diff options
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/keystone-paste.ini | 3 | ||||
| -rw-r--r-- | etc/keystone.conf.sample | 21 |
2 files changed, 23 insertions, 1 deletions
diff --git a/etc/keystone-paste.ini b/etc/keystone-paste.ini index 0f4590a2..9c5545db 100644 --- a/etc/keystone-paste.ini +++ b/etc/keystone-paste.ini @@ -24,6 +24,9 @@ paste.filter_factory = keystone.contrib.admin_crud:CrudExtension.factory [filter:ec2_extension] paste.filter_factory = keystone.contrib.ec2:Ec2Extension.factory +[filter:oauth_extension] +paste.filter_factory = keystone.contrib.oauth1.routers:OAuth1Extension.factory + [filter:s3_extension] paste.filter_factory = keystone.contrib.s3:S3Extension.factory diff --git a/etc/keystone.conf.sample b/etc/keystone.conf.sample index 90efe5f6..13d14317 100644 --- a/etc/keystone.conf.sample +++ b/etc/keystone.conf.sample @@ -99,6 +99,14 @@ # There is nothing special about this domain, other than the fact that it must # exist to order to maintain support for your v2 clients. # default_domain_id = default +# +# A subset (or all) of domains can have their own identity driver, each with +# their own partial configuration file in a domain configuration directory. +# Only values specific to the domain need to be placed in the domain specific +# configuration file. This feature is disabled by default; set +# domain_specific_drivers_enabled to True to enable. +# domain_specific_drivers_enabled = False +# domain_config_dir = /etc/keystone/domains # Maximum supported length for user passwords; decrease to improve performance. # max_password_length = 4096 @@ -155,6 +163,16 @@ [assignment] # driver = +[oauth1] +# driver = keystone.contrib.oauth1.backends.sql.OAuth1 + +# The Identity service may include expire attributes. +# If no such attribute is included, then the token lasts indefinitely. +# Specify how quickly the request token will expire (in seconds) +# request_token_duration = 28800 +# Specify how quickly the access token will expire (in seconds) +# access_token_duration = 86400 + [ssl] #enable = True #certfile = /etc/keystone/pki/certs/ssl_cert.pem @@ -281,10 +299,11 @@ # user_additional_attribute_mapping = [auth] -methods = external,password,token +methods = external,password,token,oauth1 #external = keystone.auth.plugins.external.ExternalDefault password = keystone.auth.plugins.password.Password token = keystone.auth.plugins.token.Token +oauth1 = keystone.auth.plugins.oauth1.OAuth [paste_deploy] # Name of the paste configuration file that defines the available pipelines |