OpenStack Identity (keystone)

  1. Bug #1634746
  2. Comment #6

Comment 6 for bug 1634746

Revision history for this message
Lance Bragstad (lbragstad) wrote : Re: check revocation too slow

Every time a new revocation event is created - the sql driver will remove expired revocation events [0]. Is this true for your deployment? It is my understanding that revocation events should expire after some time.

[0] https://github.com/openstack/keystone/blob/e49a95ff6e25c25e6c6c5ceb6350666e35056dd3/keystone/revoke/backends/sql.py#L70-L91