[orchestration] attribute for deferred_auth_method

Bug #1429722 reported by Ethan Lynn
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack + Chef
Fix Released
Undecided
Ethan Lynn

Bug Description

The following key needs attribute in heat.conf

# Select deferred auth method, stored password or trusts. (string value)
#deferred_auth_method = password

And it's better to set to 'trusts' by default for following reasons:

- It's more secure, we won't have to store username/password anymore
- It's better for users, because they won't have to provide a username/password anymore, e.g the box in horizon where we force them to enter a password even though horizon is already passing us a token.

Key is defined here: https://github.com/openstack/heat/blob/fee393755065ad6f19faa956181c3ccfb9b09871/heat/common/config.py#L100

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cookbook-openstack-orchestration (master)

Fix proposed to branch: master
Review: https://review.openstack.org/162533

Changed in openstack-chef:
assignee: nobody → Ethan Lynn (ethanlynn)
status: New → In Progress
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cookbook-openstack-orchestration (master)

Reviewed: https://review.openstack.org/162533
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-orchestration/commit/?id=98b51e2e6464e6ca0210a7fd7b4bbd5b507de8f6
Submitter: Jenkins
Branch: master

commit 98b51e2e6464e6ca0210a7fd7b4bbd5b507de8f6
Author: Ethan Lynn <email address hidden>
Date: Mon Mar 9 21:59:56 2015 +0800

    Allow attribute for deferred_auth_method

    We should switch to using deferred_auth_method=trusts by default,
    for the following reasons:
    - It's more secure, we won't have to store username/password anymore
    - It's better for users, because they won't have to provide a
    username/password anymore, e.g the box in horizon where we force
    them to enter a password even though horizon is already passing
    us a token.

    Change-Id: I04634d065c785a13991a9a4ac76e544d7a6f34fe
    Closes-Bug: #1429722

Changed in openstack-chef:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/cookbook-openstack-orchestration ocata-eol

This issue was fixed in the openstack/cookbook-openstack-orchestration ocata-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.