openstack-manuals/doc/common/tables/swift-swift-swift-hash.xml

46 lines
1.9 KiB
XML

<?xml version='1.0' encoding='UTF-8'?>
<para xmlns="http://docbook.org/ns/docbook" version="5.0">
<!-- The tool that generated this table lives in the
openstack-doc-tools repository. The editions made in
this file will *not* be lost if you run the script again. -->
<table rules="all">
<caption>Description of configuration options for
<literal>[swift-hash]</literal> in <literal>swift.conf</literal>
</caption>
<col width="50%"/>
<col width="50%"/>
<thead>
<tr>
<th>Configuration option = Default value</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>swift_hash_path_prefix = changeme</td>
<td>
A prefix used by hash_path to offer a bit more security when generating hashes for
paths. It simply appends this value to all paths; if someone knows this suffix,
it's easier for them to guess the hash a path will end up with.
New installations are advised to set this parameter to a random secret,
which would not be disclosed ouside the organization.
The same secret needs to be used by all swift servers of the same cluster.
Existing installations should set this parameter to an empty string.</td>
</tr>
<tr>
<td>swift_hash_path_suffix = changeme</td>
<td>
A suffix used by hash_path to offer a bit more security when generating hashes for
paths. It simply appends this value to all paths; if someone knows this suffix,
it's easier for them to guess the hash a path will end up with.
New installations are advised to set this parameter to a random secret,
which would not be disclosed ouside the organization.
The same secret needs to be used by all swift servers of the same cluster.
Existing installations should set this parameter to an empty string.</td>
</tr>
</tbody>
</table>
</para>