)]}'
{"doc/source/configuration.rst":[{"author":{"_account_id":8533,"name":"Marcos Fermín Lobo","email":"lobo@lukos.org","username":"mlobo"},"change_message_id":"7545cb17a8b6258bba6146778dd80cb5eeb6026b","unresolved":false,"context_lines":[{"line_number":597,"context_line":"^^^^^^^^^^^^^"},{"line_number":598,"context_line":""},{"line_number":599,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":600,"context_line":"under the [ssl] section and remember to configure the endpoint to listen on the "},{"line_number":601,"context_line":"corresponding secure port e.g. HTTPS instead HTTP."},{"line_number":602,"context_line":"SSL configuration example using the included sample certificates::"},{"line_number":603,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3ae8d1ca_318f7225","line":600,"updated":"2014-05-27 06:50:26.000000000","message":"I think would be good explain if the change of the protocol is only for Identity service or for all services on the keystone database.","commit_id":"33eb64ccdc84a6e9139d64fa42929746b91a6bbc"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":598,"context_line":""},{"line_number":599,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":600,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":601,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":602,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":603,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":604,"context_line":"result in registering the endpoint for the image service within the identity "}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_86ac39a2","line":601,"updated":"2014-05-29 05:26:25.000000000","message":"This reads funny.. I think you are trying to say that when configuring an endpoint, use HTTPS instead of HTTP.\n\nBut it sounds like you\u0027re telling the reader that HTTPS is a port \u003d\\\n\nSuggest re-wording it to:\n\nTo enable SSL modify the etc/keystone.conf file accordingly under the [ssl] section. When configuring the endpoint of the identity service, remember to use HTTPS instead of HTTP.\n\nalso, some white space","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":599,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":600,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":601,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":602,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":603,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":604,"context_line":"result in registering the endpoint for the image service within the identity "},{"line_number":605,"context_line":"service with HTTPS."}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_86b199e3","line":602,"updated":"2014-05-29 05:26:25.000000000","message":"personal preference - avoid the use of \"you\".\n\nWhen registering other endpoints configure the endpoints of the services with ...","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":600,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":601,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":602,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":603,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":604,"context_line":"result in registering the endpoint for the image service within the identity "},{"line_number":605,"context_line":"service with HTTPS."},{"line_number":606,"context_line":"SSL configuration example using the included sample certificates::"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_c6d1e1fc","line":603,"updated":"2014-05-29 05:26:25.000000000","message":"grammatically, when using e.g. try to wrap it in commas.\n\nfor example: \n\nWhen registering other endpoints configure the endpoints of the services with the correct protocol, e.g., running the image service listening on SSL will result in registering the endpoint for the image service within the identity service with HTTPS.\n\nor something like that.","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":601,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":602,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":603,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":604,"context_line":"result in registering the endpoint for the image service within the identity "},{"line_number":605,"context_line":"service with HTTPS."},{"line_number":606,"context_line":"SSL configuration example using the included sample certificates::"},{"line_number":607,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_c6f8017f","line":604,"updated":"2014-05-29 05:26:25.000000000","message":"white space","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":929,"context_line":"    We\u0027re providing the default OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT values"},{"line_number":930,"context_line":"    from ``keystone.conf`` to connect to the Keystone service. If you changed"},{"line_number":931,"context_line":"    those values, or deployed Keystone to a different endpoint, you will need"},{"line_number":932,"context_line":"    to change the provided command accordingly. If you configured SSL then use"},{"line_number":933,"context_line":"    HTTPS instead of HTTP."},{"line_number":934,"context_line":""},{"line_number":935,"context_line":"Initializing Keystone"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_8636f950","line":932,"updated":"2014-05-29 05:26:25.000000000","message":"personal preference - try to avoid \u0027you\u0027, I realize it\u0027s used 2 lines up :(\n\nIf SSL is configured then use HTTPS instead of HTTP.","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ff907a01cc7e0d73d314c33569c91e11fa3ae738","unresolved":false,"context_lines":[{"line_number":1010,"context_line":"``user-list`` and ``tenant-create`` can be invoked as follows::"},{"line_number":1011,"context_line":""},{"line_number":1012,"context_line":"    # Using token auth env variables"},{"line_number":1013,"context_line":"    # remember to use HTTPS instead of HTTP when using SSL"},{"line_number":1014,"context_line":"    export OS_SERVICE_ENDPOINT\u003dhttp://127.0.0.1:35357/v2.0/"},{"line_number":1015,"context_line":"    export OS_SERVICE_TOKEN\u003dsecrete_token"},{"line_number":1016,"context_line":"    keystone user-list"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3ae8d1ca_06f3c99e","line":1013,"updated":"2014-05-29 05:26:25.000000000","message":"capital R for Remember","commit_id":"b5db7cd5fd11fe67686a4c00a52be58a943000bb"},{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"c2b20b0f9f721d07e9a6ee1e87155bbde34221ef","unresolved":false,"context_lines":[{"line_number":1024,"context_line":"``user-list`` and ``tenant-create`` can be invoked as follows::"},{"line_number":1025,"context_line":""},{"line_number":1026,"context_line":"    # Using token auth env variables"},{"line_number":1027,"context_line":"    # remember to use HTTPS instead of HTTP when using SSL"},{"line_number":1028,"context_line":"    export OS_SERVICE_ENDPOINT\u003dhttp://127.0.0.1:35357/v2.0/"},{"line_number":1029,"context_line":"    export OS_SERVICE_TOKEN\u003dsecrete_token"},{"line_number":1030,"context_line":"    keystone user-list"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_1aefecb1","line":1027,"updated":"2014-05-30 03:20:57.000000000","message":"Also need to add, if you use SSL,  cacert param or insecure option should be used with keystone command line client","commit_id":"b54901dcb156ed98df356dc3135b816c0ffa8145"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f42d0758cbb3da91429bd47d117e0fee2b1adc1b","unresolved":false,"context_lines":[{"line_number":612,"context_line":""},{"line_number":613,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":614,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":615,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":616,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":617,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":618,"context_line":"result in registering the endpoint for the image service within the identity "}],"source_content_type":"text/x-rst","patch_set":4,"id":"1ae5cdf2_eca6b352","line":615,"updated":"2014-06-02 20:16:55.000000000","message":"HTTPS instead of HTTP.*","commit_id":"5e8dda08778724bc2d975727860fee39748d5abc"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f42d0758cbb3da91429bd47d117e0fee2b1adc1b","unresolved":false,"context_lines":[{"line_number":615,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP. "},{"line_number":616,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":617,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":618,"context_line":"result in registering the endpoint for the image service within the identity "},{"line_number":619,"context_line":"service with HTTPS."},{"line_number":620,"context_line":"SSL configuration example using the included sample certificates::"},{"line_number":621,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"1ae5cdf2_acacab36","line":618,"updated":"2014-06-02 20:16:55.000000000","message":"remove trailing whitespace","commit_id":"5e8dda08778724bc2d975727860fee39748d5abc"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"7be8fb3ec28462e324162a3012c9339d38bc91fa","unresolved":false,"context_lines":[{"line_number":943,"context_line":"    We\u0027re providing the default OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT values"},{"line_number":944,"context_line":"    from ``keystone.conf`` to connect to the Keystone service. If you changed"},{"line_number":945,"context_line":"    those values, or deployed Keystone to a different endpoint, you will need"},{"line_number":946,"context_line":"    to change the provided command accordingly. If you configured SSL then use"},{"line_number":947,"context_line":"    HTTPS instead of HTTP."},{"line_number":948,"context_line":""},{"line_number":949,"context_line":"Initializing Keystone"}],"source_content_type":"text/x-rst","patch_set":5,"id":"1ae5cdf2_201bed73","line":946,"updated":"2014-06-04 18:26:23.000000000","message":"Suggest minor rephrasing (something like):\n\nIf Keystone is configured to for SSL use HTTPS instead of HTTP","commit_id":"8d521962a4a2c52ea500ff2b4c4d3988899d0891"},{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"751a2d531124296b2b5d9f10845a4810c6d50d66","unresolved":false,"context_lines":[{"line_number":1043,"context_line":"    export OS_PASSWORD\u003dsecrete"},{"line_number":1044,"context_line":"    export OS_TENANT_NAME\u003dadmin"},{"line_number":1045,"context_line":"    # If you have configured SSL and you do not want --insecure argument"},{"line_number":1046,"context_line":"    export OS_CACERT\u003d/path/to/certificate.pem"},{"line_number":1047,"context_line":"    keystone user-list"},{"line_number":1048,"context_line":"    keystone tenant-create --name\u003ddemo"},{"line_number":1049,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"1ae5cdf2_4a7686d8","line":1046,"updated":"2014-06-03 17:02:17.000000000","message":"I\u0027m not sure whether this is required, but looking at the most of the support questions, I think it is better to add it.\n\nIf the hostname of  keystone doesn\u0027t match CN field in the certificate, then you need to use --insecure for ssl endpoints.  This is mostly true for self signed certs generated by keystone-mange","commit_id":"8d521962a4a2c52ea500ff2b4c4d3988899d0891"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"ccfba456da3804637691475af65fa14d4240e18b","unresolved":false,"context_lines":[{"line_number":613,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":614,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":615,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP."},{"line_number":616,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":617,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":618,"context_line":"result in registering the endpoint for the image service within the identity"},{"line_number":619,"context_line":"service with HTTPS."}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_b6336712","line":616,"updated":"2014-06-23 17:02:36.000000000","message":"Is this relevant to Keystone configuration?","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":8533,"name":"Marcos Fermín Lobo","email":"lobo@lukos.org","username":"mlobo"},"change_message_id":"75aacec3216172612a5cd702bd7b420a68b0abeb","unresolved":false,"context_lines":[{"line_number":613,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":614,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":615,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP."},{"line_number":616,"context_line":"If you register other endpoints you have to configure the endpoints of the services"},{"line_number":617,"context_line":"with the correct protocol e.g. running the image service listening on SSL will"},{"line_number":618,"context_line":"result in registering the endpoint for the image service within the identity"},{"line_number":619,"context_line":"service with HTTPS."}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_f66066d2","line":616,"in_reply_to":"1ae5cdf2_b6336712","updated":"2014-06-24 14:27:47.000000000","message":"David, I\u0027m agree with you that it is not a main topic for keystone configuration but, in my opinion, it is useful. Maybe we can write it like a note, what do you thing about it?","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"8fce8d3d26b931bbd8d36c6c6b6b31d3f4b0450c","unresolved":false,"context_lines":[{"line_number":625,"context_line":"    keyfile \u003d \u003cpath to keystonekey.pem\u003e"},{"line_number":626,"context_line":"    ca_certs \u003d \u003cpath to ca.pem\u003e"},{"line_number":627,"context_line":"    ca_key \u003d \u003cpath to cakey.pem\u003e"},{"line_number":628,"context_line":"    cert_required \u003d False"},{"line_number":629,"context_line":""},{"line_number":630,"context_line":"* ``enable``:  True enables SSL.  Defaults to False."},{"line_number":631,"context_line":"* ``certfile``:  Path to Keystone public certificate file."}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_92ecf3bc","line":628,"updated":"2014-06-05 16:00:23.000000000","message":"ca_key is not required. There is already a bug for this.  Imagine if you get a cert from verisign, you can get their public ca cert, but you can\u0027t get the key.","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":1057,"name":"Andre Naehring","email":"naehring@b1-systems.de","username":"naehring"},"change_message_id":"6293679f96ce6d3c1e1511e6c4812b992212a48d","unresolved":false,"context_lines":[{"line_number":625,"context_line":"    keyfile \u003d \u003cpath to keystonekey.pem\u003e"},{"line_number":626,"context_line":"    ca_certs \u003d \u003cpath to ca.pem\u003e"},{"line_number":627,"context_line":"    ca_key \u003d \u003cpath to cakey.pem\u003e"},{"line_number":628,"context_line":"    cert_required \u003d False"},{"line_number":629,"context_line":""},{"line_number":630,"context_line":"* ``enable``:  True enables SSL.  Defaults to False."},{"line_number":631,"context_line":"* ``certfile``:  Path to Keystone public certificate file."}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_fc2df7a8","line":628,"in_reply_to":"1ae5cdf2_92ecf3bc","updated":"2014-06-06 06:56:10.000000000","message":"The example context is correct, some lines above there is the description \"When using signing certificate issued by an external CA, you do not need to\nspecify ``key_size``, ``valid_days`` and ``ca_key`` as they \nwill be ignored.\" and the SSL configuration you are adressing here says: \"SSL configuration example using the included sample certificates::\" \nSo your mentioned \"ca_key\" is required here.","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":220,"name":"Haneef Ali","email":"haneef.ali@hp.com","username":"haneef"},"change_message_id":"7983633cdde1b193bc2080a81ec51b57b136f0d2","unresolved":false,"context_lines":[{"line_number":625,"context_line":"    keyfile \u003d \u003cpath to keystonekey.pem\u003e"},{"line_number":626,"context_line":"    ca_certs \u003d \u003cpath to ca.pem\u003e"},{"line_number":627,"context_line":"    ca_key \u003d \u003cpath to cakey.pem\u003e"},{"line_number":628,"context_line":"    cert_required \u003d False"},{"line_number":629,"context_line":""},{"line_number":630,"context_line":"* ``enable``:  True enables SSL.  Defaults to False."},{"line_number":631,"context_line":"* ``certfile``:  Path to Keystone public certificate file."}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_c825a7af","line":628,"in_reply_to":"1ae5cdf2_fc2df7a8","updated":"2014-06-09 03:34:32.000000000","message":"Even for included sample certs you don\u0027t need that. If you look at the code, it is used  by keystone-manage tool which is not part of the keystone server, and it is  an external utility for dev/test. You don\u0027t want to include the configuration for the external utility in keystone.conf\n\nIn other words,  once you have generated the self signed certs, remove cert_key ,key_size from the configuration file  It will work.  Ideally keystone-mange should take the key size as command line arg.\n\nSince keystone has this, other projects such as devstack, tripleo have this in their configuration.","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"ccfba456da3804637691475af65fa14d4240e18b","unresolved":false,"context_lines":[{"line_number":1030,"context_line":"    keystone user-list"},{"line_number":1031,"context_line":"    keystone tenant-create --name\u003ddemo"},{"line_number":1032,"context_line":""},{"line_number":1033,"context_line":"    # If you have configured SSL, you should use --insecure argument"},{"line_number":1034,"context_line":"    keystone --insecure user-list"},{"line_number":1035,"context_line":"    keystone --insecure tenant-create --name\u003ddemo"},{"line_number":1036,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_36aaf71a","line":1033,"updated":"2014-06-23 17:02:36.000000000","message":"Why would you do this? Are you assuming the cert is invalid? I don\u0027t think your ever be a recommendation. Maybe a note saying that if a user is not using a real cert this is necessary, but we should stress that they should never be used in a real environment.","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":8533,"name":"Marcos Fermín Lobo","email":"lobo@lukos.org","username":"mlobo"},"change_message_id":"89af30818f6c4f79f17b0a926ab5212ae10756a0","unresolved":false,"context_lines":[{"line_number":1030,"context_line":"    keystone user-list"},{"line_number":1031,"context_line":"    keystone tenant-create --name\u003ddemo"},{"line_number":1032,"context_line":""},{"line_number":1033,"context_line":"    # If you have configured SSL, you should use --insecure argument"},{"line_number":1034,"context_line":"    keystone --insecure user-list"},{"line_number":1035,"context_line":"    keystone --insecure tenant-create --name\u003ddemo"},{"line_number":1036,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"1ae5cdf2_53104cab","line":1033,"in_reply_to":"1ae5cdf2_36aaf71a","updated":"2014-06-24 14:18:21.000000000","message":"You are right David, the --insecure argument should be explained in a better way.","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"05c062ada04cd0fc0b9814c19770b55ab1983f4c","unresolved":false,"context_lines":[{"line_number":1042,"context_line":"    export OS_USERNAME\u003dadmin"},{"line_number":1043,"context_line":"    export OS_PASSWORD\u003dsecrete"},{"line_number":1044,"context_line":"    export OS_TENANT_NAME\u003dadmin"},{"line_number":1045,"context_line":"    # If you have configured SSL and you do not want --insecure argument"},{"line_number":1046,"context_line":"    export OS_CACERT\u003d/path/to/certificate.pem"},{"line_number":1047,"context_line":"    keystone user-list"},{"line_number":1048,"context_line":"    keystone tenant-create --name\u003ddemo"}],"source_content_type":"text/x-rst","patch_set":6,"id":"baada198_2d9ce9bf","line":1045,"updated":"2014-07-11 23:14:38.000000000","message":"Rather advise exportin OS_CACERT always?","commit_id":"1fe761147b9b290d20d7de2157505ddd5065a460"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"40b18eb36445f47438a1c0ccfa04fca33ed57b7c","unresolved":false,"context_lines":[{"line_number":647,"context_line":"  ``/etc/keystone/ssl/certs/cakey.pem``."},{"line_number":648,"context_line":""},{"line_number":649,"context_line":"Remember to configure the endpoint of the identity service to listen on the"},{"line_number":650,"context_line":"corresponding secure port (for example, HTTPS instead HTTP). "},{"line_number":651,"context_line":""},{"line_number":652,"context_line":"Generating SSL certificates"},{"line_number":653,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":7,"id":"baada198_ea0fbe86","line":650,"updated":"2014-07-16 08:28:22.000000000","message":"whitespace","commit_id":"37ffd295d0240e7d8ffd2a704eb2ee35e4b0fc49"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"7a93bf1b9e6a7d23fb152b2e476ada8583bfab3e","unresolved":false,"context_lines":[{"line_number":75,"context_line":"* ``[sql]`` - optional storage backend configuration"},{"line_number":76,"context_line":"* ``[ec2]`` - Amazon EC2 authentication driver configuration"},{"line_number":77,"context_line":"* ``[s3]`` - Amazon S3 authentication driver configuration."},{"line_number":78,"context_line":"* ``[oauth1]`` - OAuth 1.0a system driver configuration"},{"line_number":79,"context_line":"* ``[identity]`` - identity system driver configuration"},{"line_number":80,"context_line":"* ``[catalog]`` - service catalog driver configuration"},{"line_number":81,"context_line":"* ``[token]`` - token driver \u0026 token provider configuration"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_aa2a142d","line":78,"updated":"2014-07-16 14:28:03.000000000","message":"This is not mentioned in the commit message","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"96426f28080f5e8a0eb15112e349b0feaf3e0cc4","unresolved":false,"context_lines":[{"line_number":75,"context_line":"* ``[sql]`` - optional storage backend configuration"},{"line_number":76,"context_line":"* ``[ec2]`` - Amazon EC2 authentication driver configuration"},{"line_number":77,"context_line":"* ``[s3]`` - Amazon S3 authentication driver configuration."},{"line_number":78,"context_line":"* ``[oauth1]`` - OAuth 1.0a system driver configuration"},{"line_number":79,"context_line":"* ``[identity]`` - identity system driver configuration"},{"line_number":80,"context_line":"* ``[catalog]`` - service catalog driver configuration"},{"line_number":81,"context_line":"* ``[token]`` - token driver \u0026 token provider configuration"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_209d2758","line":78,"in_reply_to":"baada198_aa2a142d","updated":"2014-07-17 06:35:04.000000000","message":"separated patch","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"7a93bf1b9e6a7d23fb152b2e476ada8583bfab3e","unresolved":false,"context_lines":[{"line_number":108,"context_line":""},{"line_number":109,"context_line":".. NOTE::"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":"    This functionality is new in Juno."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"Keystone supports the option (disabled by default) to specify identity driver"},{"line_number":114,"context_line":"configurations on a domain by domain basis, allowing, for example, a specific"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_8afe30ad","line":111,"updated":"2014-07-16 14:28:03.000000000","message":"This is not mentioned in the commit message","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"7a93bf1b9e6a7d23fb152b2e476ada8583bfab3e","unresolved":false,"context_lines":[{"line_number":133,"context_line":".. NOTE::"},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"    Keystone does not support moving the contents of a domain (i.e. \"it\u0027s\""},{"line_number":136,"context_line":"    users and groups) from one backend to another, nor group membership across"},{"line_number":137,"context_line":"    backend boundaries."},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"Due to the need for user and group IDs to be unique across an OpenStack"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_0a2a202c","line":136,"updated":"2014-07-16 14:28:03.000000000","message":"This is not mentioned in the commit message","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"cdbb2a27273dcc4c56d888cb12728690cab60466","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"The use of a hash will ensure that if the public ID needs to be regenerated"},{"line_number":150,"context_line":"then the same public ID will be created.  This is useful if you are running"},{"line_number":151,"context_line":"multiple keystones and want to ensure the same ID would be generated whichever"},{"line_number":152,"context_line":"server you hit."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"While Keystone will dynamically maintain the identity mapping, including"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_bf012206","line":151,"updated":"2014-07-18 06:49:17.000000000","message":"capitalize","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":11717,"name":"Ryan Oshima","email":"ryan.oshima@hp.com","username":"RyanOshima"},"change_message_id":"31b8860f67b10f0d19d7f2e0ef9177df8d42c0ff","unresolved":false,"context_lines":[{"line_number":155,"context_line":"removing entries when entities are deleted via the Keystone, for those"},{"line_number":156,"context_line":"entities in backends that are managed outside of Keystone (e.g. a Read Only"},{"line_number":157,"context_line":"LDAP), Keystone will not know if entities have been deleted and hence will"},{"line_number":158,"context_line":"continue to carry stale identity mappings in its table.  While benign, keystone"},{"line_number":159,"context_line":"provides an ability for operators to purge the mapping table of such stale"},{"line_number":160,"context_line":"entries using the keystone-manage command, for example:"},{"line_number":161,"context_line":""}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_16ddb014","line":158,"updated":"2014-07-17 16:26:56.000000000","message":"\"keystone\"-\u003e\"Keystone\"","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"cdbb2a27273dcc4c56d888cb12728690cab60466","unresolved":false,"context_lines":[{"line_number":369,"context_line":"    e.g.: ``backend_argument \u003d host:localhost``"},{"line_number":370,"context_line":"* ``proxies`` - comma delimited list of `ProxyBackends`_ e.g. ``my.example.Proxy, my.example.Proxy2``"},{"line_number":371,"context_line":""},{"line_number":372,"context_line":"Current keystone systems that have caching capabilities:"},{"line_number":373,"context_line":"    * ``token``"},{"line_number":374,"context_line":"        The token system has a separate ``cache_time`` configuration option, that"},{"line_number":375,"context_line":"        can be set to a value above or below the global ``expiration_time`` default,"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_ff0b9a21","line":372,"updated":"2014-07-18 06:49:17.000000000","message":"capitalize","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":11333,"name":"David J Hu","email":"david.hu@hpe.com","username":"dhu"},"change_message_id":"233804d4c413fd5cd81c4650b35a718231b9aa7b","unresolved":false,"context_lines":[{"line_number":734,"context_line":"It is likely in a production environment that these certificates will be"},{"line_number":735,"context_line":"created and provided externally. Note that ``ssl_setup`` is a development tool"},{"line_number":736,"context_line":"and is only recommended for developments environment. We do not recommend using"},{"line_number":737,"context_line":"``ssl_setup`` for production environments."},{"line_number":738,"context_line":""},{"line_number":739,"context_line":""},{"line_number":740,"context_line":"User CRUD"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_42ae78e8","line":737,"updated":"2014-07-17 22:44:33.000000000","message":"Consider giving this \"note\" its own little paragraph and note it with\t\".. NOTE::\"","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"96426f28080f5e8a0eb15112e349b0feaf3e0cc4","unresolved":false,"context_lines":[{"line_number":774,"context_line":"to a domain that, rather than affect the domain itself, are instead inherited"},{"line_number":775,"context_line":"to all projects owned by theat domain.  This extension is disabled by default,"},{"line_number":776,"context_line":"but can be enabled by including the following in ``keystone.conf``::"},{"line_number":777,"context_line":"\u003e\u003e\u003e\u003e\u003e\u003e\u003e db68b8b... Add information regarding HTTPS for SSL enabled endpoints"},{"line_number":778,"context_line":""},{"line_number":779,"context_line":"    [os_inherit]"},{"line_number":780,"context_line":"    enabled \u003d True"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_6099df78","line":777,"updated":"2014-07-17 06:35:04.000000000","message":"unresolved conflict","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"96426f28080f5e8a0eb15112e349b0feaf3e0cc4","unresolved":false,"context_lines":[{"line_number":1400,"context_line":""},{"line_number":1401,"context_line":"As an alternative to the SQL Database backing store, Keystone can use a"},{"line_number":1402,"context_line":"directory server to provide the Identity service.  An example Schema"},{"line_number":1403,"context_line":"for OpenStack would look like this::"},{"line_number":1404,"context_line":""},{"line_number":1405,"context_line":"  dn: dc\u003dopenstack,dc\u003dorg"},{"line_number":1406,"context_line":"  dc: openstack"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_00a2e399","line":1403,"updated":"2014-07-17 06:35:04.000000000","message":"separate patch.","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"7a93bf1b9e6a7d23fb152b2e476ada8583bfab3e","unresolved":false,"context_lines":[{"line_number":1517,"context_line":"  user_enabled_default      \u003d 512"},{"line_number":1518,"context_line":"  user_attribute_ignore     \u003d tenant_id,tenants"},{"line_number":1519,"context_line":"  project_objectclass       \u003d groupOfNames"},{"line_number":1520,"context_line":"  project_id_attribute      \u003d cn"},{"line_number":1521,"context_line":"  project_member_attribute  \u003d member"},{"line_number":1522,"context_line":"  project_name_attribute    \u003d ou"},{"line_number":1523,"context_line":"  project_desc_attribute    \u003d description"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_4a1b381c","line":1520,"updated":"2014-07-16 14:28:03.000000000","message":"This is not mentioned in the commit message","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"96426f28080f5e8a0eb15112e349b0feaf3e0cc4","unresolved":false,"context_lines":[{"line_number":1517,"context_line":"  user_enabled_default      \u003d 512"},{"line_number":1518,"context_line":"  user_attribute_ignore     \u003d tenant_id,tenants"},{"line_number":1519,"context_line":"  project_objectclass       \u003d groupOfNames"},{"line_number":1520,"context_line":"  project_id_attribute      \u003d cn"},{"line_number":1521,"context_line":"  project_member_attribute  \u003d member"},{"line_number":1522,"context_line":"  project_name_attribute    \u003d ou"},{"line_number":1523,"context_line":"  project_desc_attribute    \u003d description"}],"source_content_type":"text/x-rst","patch_set":9,"id":"baada198_80dc331a","line":1520,"in_reply_to":"baada198_4a1b381c","updated":"2014-07-17 06:35:04.000000000","message":"+1","commit_id":"d0a256609a0f0521ad8e70c995c11bfe7cb412e8"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":"The use of a hash will ensure that if the public ID needs to be regenerated"},{"line_number":150,"context_line":"then the same public ID will be created.  This is useful if you are running"},{"line_number":151,"context_line":"multiple Keystones and want to ensure the same ID would be generated whichever"},{"line_number":152,"context_line":"server you hit."},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"While Keystone will dynamically maintain the identity mapping, including"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_65fdecb0","line":151,"updated":"2014-09-05 10:59:03.000000000","message":"I\u0027d say multiple Keystone instanes, not \"Keystones\".","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":155,"context_line":"removing entries when entities are deleted via the Keystone, for those"},{"line_number":156,"context_line":"entities in backends that are managed outside of Keystone (e.g. a Read Only"},{"line_number":157,"context_line":"LDAP), Keystone will not know if entities have been deleted and hence will"},{"line_number":158,"context_line":"continue to carry stale identity mappings in its table.  While benign, Keystone"},{"line_number":159,"context_line":"provides an ability for operators to purge the mapping table of such stale"},{"line_number":160,"context_line":"entries using the keystone-manage command, for example:"},{"line_number":161,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_e5b63cf8","line":158,"updated":"2014-09-05 10:59:03.000000000","message":"Being a non native English speaker I would rephrase the \"while benign\" to something more understandable.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":690,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":691,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":692,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP."},{"line_number":693,"context_line":"SSL configuration example using the included sample certificates::"},{"line_number":694,"context_line":""},{"line_number":695,"context_line":"    [ssl]"},{"line_number":696,"context_line":"    enable \u003d True"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_4548e8cb","line":693,"updated":"2014-09-05 10:59:03.000000000","message":"Where should it be configured?","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":11194,"name":"Christina Darretta","email":"darrettac@gmail.com","username":"ctina"},"change_message_id":"0f466ae2a8b048f1cc0dc5b67a56b00f4c942234","unresolved":false,"context_lines":[{"line_number":690,"context_line":"To enable SSL modify the etc/keystone.conf file accordingly"},{"line_number":691,"context_line":"under the [ssl] section and remember to configure the endpoint of the identity"},{"line_number":692,"context_line":"service to listen on the corresponding secure port e.g. HTTPS instead HTTP."},{"line_number":693,"context_line":"SSL configuration example using the included sample certificates::"},{"line_number":694,"context_line":""},{"line_number":695,"context_line":"    [ssl]"},{"line_number":696,"context_line":"    enable \u003d True"}],"source_content_type":"text/x-rst","patch_set":13,"id":"baa201ad_24c77897","line":693,"in_reply_to":"fa98f980_4548e8cb","updated":"2014-10-08 03:24:50.000000000","message":"\"When running keystone endpoint-create you\u0027ll need to make sure you specify https when passing in the --publicurl --adminurl and --internalurl parameters\"","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"2420944b16a31061cd07409f4a9bd33c436b3b57","unresolved":false,"context_lines":[{"line_number":717,"context_line":"  ``/CN\u003d\u003ckeystone ip\u003e``."},{"line_number":718,"context_line":""},{"line_number":719,"context_line":"Additionally the following values are used when creating the certificates. They"},{"line_number":720,"context_line":"can be removed from keystone.conf after generating the certificates"},{"line_number":721,"context_line":""},{"line_number":722,"context_line":"* ``key_size``: Key size to create. Defaults to 1024."},{"line_number":723,"context_line":"* ``ca_key``: The private key for the CA. Defaults to"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_dee2c200","line":720,"updated":"2014-09-08 00:48:48.000000000","message":"all of valid_days, cert_subject, key_size, and ca_key can be removed from keystone.conf after generating the certificates, so they shouldn\u0027t be in separate sections.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"2420944b16a31061cd07409f4a9bd33c436b3b57","unresolved":false,"context_lines":[{"line_number":724,"context_line":"  ``/etc/keystone/ssl/certs/cakey.pem``."},{"line_number":725,"context_line":""},{"line_number":726,"context_line":"Remember to configure the endpoint of the identity service to listen on the"},{"line_number":727,"context_line":"corresponding secure port (for example, HTTPS instead HTTP)."},{"line_number":728,"context_line":""},{"line_number":729,"context_line":"Generating SSL certificates"},{"line_number":730,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_5ebed2d5","line":727,"updated":"2014-09-08 00:48:48.000000000","message":"This should explain how to do it or point to existing documentation.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":724,"context_line":"  ``/etc/keystone/ssl/certs/cakey.pem``."},{"line_number":725,"context_line":""},{"line_number":726,"context_line":"Remember to configure the endpoint of the identity service to listen on the"},{"line_number":727,"context_line":"corresponding secure port (for example, HTTPS instead HTTP)."},{"line_number":728,"context_line":""},{"line_number":729,"context_line":"Generating SSL certificates"},{"line_number":730,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_2524c40b","line":727,"updated":"2014-09-05 10:59:03.000000000","message":"Where should it be configured?","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":11194,"name":"Christina Darretta","email":"darrettac@gmail.com","username":"ctina"},"change_message_id":"0f466ae2a8b048f1cc0dc5b67a56b00f4c942234","unresolved":false,"context_lines":[{"line_number":724,"context_line":"  ``/etc/keystone/ssl/certs/cakey.pem``."},{"line_number":725,"context_line":""},{"line_number":726,"context_line":"Remember to configure the endpoint of the identity service to listen on the"},{"line_number":727,"context_line":"corresponding secure port (for example, HTTPS instead HTTP)."},{"line_number":728,"context_line":""},{"line_number":729,"context_line":"Generating SSL certificates"},{"line_number":730,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^"}],"source_content_type":"text/x-rst","patch_set":13,"id":"baa201ad_844f4433","line":727,"in_reply_to":"fa98f980_5ebed2d5","updated":"2014-10-08 03:24:50.000000000","message":"\"When running keystone endpoint-create you\u0027ll need to make sure you specify https when passing in the --publicurl --adminurl and --internalurl parameters\"","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":743,"context_line":".. NOTE::"},{"line_number":744,"context_line":""},{"line_number":745,"context_line":"    ``ssl_setup`` is a development tool and is only recommended for"},{"line_number":746,"context_line":"    developments environment. We do not recommend using ``ssl_setup`` for"},{"line_number":747,"context_line":"    production environments."},{"line_number":748,"context_line":""},{"line_number":749,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_257a0424","line":746,"updated":"2014-09-05 10:59:03.000000000","message":"s/developments environment/development environments/","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":1037,"context_line":"    from ``keystone.conf`` to connect to the Keystone service. If you changed"},{"line_number":1038,"context_line":"    those values, or deployed Keystone to a different endpoint, you will need"},{"line_number":1039,"context_line":"    to change the provided command accordingly. If Keystone is configured for SSL use"},{"line_number":1040,"context_line":"    HTTPS instead of HTTP."},{"line_number":1041,"context_line":""},{"line_number":1042,"context_line":"Initializing Keystone"},{"line_number":1043,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_a57fd4de","line":1040,"updated":"2014-09-05 10:59:03.000000000","message":"\"you must use \u0027https\u0027 instead of \u0027http\u0027\".","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":1120,"context_line":".. code-block:: bash"},{"line_number":1121,"context_line":""},{"line_number":1122,"context_line":"    # Using token auth env variables"},{"line_number":1123,"context_line":"    # remember to use HTTPS instead of HTTP when using SSL"},{"line_number":1124,"context_line":"    $ export OS_SERVICE_ENDPOINT\u003dhttp://127.0.0.1:35357/v2.0/"},{"line_number":1125,"context_line":"    $ export OS_SERVICE_TOKEN\u003dsecrete_token"},{"line_number":1126,"context_line":"    $ keystone user-list"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_e5855ccf","line":1123,"updated":"2014-09-05 10:59:03.000000000","message":"\u0027https\u0027 instead of \u0027http\u0027.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"502233cd2b360742963b084c53337e4a8614813b","unresolved":false,"context_lines":[{"line_number":1126,"context_line":"    $ keystone user-list"},{"line_number":1127,"context_line":"    $ keystone tenant-create --name\u003ddemo"},{"line_number":1128,"context_line":""},{"line_number":1129,"context_line":"    # If you have configured SSL with certificates not signed by an official CA,"},{"line_number":1130,"context_line":"    # you can use --insecure argument. This should NOT be used in a real environment"},{"line_number":1131,"context_line":"    keystone --insecure user-list"},{"line_number":1132,"context_line":"    keystone --insecure tenant-create --name\u003ddemo"}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_a85032d5","line":1129,"updated":"2014-09-18 08:07:39.000000000","message":"There is no such an \"official CA\", but trusted and untrusted CA. I would rephrase it to something like \"If you are using certificates sigend by an untrusted CA (e.g. self signed certiciates)...)\" or something similar.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":1127,"context_line":"    $ keystone tenant-create --name\u003ddemo"},{"line_number":1128,"context_line":""},{"line_number":1129,"context_line":"    # If you have configured SSL with certificates not signed by an official CA,"},{"line_number":1130,"context_line":"    # you can use --insecure argument. This should NOT be used in a real environment"},{"line_number":1131,"context_line":"    keystone --insecure user-list"},{"line_number":1132,"context_line":"    keystone --insecure tenant-create --name\u003ddemo"},{"line_number":1133,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_256be41e","line":1130,"updated":"2014-09-05 10:59:03.000000000","message":"s/real/production/","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"2420944b16a31061cd07409f4a9bd33c436b3b57","unresolved":false,"context_lines":[{"line_number":1127,"context_line":"    $ keystone tenant-create --name\u003ddemo"},{"line_number":1128,"context_line":""},{"line_number":1129,"context_line":"    # If you have configured SSL with certificates not signed by an official CA,"},{"line_number":1130,"context_line":"    # you can use --insecure argument. This should NOT be used in a real environment"},{"line_number":1131,"context_line":"    keystone --insecure user-list"},{"line_number":1132,"context_line":"    keystone --insecure tenant-create --name\u003ddemo"},{"line_number":1133,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_fec6a667","line":1130,"updated":"2014-09-08 00:48:48.000000000","message":"suggest change \"can use\" to \"must use\"","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":11194,"name":"Christina Darretta","email":"darrettac@gmail.com","username":"ctina"},"change_message_id":"0f466ae2a8b048f1cc0dc5b67a56b00f4c942234","unresolved":false,"context_lines":[{"line_number":1133,"context_line":""},{"line_number":1134,"context_line":"    # Using token auth flags"},{"line_number":1135,"context_line":"    $ keystone --os-token\u003dsecrete --os-endpoint\u003dhttp://127.0.0.1:35357/v2.0/ user-list"},{"line_number":1136,"context_line":"    $ keystone --os-token\u003dsecrete --os-endpoint\u003dhttp://127.0.0.1:35357/v2.0/ tenant-create --name\u003ddemo"},{"line_number":1137,"context_line":""},{"line_number":1138,"context_line":"    # Using user + password + tenant_name env variables"},{"line_number":1139,"context_line":"    $ export OS_USERNAME\u003dadmin"}],"source_content_type":"text/x-rst","patch_set":13,"id":"baa201ad_e45730c8","line":1136,"updated":"2014-10-08 03:24:50.000000000","message":"You might want to point out that if you\u0027re using SSL the --os-endpoint will be \u0027https\u0027?","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"2420944b16a31061cd07409f4a9bd33c436b3b57","unresolved":false,"context_lines":[{"line_number":1139,"context_line":"    $ export OS_USERNAME\u003dadmin"},{"line_number":1140,"context_line":"    $ export OS_PASSWORD\u003dsecrete"},{"line_number":1141,"context_line":"    $ export OS_TENANT_NAME\u003dadmin"},{"line_number":1142,"context_line":"    $ export OS_CACERT\u003d/path/to/certificate.pem"},{"line_number":1143,"context_line":"    $ keystone user-list"},{"line_number":1144,"context_line":"    $ keystone tenant-create --name\u003ddemo"},{"line_number":1145,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_7eaab686","line":1142,"updated":"2014-09-08 00:48:48.000000000","message":"this should have a comment that this is only needed if using SSL.","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"},{"author":{"_account_id":91,"name":"Alvaro","email":"aloga@ifca.unican.es","username":"aloga"},"change_message_id":"f2e3fe92a5b9092c6d5c064457c0d50d9fd5a18d","unresolved":false,"context_lines":[{"line_number":1540,"context_line":"For additional information on LDAP connections, performance (such as slow"},{"line_number":1541,"context_line":"response time), or field mappings, setting ``debug_level`` in the [ldap]"},{"line_number":1542,"context_line":"section is used to enable debugging::"},{"line_number":1543,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":1544,"context_line":""},{"line_number":1545,"context_line":"  debug_level \u003d 4095"},{"line_number":1546,"context_line":""}],"source_content_type":"text/x-rst","patch_set":13,"id":"fa98f980_45ac688c","line":1543,"updated":"2014-09-05 10:59:03.000000000","message":"Why is this here?","commit_id":"3bcf0fb50a453c066d3a92eb074bb7e0e328703b"}]}