Ask Your Question
0

Can nova/glance cache the keystone token or not?

asked 2011-12-19 03:41:11 -0600

as we know that nova uses keystone to authenticate user, but can nova/glance cache the keystone token, or verify with keystone every time?

edit retag flag offensive close merge delete

3 answers

Sort by » oldest newest most voted
0

answered 2011-12-19 04:32:26 -0600

The validation middleware says it supports caching:

https://github.com/openstack/keystone/blob/master/examples/paste/auth_token.ini#L21 (https://github.com/openstack/keystone...)

By adding to the paste config:

memcache_hosts = 127.0.0.1:11211

(this would be the paste configs for the services - nova/glance/swift/...)

I've not tested it though

edit flag offensive delete link more
0

answered 2011-12-19 06:02:25 -0600

Thank you for your answer. I think your comment is for keystone memcache, what I want to figure out is when keystone authenticate once, nova will cache the token or something which can prove keystone has already authenticated, next time when user ask for nova resouce , it doesn't need to sent token to keystone authenticate again. do you have any experience about this?

edit flag offensive delete link more
0

answered 2011-12-19 06:14:56 -0600

I'm pretty sure that the config I linked was for the auth_token config (notice the ini was for auth_token).

You can also read the middleware we use in nova/glance/... in auth_token.py

https://github.com/openstack/keystone/blob/master/keystone/middleware/auth_token.py (https://github.com/openstack/keystone...)

And see that it does have code to use memcache and uses the config entry memcache_hosts.

I've not used it but I've read the code before.

Best of luck

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2011-12-19 03:41:11 -0600

Seen: 25 times

Last updated: Dec 19 '11