expanded=update-
domain-detail#domains

"Users can only authorize against an enabled domain (and any of its
projects). In addition, users can only authenticate if the domain that
owns them is also enabled. Disabling a domain prevents both of these
things. When you disable a domain, all tokens that are authorized for
that domain become no longer valid. If you reenable the domain, these
tokens are not re-enabled."

Fernet token validations are real time. Disabling and subsequently re-
enabling the domain will not invalidate the token that was issued prior
to disabling the domain.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1810485

Title:
  incorrect API doc description on domain reenablement

Status in OpenStack Identity (keystone):
  New

Bug description:
  Looks like the description for domain re-enable is incorrect.

  https://developer.openstack.org/api-ref/identity/v3/?expanded=update-
  domain-detail#domains

  "Users can only authorize against an enabled domain (and any of its
  projects). In addition, users can only authenticate if the domain that
  owns them is also enabled. Disabling a domain prevents both of these
  things. When you disable a domain, all tokens that are authorized for
  that domain become no longer valid. If you reenable the domain, these
  tokens are not re-enabled."

  Fernet token validations are real time. Disabling and subsequently re-
  enabling the domain will not invalidate the token that was issued
  prior to disabling the domain.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1810485/+subscriptions