Comment 10 for bug 1347961
Revision history for this message
| Tristan Cacqueray (tristan-cacqueray) wrote Re: Revocation events are broken with mysql | #10 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
f33e652
(Get the code!)
Title: Token does not expire or revoke with Mysql backend
Reporter: Brant Knudson (IBM)
Products: Keystone
Versions: 2014.1.1
Description:
Brant Knudson from IBM reported a vulnerability in Keystone revocation events. Mysql does not store expiration date correctly resulting in tokens to never expire and breaking manual revocation. Only Keystone setups configured to use revocation events and Mysql tokens backend are affected.