)]}'
{"security-guide/ch_identity.xml":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"51a9dff6f86c3223a37c123814d655d82af745c9","unresolved":false,"context_lines":[{"line_number":259,"context_line":"  \u003csection xml:id\u003d\"identity-tokens\"\u003e"},{"line_number":260,"context_line":"    \u003ctitle\u003eTokens\u003c/title\u003e"},{"line_number":261,"context_line":"    \u003cpara\u003eTokens are generated for authorization and access to be used"},{"line_number":262,"context_line":"      internally in OpenStack once a user is authenticated.  A token can"},{"line_number":263,"context_line":"      have a variable life span, however since the release of OpenStack"},{"line_number":264,"context_line":"      Icehouse the default value for expiry has been reduced to one hour."},{"line_number":265,"context_line":"      The recommended expiry value should be set to a lower value, with"}],"source_content_type":"application/xml","patch_set":1,"id":"9a80dd14_f41e416f","line":262,"updated":"2015-03-12 23:24:33.000000000","message":"This seems a bit more clunky to me than the original. Maybe something like: \"Once a user is authenticated, a token is generated for authorization and access to an OpenStack environment.\"?","commit_id":"7b92adf2abc07d2f6c0afcd18d08dce41cce89af"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"51a9dff6f86c3223a37c123814d655d82af745c9","unresolved":false,"context_lines":[{"line_number":271,"context_line":"      hypervisor for local caching.\u003c/para\u003e"},{"line_number":272,"context_line":"      \u003cnote\u003e"},{"line_number":273,"context_line":"        \u003cpara\u003eThe default token lifespan has changed from 24 hours to 1"},{"line_number":274,"context_line":"          hour with the OpenStack Icehouse release.\u003c/para\u003e"},{"line_number":275,"context_line":"      \u003c/note\u003e"},{"line_number":276,"context_line":"    \u003cpara\u003eThe example below shows a PKI token. It should be noted that"},{"line_number":277,"context_line":"      token id values are typically 3500 bytes, however for this example"}],"source_content_type":"application/xml","patch_set":1,"id":"9a80dd14_b4520933","line":274,"updated":"2015-03-12 23:24:33.000000000","message":"I think this can be removed as it\u0027s mentioned above.","commit_id":"7b92adf2abc07d2f6c0afcd18d08dce41cce89af"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"51a9dff6f86c3223a37c123814d655d82af745c9","unresolved":false,"context_lines":[{"line_number":281,"context_line":"     passed within the structure of a larger context of an Identity service"},{"line_number":282,"context_line":"     response. These responses also provide a catalog of the various OpenStack"},{"line_number":283,"context_line":"     services, with each service listed with its name, access endpoints for"},{"line_number":284,"context_line":"     internal, admin, and public access.\u003c/para\u003e"},{"line_number":285,"context_line":"    \u003cpara\u003eThe Identity service supports token revocation. This"},{"line_number":286,"context_line":"      manifests as an API to revoke a token, to list revoked tokens"},{"line_number":287,"context_line":"      and individual OpenStack services that cache tokens to query for"}],"source_content_type":"application/xml","patch_set":1,"id":"9a80dd14_2f5a442a","line":284,"updated":"2015-03-12 23:24:33.000000000","message":"I think the two with\u0027s so close together are a bit redundant - maybe: \"that show each service with its name....\"?","commit_id":"7b92adf2abc07d2f6c0afcd18d08dce41cce89af"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":260,"context_line":"    \u003ctitle\u003eTokens\u003c/title\u003e"},{"line_number":261,"context_line":"    \u003cpara\u003eOnce a user is authenticated, a token is generated for"},{"line_number":262,"context_line":"      authorization and access to an OpenStack environment. A token can"},{"line_number":263,"context_line":"      have a variable life span, however since the release of OpenStack"},{"line_number":264,"context_line":"      Icehouse the default value for expiry has been reduced to one hour."},{"line_number":265,"context_line":"      The recommended expiry value should be set to a lower value, with"},{"line_number":266,"context_line":"      caution exercised as some internal services will need sufficient"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_9b14e044","line":263,"updated":"2015-03-16 16:53:02.000000000","message":"span; however, since","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":261,"context_line":"    \u003cpara\u003eOnce a user is authenticated, a token is generated for"},{"line_number":262,"context_line":"      authorization and access to an OpenStack environment. A token can"},{"line_number":263,"context_line":"      have a variable life span, however since the release of OpenStack"},{"line_number":264,"context_line":"      Icehouse the default value for expiry has been reduced to one hour."},{"line_number":265,"context_line":"      The recommended expiry value should be set to a lower value, with"},{"line_number":266,"context_line":"      caution exercised as some internal services will need sufficient"},{"line_number":267,"context_line":"      time to complete their work. In the event that the token expires"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_5b1ee85f","line":264,"updated":"2015-03-16 16:53:02.000000000","message":"Icehouse,","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":262,"context_line":"      authorization and access to an OpenStack environment. A token can"},{"line_number":263,"context_line":"      have a variable life span, however since the release of OpenStack"},{"line_number":264,"context_line":"      Icehouse the default value for expiry has been reduced to one hour."},{"line_number":265,"context_line":"      The recommended expiry value should be set to a lower value, with"},{"line_number":266,"context_line":"      caution exercised as some internal services will need sufficient"},{"line_number":267,"context_line":"      time to complete their work. In the event that the token expires"},{"line_number":268,"context_line":"      too early the cloud may become unresponsive or stop providing"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_fbfb1cbb","line":265,"updated":"2015-03-16 16:53:02.000000000","message":"Set the expiry time to a lower value that allows enough time for internal services to complete tasks.","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":264,"context_line":"      Icehouse the default value for expiry has been reduced to one hour."},{"line_number":265,"context_line":"      The recommended expiry value should be set to a lower value, with"},{"line_number":266,"context_line":"      caution exercised as some internal services will need sufficient"},{"line_number":267,"context_line":"      time to complete their work. In the event that the token expires"},{"line_number":268,"context_line":"      too early the cloud may become unresponsive or stop providing"},{"line_number":269,"context_line":"      services. An example of expended time during use would be the time"},{"line_number":270,"context_line":"      needed by the Compute service to transfer a disk image onto the"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_7bde4c3f","line":267,"updated":"2015-03-16 16:53:02.000000000","message":"If the token expires before tasks complete, ...","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":269,"context_line":"      services. An example of expended time during use would be the time"},{"line_number":270,"context_line":"      needed by the Compute service to transfer a disk image onto the"},{"line_number":271,"context_line":"      hypervisor for local caching.\u003c/para\u003e"},{"line_number":272,"context_line":"    \u003cpara\u003eThe example below shows a PKI token. It should be noted that"},{"line_number":273,"context_line":"      token id values are typically 3500 bytes, however for this example"},{"line_number":274,"context_line":"      the value has been truncated.\u003c/para\u003e"},{"line_number":275,"context_line":"    \u003cprogramlisting language\u003d\"json\"\u003e\u003cxi:include href\u003d\"http://git.openstack.org/cgit/openstack/openstack-manuals/plain/doc/common/samples/token.json\" parse\u003d\"text\"/\u003e\u003c/programlisting\u003e"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_9ba4e0a6","line":272,"updated":"2015-03-16 16:53:02.000000000","message":"The following example shows a PKI token. Note that ...","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":270,"context_line":"      needed by the Compute service to transfer a disk image onto the"},{"line_number":271,"context_line":"      hypervisor for local caching.\u003c/para\u003e"},{"line_number":272,"context_line":"    \u003cpara\u003eThe example below shows a PKI token. It should be noted that"},{"line_number":273,"context_line":"      token id values are typically 3500 bytes, however for this example"},{"line_number":274,"context_line":"      the value has been truncated.\u003c/para\u003e"},{"line_number":275,"context_line":"    \u003cprogramlisting language\u003d\"json\"\u003e\u003cxi:include href\u003d\"http://git.openstack.org/cgit/openstack/openstack-manuals/plain/doc/common/samples/token.json\" parse\u003d\"text\"/\u003e\u003c/programlisting\u003e"},{"line_number":276,"context_line":"    \u003cpara\u003eIt should be noted that during this process the token is often"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_fbbcfcb6","line":273,"updated":"2015-03-16 16:53:02.000000000","message":"token ID values are typically 3500 bytes. In this example, ...","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":273,"context_line":"      token id values are typically 3500 bytes, however for this example"},{"line_number":274,"context_line":"      the value has been truncated.\u003c/para\u003e"},{"line_number":275,"context_line":"    \u003cprogramlisting language\u003d\"json\"\u003e\u003cxi:include href\u003d\"http://git.openstack.org/cgit/openstack/openstack-manuals/plain/doc/common/samples/token.json\" parse\u003d\"text\"/\u003e\u003c/programlisting\u003e"},{"line_number":276,"context_line":"    \u003cpara\u003eIt should be noted that during this process the token is often"},{"line_number":277,"context_line":"     passed within the structure of a larger context of an Identity service"},{"line_number":278,"context_line":"     response. These responses also provide a catalog of the various OpenStack"},{"line_number":279,"context_line":"     services, with each service listed including name, access endpoints for"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_3b305455","line":276,"updated":"2015-03-16 16:53:02.000000000","message":"The token ...","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"3609d72760decbf7677d00bad607a10ffaab4e08","unresolved":false,"context_lines":[{"line_number":276,"context_line":"    \u003cpara\u003eIt should be noted that during this process the token is often"},{"line_number":277,"context_line":"     passed within the structure of a larger context of an Identity service"},{"line_number":278,"context_line":"     response. These responses also provide a catalog of the various OpenStack"},{"line_number":279,"context_line":"     services, with each service listed including name, access endpoints for"},{"line_number":280,"context_line":"     internal, admin, and public access.\u003c/para\u003e"},{"line_number":281,"context_line":"    \u003cpara\u003eThe Identity service supports token revocation. This"},{"line_number":282,"context_line":"      manifests as an API to revoke a token, to list revoked tokens"}],"source_content_type":"application/xml","patch_set":2,"id":"9a80dd14_7b848cd2","line":279,"updated":"2015-03-16 16:53:02.000000000","message":"Prior version of sentence was better. \"Each service is listed with its name, access endpoints ...\"","commit_id":"46ace66abaa8642d80cbbae3428c421fc164409d"}]}