44 lines
1.9 KiB
XML
44 lines
1.9 KiB
XML
<?xml version='1.0' encoding='UTF-8'?>
|
|
<para xmlns="http://docbook.org/ns/docbook" version="5.0">
|
|
<!-- The tool that generated this table lives in the
|
|
openstack-doc-tools repository. The editions made in
|
|
this file will *not* be lost if you run the script again. -->
|
|
<table rules="all">
|
|
<caption>Description of configuration options for
|
|
<literal>[swift-hash]</literal> in <filename>swift.conf</filename>
|
|
</caption>
|
|
<col width="50%"/>
|
|
<col width="50%"/>
|
|
<thead>
|
|
<tr>
|
|
<th>Configuration option = Default value</th>
|
|
<th>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td><option>swift_hash_path_prefix</option> = <replaceable>changeme</replaceable></td>
|
|
<td>A prefix used by hash_path to offer a bit more security when generating hashes for
|
|
paths. It simply appends this value to all paths; if someone knows this suffix,
|
|
it's easier for them to guess the hash a path will end up with.
|
|
New installations are advised to set this parameter to a random secret,
|
|
which would not be disclosed ouside the organization.
|
|
The same secret needs to be used by all swift servers of the same cluster.
|
|
|
|
Existing installations should set this parameter to an empty string.</td>
|
|
</tr>
|
|
<tr>
|
|
<td><option>swift_hash_path_suffix</option> = <replaceable>changeme</replaceable></td>
|
|
<td>A suffix used by hash_path to offer a bit more security when generating hashes for
|
|
paths. It simply appends this value to all paths; if someone knows this suffix,
|
|
it's easier for them to guess the hash a path will end up with.
|
|
New installations are advised to set this parameter to a random secret,
|
|
which would not be disclosed ouside the organization.
|
|
The same secret needs to be used by all swift servers of the same cluster.
|
|
|
|
Existing installations should set this parameter to an empty string.</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</para>
|