PKI-signed token hash saved as token ID for SQL backend only

Bug #1073272 reported by Gabriel Hurley
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Undecided
Russell Cloran
Folsom
Fix Released
Medium
Adam Young

Bug Description

In the SQL backend, the id of the token is stored as the MD5 hash of the full PKI-signed token, whereas in the KVS backend, keys off the full token.

To enable consumers to reliably use the MD5 hash for API calls, etc. we need to have the KVS backend behave the same way as the SQL backend.

Russell Cloran (russell)
Changed in keystone:
assignee: nobody → Russell Cloran (russell)
status: New → In Progress
Revision history for this message
Adam Young (ayoung) wrote :

Please make sure it works for both KVS and Memcached backends.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/15114

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/15114
Committed: http://github.com/openstack/keystone/commit/23aa49ee3d5d71c0cca25c7e16fb5fc7771d5c02
Submitter: Jenkins
Branch: master

commit 23aa49ee3d5d71c0cca25c7e16fb5fc7771d5c02
Author: Adam Young <email address hidden>
Date: Tue Oct 30 19:55:32 2012 -0400

    key all backends off of hash of pki token.

    Bug 1073272

    Change-Id: If55b3b595fa6f3b5e773a502fc69e7da2c3bd114

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → grizzly-1
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (stable/folsom)

Fix proposed to branch: stable/folsom
Review: https://review.openstack.org/24079

Thierry Carrez (ttx)
Changed in keystone:
milestone: grizzly-1 → 2013.1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (stable/folsom)

Reviewed: https://review.openstack.org/24079
Committed: http://github.com/openstack/keystone/commit/1889299cec755c54878d068df6b49a6038979929
Submitter: Jenkins
Branch: stable/folsom

commit 1889299cec755c54878d068df6b49a6038979929
Author: Adam Young <email address hidden>
Date: Tue Oct 30 19:55:32 2012 -0400

    key all backends off of hash of pki token.

    Backporting to ensure memcached support is correct.

    Bug 1073272

    Change-Id: If55b3b595fa6f3b5e773a502fc69e7da2c3bd114

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.