create a memcache token backend

Bug #928040 reported by Joseph Heck
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Critical
Brian Waldon

Bug Description

implement a memcached token backend for redux branch

Tags: in-redux redux
Joseph Heck (heckj)
Changed in keystone:
importance: High → Critical
Changed in keystone:
assignee: anotherjesse (anotherjesse) → Brian Waldon (bcwaldon)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (redux)

Reviewed: https://review.openstack.org/3841
Committed: http://github.com/openstack/keystone/commit/05b2583dfa6d2f932f29e053c557b19601fae06b
Submitter: Jenkins
Branch: redux

commit 05b2583dfa6d2f932f29e053c557b19601fae06b
Author: Jesse Andrews <email address hidden>
Date: Mon Feb 6 18:49:03 2012 -0800

    Add memcache token backend

    * tests use a fake memcache client
    * fixes bug 928040

    Change-Id: I7c24e7829ee91fcf719eb4f338cf0ce2a0fa6bbd

tags: added: in-redux
Brian Waldon (bcwaldon)
Changed in keystone:
status: In Progress → Fix Committed
Revision history for this message
Yaroslav (yaroslav-isakov) wrote :

I have a problem with this backend - I got MemcachedStringEncodingError: Keys must be str()'s, not unicode. Convert your unicode strings using mystring.encode(charset)! after I do 'curl -H "X-Auth-Token: ADMIN" http://localhost:35357/v2.0/tokens/f8356affcc1648ac9774efc6edd813ea'
Full debug is here: http://paste.openstack.org/show/4767/

Revision history for this message
Joshua Harlow (harlowja) wrote :

You may really also want to warn people that memcache stores everything out in the open and memcache has no real security. Anyone with a telnet connection can start looking at your tokens (if they can guess your keys). Might be just a useful thing for people to know...

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)
Download full text (60.6 KiB)

Reviewed: https://review.openstack.org/4170
Committed: http://github.com/openstack/keystone/commit/eef1f0d93ae19f04601b75cd7a2514e81b4005b9
Submitter: James E. Blair (<email address hidden>)
Branch: master

commit 90068b0143af788869116d08533d5ebc99874a17
Author: Anthony Young <email address hidden>
Date: Tue Feb 14 14:58:55 2012 -0800

    Add docs on keystone_old -> ksl migration

     * Fixes bug 928046

    Change-Id: I4af516dbc9577c08a77850e75e45d98040e4fb27

commit 71436dbf188b3ff1c576fcd54b992530aac98b6c
Author: Brian Waldon <email address hidden>
Date: Wed Feb 8 16:08:08 2012 -0800

    Add token expiration

    * Config option token.expiration defines amount of time tokens should be valid
    * Fixes bug 928545

    Change-Id: I3dff7a1ebf03bb44fc6e5247f976baea0581de08

commit 448c6414a176831b400ed5a1618fe89a8780968b
Author: Anthony Young <email address hidden>
Date: Tue Feb 14 12:30:23 2012 -0800

    Update docs to for current keystone-manage usage

     * Document how to manage users, roles, tenants, services, etc with
       keystoneclient cli
     * keystone-manage only does db_sync right now
     * Fixes bug 931837
     * Add docs for import_legacy and export_legacy_catalog

    Change-Id: I7f55fd607363d0cd4f1646564e430dfb5b12855f

commit 27db5cbc05864b8c130eded9082ee82f7e722c34
Author: termie <email address hidden>
Date: Mon Feb 13 22:07:10 2012 -0800

    add catalog export

    Change-Id: I66a7b3e8136757979c96984242b2bbd5f390b9a0

commit e1a9a1f06f83f9795e03d726a9e41db6dd9b9a9f
Author: Brian Waldon <email address hidden>
Date: Mon Feb 13 14:15:33 2012 -0800

    Handle unicode keys in memcache token backend

    * Cast keys to str in memcache backend
    * Emulate encoding error in fake memcache client
    * Fixes bug 931746

    Change-Id: I13bc573d4aca6849b1b8128ab55823545d5a3a11

commit ed793ad5365e33e2fda54c3900c1ad9b2c93dc37
Author: termie <email address hidden>
Date: Mon Feb 13 20:34:46 2012 -0800

    make sure passwords work after migration

    Change-Id: I0086a362d772bf158e3fdc12fb42c1c7c50d50dd

commit b4096290d149a04d5f3691025ad4adbfb4f4d4eb
Author: termie <email address hidden>
Date: Mon Feb 13 17:38:26 2012 -0800

    add legacy diablo import tests

    Change-Id: Id96b376ad92d906d14c3183eec2739fa34a2e51b

commit 48f2f650c8b622b55e67610081336055ec9a2c8e
Author: termie <email address hidden>
Date: Mon Feb 13 16:49:54 2012 -0800

    change password hash

    Change-Id: Idd5d09dc114cbb0cbd63e23e4178bb74d081c789

commit aa2656c730d57515b0eba1f57c829b673490fdd5
Author: termie <email address hidden>
Date: Mon Feb 13 17:31:58 2012 -0800

    add essex test as well

    Change-Id: Ib71a360568c6fdef4fdf8791d3f41b749391befb

commit 700a397a64bf984ef4c56aec8cc597f212e1f459
Author: termie <email address hidden>
Date: Mon Feb 13 17:01:02 2012 -0800

    add sql for import legacy tests

    Change-Id: I778300970c12bff0c296e6551c1b4e9e079496dc

commit 63adca31f772ab50a2da1c81bda9a66e0e009e02
Author: termie <email address hidden>
Date: Mon Feb 13 16:50:00 2012 -0800

    add import legacy cli command

    Change-Id: I41f0baaf3e7beb...

Thierry Carrez (ttx)
Changed in keystone:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: essex-4 → 2012.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.