如何实现Openstack fernet token 解析

如何实现Openstack fernet token 解析

今天就跟大家聊聊有关如何实现Openstack fernet token 解析，可能很多人都不太了解，为了让大家更加了解，小编给大家总结了以下内容，希望大家根据这篇文章可以有所收获。

针对Newton 版本

Keystone.conf

1.expiration

#Theamountoftimethatatokenshouldremainvalid(inseconds).Drastically#reducingthisvaluemaybreak"long-running"operationsthatinvolvemultiple#servicestocoordinatetogether,andwillforceuserstoauthenticatewith#keystonemorefrequently.Drasticallyincreasingthisvaluewillincrease#loadonthe`[token]driver`,asmoretokenswillbesimultaneouslyvalid.#Keystonetokensarealsobearertokens,soashorterdurationwillalso#reducethepotentialsecurityimpactofacompromisedtoken.(integervalue)#Minimumvalue:0#Maximumvalue:9223372036854775807#expiration=3600

token 过期时间，默认一个小时

2.max_active_keys

#Thiscontrolshowmanykeysareheldinrotationby`keystone-manage#fernet_rotate`beforetheyarediscarded.Thedefaultvalueof3meansthat#keystonewillmaintainonestagedkey(alwaysindex0),oneprimarykey(the#highestnumericalindex),andonesecondarykey(everyotherindex).#Increasingthisvaluemeansthatadditionalsecondarykeyswillbekeptin#therotation.(integervalue)#Minimumvalue:1#max_active_keys=3

最大的active key 数目，默认是3

看完上述内容，你们对如何实现Openstack fernet token 解析有进一步的了解吗？如果还想了解更多知识或者相关内容，请关注恰卡编程网行业资讯频道，感谢大家的支持。