)]}'
{"doc/install-guide/section_keystone-verify.xml":[{"author":{"_account_id":7923,"name":"Gauvain Pocentek","email":"gauvainpocentek@gmail.com","username":"gpocentek"},"change_message_id":"ab084179a754c0ddde912dea494bf3b0d1728e28","unresolved":false,"context_lines":[{"line_number":13,"context_line":"        token mechanism:\u003c/para\u003e"},{"line_number":14,"context_line":"      \u003cpara\u003eEdit the"},{"line_number":15,"context_line":"        \u003cfilename os\u003d\"ubuntu;sles;opensuse\"\u003e/etc/keystone/keystone-paste.ini\u003c/filename\u003e"},{"line_number":16,"context_line":"        \u003cfilename os\u003d\"rhel;centos;fedora\"\u003e/usr/share/keystone/keystone-dist-paste.ini\u003c/filename\u003e"},{"line_number":17,"context_line":"        file and remove \u003cliteral\u003eadmin_token_auth\u003c/literal\u003e from the"},{"line_number":18,"context_line":"        \u003cliteral\u003e[pipeline:public_api]\u003c/literal\u003e,"},{"line_number":19,"context_line":"        \u003cliteral\u003e[pipeline:admin_api]\u003c/literal\u003e, and"}],"source_content_type":"application/xml","patch_set":1,"id":"7a016987_08dfc73a","line":16,"updated":"2015-05-22 19:36:39.000000000","message":"Problem with this is that it gets overwritten on package upgrade. Not sure if this is relevant for this guide though.","commit_id":"765f7db2b6f1f79b76ed5e33642e16671df2e15a"},{"author":{"_account_id":6772,"name":"Stephen Gordon","email":"sgordon@redhat.com","username":"sgordon"},"change_message_id":"f25393b427f4e57952ee573afa737d9db5950b69","unresolved":false,"context_lines":[{"line_number":13,"context_line":"        token mechanism:\u003c/para\u003e"},{"line_number":14,"context_line":"      \u003cpara\u003eEdit the"},{"line_number":15,"context_line":"        \u003cfilename os\u003d\"ubuntu;sles;opensuse\"\u003e/etc/keystone/keystone-paste.ini\u003c/filename\u003e"},{"line_number":16,"context_line":"        \u003cfilename os\u003d\"rhel;centos;fedora\"\u003e/usr/share/keystone/keystone-dist-paste.ini\u003c/filename\u003e"},{"line_number":17,"context_line":"        file and remove \u003cliteral\u003eadmin_token_auth\u003c/literal\u003e from the"},{"line_number":18,"context_line":"        \u003cliteral\u003e[pipeline:public_api]\u003c/literal\u003e,"},{"line_number":19,"context_line":"        \u003cliteral\u003e[pipeline:admin_api]\u003c/literal\u003e, and"}],"source_content_type":"application/xml","patch_set":1,"id":"7a016987_51532a17","line":16,"in_reply_to":"7a016987_08dfc73a","updated":"2015-05-22 21:26:01.000000000","message":"Clarifying expected behaviour in https://www.redhat.com/archives/rdo-list/2015-May/msg00233.html","commit_id":"765f7db2b6f1f79b76ed5e33642e16671df2e15a"},{"author":{"_account_id":6772,"name":"Stephen Gordon","email":"sgordon@redhat.com","username":"sgordon"},"change_message_id":"d12e0da8dbb1cb68c4dfbfa53ee93f0fd15144d7","unresolved":false,"context_lines":[{"line_number":13,"context_line":"        token mechanism:\u003c/para\u003e"},{"line_number":14,"context_line":"      \u003cpara\u003eEdit the"},{"line_number":15,"context_line":"        \u003cfilename os\u003d\"ubuntu;sles;opensuse\"\u003e/etc/keystone/keystone-paste.ini\u003c/filename\u003e"},{"line_number":16,"context_line":"        \u003cfilename os\u003d\"rhel;centos;fedora\"\u003e/usr/share/keystone/keystone-dist-paste.ini\u003c/filename\u003e"},{"line_number":17,"context_line":"        file and remove \u003cliteral\u003eadmin_token_auth\u003c/literal\u003e from the"},{"line_number":18,"context_line":"        \u003cliteral\u003e[pipeline:public_api]\u003c/literal\u003e,"},{"line_number":19,"context_line":"        \u003cliteral\u003e[pipeline:admin_api]\u003c/literal\u003e, and"}],"source_content_type":"application/xml","patch_set":1,"id":"7a016987_6df506ca","line":16,"in_reply_to":"7a016987_1cb6e9f8","updated":"2015-05-25 22:27:23.000000000","message":"Response and related Keystone patch from Alan Pevec here:\n\nhttps://www.redhat.com/archives/rdo-list/2015-May/msg00257.html\nhttps://review.openstack.org/#/c/185464/","commit_id":"765f7db2b6f1f79b76ed5e33642e16671df2e15a"},{"author":{"_account_id":9515,"name":"Matthew Kassawara","email":"mkassawara@gmail.com","username":"ionosphere80"},"change_message_id":"ee773b723d65b9f4894ab611d631f322f71752ea","unresolved":false,"context_lines":[{"line_number":13,"context_line":"        token mechanism:\u003c/para\u003e"},{"line_number":14,"context_line":"      \u003cpara\u003eEdit the"},{"line_number":15,"context_line":"        \u003cfilename os\u003d\"ubuntu;sles;opensuse\"\u003e/etc/keystone/keystone-paste.ini\u003c/filename\u003e"},{"line_number":16,"context_line":"        \u003cfilename os\u003d\"rhel;centos;fedora\"\u003e/usr/share/keystone/keystone-dist-paste.ini\u003c/filename\u003e"},{"line_number":17,"context_line":"        file and remove \u003cliteral\u003eadmin_token_auth\u003c/literal\u003e from the"},{"line_number":18,"context_line":"        \u003cliteral\u003e[pipeline:public_api]\u003c/literal\u003e,"},{"line_number":19,"context_line":"        \u003cliteral\u003e[pipeline:admin_api]\u003c/literal\u003e, and"}],"source_content_type":"application/xml","patch_set":1,"id":"7a016987_1cb6e9f8","line":16,"in_reply_to":"7a016987_51532a17","updated":"2015-05-22 22:12:27.000000000","message":"The keystone-dist.conf file references /usr/share/keystone/keystone-dist-paste.ini, so keystone simply ignores /etc/keystone/keystone-paste.ini. Editing keystone-dist-paste.ini requires fewer steps than copying /usr/share/keystone/keystone-dist-paste.ini to /etc/keystone/keystone-paste.ini, adjusting ownership/permissions, editing it to remove admin token support, and finally editing /etc/keystone/keystone.conf to use it. I also can\u0027t seem to determine how the RDO packages tell keystone to use the files in /usr/share/keystone.\n\nThanks for trying to get clarification, Steve. Ideally, the RDO packages should not include configuration files outside of /etc/$service.","commit_id":"765f7db2b6f1f79b76ed5e33642e16671df2e15a"},{"author":{"_account_id":6772,"name":"Stephen Gordon","email":"sgordon@redhat.com","username":"sgordon"},"change_message_id":"672acca45a0c31a9138b3613b77c788e3dd25fe1","unresolved":false,"context_lines":[{"line_number":13,"context_line":"        token mechanism:\u003c/para\u003e"},{"line_number":14,"context_line":"      \u003cpara\u003eEdit the"},{"line_number":15,"context_line":"        \u003cfilename os\u003d\"ubuntu;sles;opensuse\"\u003e/etc/keystone/keystone-paste.ini\u003c/filename\u003e"},{"line_number":16,"context_line":"        \u003cfilename os\u003d\"rhel;centos;fedora\"\u003e/usr/share/keystone/keystone-dist-paste.ini\u003c/filename\u003e"},{"line_number":17,"context_line":"        file and remove \u003cliteral\u003eadmin_token_auth\u003c/literal\u003e from the"},{"line_number":18,"context_line":"        \u003cliteral\u003e[pipeline:public_api]\u003c/literal\u003e,"},{"line_number":19,"context_line":"        \u003cliteral\u003e[pipeline:admin_api]\u003c/literal\u003e, and"}],"source_content_type":"application/xml","patch_set":1,"id":"7a016987_cddbda4e","line":16,"in_reply_to":"7a016987_6df506ca","updated":"2015-05-25 22:32:27.000000000","message":"Asked Alan for explicit clarification of what I believe he is saying here:\n\nhttps://www.redhat.com/archives/rdo-list/2015-May/msg00258.html","commit_id":"765f7db2b6f1f79b76ed5e33642e16671df2e15a"}]}