)]}'
{"doc/source/admin/identity-token-binding.rst":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f10b9f8331cacae58544afe0d681018e16449503","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Configure Identity service for token binding"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Token binding embeds information from an external authentication"},{"line_number":6,"context_line":"mechanism, such as a Kerberos server or X.509 certificate, inside a"},{"line_number":7,"context_line":"token. By using token binding, a client can enforce the use of a"},{"line_number":8,"context_line":"specified external authentication mechanism with the token. This"}],"source_content_type":"text/x-rst","patch_set":2,"id":"df7087c5_89820ec8","line":5,"updated":"2018-03-07 21:13:48.000000000","message":"None of the upstream token providers actually support token binding. This kind of went away when we removed the UUID token provider. But I suppose someone could still leverage it if they write their own token provider and setup configuration for token binding.\n\nWe should probably clarify that in a subsequent patch.","commit_id":"c7ef44803501b0204f71ab81d577a1c0e7b760fc"},{"author":{"_account_id":15054,"name":"wangxiyuan","email":"wangxiyuan1007@gmail.com","username":"wangxiyuan"},"change_message_id":"7b040fef87fa13bdffbce33a4bab21c5aa567552","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Configure Identity service for token binding"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Token binding embeds information from an external authentication"},{"line_number":6,"context_line":"mechanism, such as a Kerberos server or X.509 certificate, inside a"},{"line_number":7,"context_line":"token. By using token binding, a client can enforce the use of a"},{"line_number":8,"context_line":"specified external authentication mechanism with the token. This"}],"source_content_type":"text/x-rst","patch_set":2,"id":"df7087c5_f504bcc8","line":5,"in_reply_to":"df7087c5_89820ec8","updated":"2018-03-08 02:01:15.000000000","message":"good point.  https://github.com/openstack/keystone/blob/master/doc/source/admin/token-support-matrix.ini#L111","commit_id":"c7ef44803501b0204f71ab81d577a1c0e7b760fc"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"1e8ac44dac50b6e2256411515fa6cdd7e8853d4f","unresolved":false,"context_lines":[{"line_number":63,"context_line":"       [token]"},{"line_number":64,"context_line":"       enforce_token_bind \u003d x509"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"*Do not* set ``enforce_token_bind \u003d named`` as there is not an authentication"},{"line_number":67,"context_line":"mechanism called ``named``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"df7087c5_44885dc5","line":67,"range":{"start_line":66,"start_character":0,"end_line":67,"end_character":27},"updated":"2018-03-07 22:08:04.000000000","message":"I see that we had this in the other file, but what does this mean? Was `named` a thing in the past?","commit_id":"c7ef44803501b0204f71ab81d577a1c0e7b760fc"}],"doc/source/configuration.rst":[{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"11ee314dc1c7d5991b6f106826c57fbd9b7041ff","unresolved":false,"context_lines":[{"line_number":496,"context_line":"    [token]"},{"line_number":497,"context_line":"    enforce_token_bind \u003d kerberos"},{"line_number":498,"context_line":""},{"line_number":499,"context_line":"*Do not* set ``enforce_token_bind \u003d named`` as there is not an authentication"},{"line_number":500,"context_line":"mechanism called ``named``."},{"line_number":501,"context_line":""},{"line_number":502,"context_line":"Limiting list return size"},{"line_number":503,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3fa0c359_0a4635c1","side":"PARENT","line":500,"range":{"start_line":499,"start_character":0,"end_line":500,"end_character":27},"updated":"2018-02-23 16:23:25.000000000","message":"This info is not included in [0], is this something we want to make sure we move over, or is this unneeded?\n\n[0] https://github.com/openstack/keystone/blob/master/doc/source/admin/identity-token-binding.rst","commit_id":"1175a356fc71036b38c41025f5a90e16f91bbc98"}]}