From 4e04f12ace3077c5fd1e3cd09435501766e24ef1 Mon Sep 17 00:00:00 2001 From: john-griffith Date: Mon, 3 Feb 2014 20:10:03 -0700 Subject: [PATCH] Update cinder.conf.sample for new keystone client The latest version of keystoneclient adds a new conf entry that we don't have in Cinder. This patch adds "enforce_token_bind=permissive" Change-Id: I1aeb6a59ca1787c05075d76dd9d1f96722653d88 --- etc/cinder/cinder.conf.sample | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/etc/cinder/cinder.conf.sample b/etc/cinder/cinder.conf.sample index abd56288f..d74540448 100644 --- a/etc/cinder/cinder.conf.sample +++ b/etc/cinder/cinder.conf.sample @@ -1970,6 +1970,17 @@ # Catalog header. (boolean value) #include_service_catalog=true +# Used to control the use and type of token binding. Can be +# set to: "disabled" to not check token binding. "permissive" +# (default) to validate binding information if the bind type +# is of a form known to the server and ignore it if not. +# "strict" like "permissive" but if the bind type is unknown +# the token will be rejected. "required" any form of token +# binding is needed to be allowed. Finally the name of a +# binding method that must be present in tokens. (string +# value) +#enforce_token_bind=permissive + [matchmaker_ring] -- 2.45.2