8b2016b5d0
Include the new tables in the documentation. Fix the cinder-prophetstor_dpl.xml filename and the xiv category. Manually fix those files for niceness test: - glance-logging.xml (lines 34, 38), fixed in oslo-incubator - trove-logging.xml (lines 26, 30), fixed in oslo-incubator - neutron-openvswitch_agent.xml (line 45), to be fixed in neutron Closes-Bug: #1340858 Closes-Bug: #1344231 Closes-Bug: #1345956 Closes-Bug: #1346711 Closes-Bug: #1347978 Partial-Bug: #1348329 Closes-Bug: #1352074 Partial-Bug: #1353417 Closes-Bug: #1354622 Closes-Bug: #1339754 Closes-Bug: #1358598 Closes-Bug: #1358259 Closes-Bug: #1357865 Partial-Bug: #1357457 Closes-Bug: #1357421 Change-Id: Id2da7d7762ca954bd552dbf89a9ff28b144efb68
94 lines
4.9 KiB
XML
94 lines
4.9 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<chapter xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
version="5.0"
|
|
xml:id="ch_configuring-openstack-identity">
|
|
<title>Identity service</title>
|
|
<para>This chapter details the OpenStack Identity service configuration
|
|
options. For installation prerequisites and step-by-step walkthroughs, see the
|
|
<citetitle>OpenStack Installation Guide</citetitle> for your distribution (<link xlink:href="http://docs.openstack.org"
|
|
>docs.openstack.org</link>) and <citetitle><link
|
|
xlink:href="http://docs.openstack.org/admin-guide-cloud/content/">Cloud
|
|
Administrator Guide</link></citetitle>.</para>
|
|
|
|
<section xml:id="section_keystone-cache">
|
|
<title>Caching layer</title>
|
|
<para>Identity supports a caching layer that is above the
|
|
configurable subsystems, such as token or assignment. The
|
|
majority of the caching configuration options are set in the
|
|
<literal>[cache]</literal> section. However, each section that
|
|
has the capability to be cached usually has a
|
|
<option>caching</option> option that will toggle caching for that
|
|
specific section. By default, caching is globally disabled.
|
|
Options are as follows:</para>
|
|
|
|
<xi:include href="../common/tables/keystone-cache.xml"/>
|
|
|
|
<para>Current functional backends are:</para>
|
|
<itemizedlist>
|
|
<listitem><para><literal>dogpile.cache.memcached</literal> - Memcached backend using
|
|
the standard python-memcached library</para></listitem>
|
|
<listitem><para><literal>dogpile.cache.pylibmc</literal> - Memcached backend using
|
|
the pylibmc library</para></listitem>
|
|
<listitem><para><literal>dogpile.cache.bmemcached</literal> - Memcached using
|
|
python-binary-memcached library.</para></listitem>
|
|
<listitem><para><literal>dogpile.cache.redis</literal> - Redis backend</para></listitem>
|
|
<listitem><para><literal>dogpile.cache.dbm</literal> - Local DBM file backend</para></listitem>
|
|
<listitem><para><literal>dogpile.cache.memory</literal> - In-memory cache, not
|
|
suitable for use outside of testing as it does not cleanup it's
|
|
internal cache on cache expiration and does not share cache
|
|
between processes. This means that caching and cache invalidation
|
|
will not be consistent or reliable.</para>
|
|
</listitem>
|
|
<listitem><para><literal>dogpile.cache.mongo</literal> - MongoDB as caching
|
|
backend.</para></listitem>
|
|
</itemizedlist>
|
|
|
|
</section>
|
|
|
|
<section xml:id="keystone-configuration-file">
|
|
<title>Identity service configuration file</title>
|
|
<para>The Identity service is configured in the
|
|
<filename>/etc/keystone/keystone.conf</filename> file.</para>
|
|
<para>The following tables provide a comprehensive list of the Identity
|
|
service options.</para>
|
|
<xi:include href="../common/tables/keystone-api.xml"/>
|
|
<xi:include href="../common/tables/keystone-assignment.xml"/>
|
|
<xi:include href="../common/tables/keystone-auth.xml"/>
|
|
<xi:include href="../common/tables/keystone-auth_token.xml"/>
|
|
<xi:include href="../common/tables/keystone-catalog.xml"/>
|
|
<xi:include href="../common/tables/keystone-credential.xml"/>
|
|
<xi:include href="../common/tables/keystone-database.xml"/>
|
|
<xi:include href="../common/tables/keystone-debug.xml"/>
|
|
<xi:include href="../common/tables/keystone-ec2.xml"/>
|
|
<xi:include href="../common/tables/keystone-federation.xml"/>
|
|
<xi:include href="../common/tables/keystone-identity.xml"/>
|
|
<xi:include href="../common/tables/keystone-kvs.xml"/>
|
|
<xi:include href="../common/tables/keystone-ldap.xml"/>
|
|
<xi:include href="../common/tables/keystone-logging.xml"/>
|
|
<xi:include href="../common/tables/keystone-mapping.xml"/>
|
|
<xi:include href="../common/tables/keystone-memcache.xml"/>
|
|
<xi:include href="../common/tables/keystone-misc.xml"/>
|
|
<xi:include href="../common/tables/keystone-oauth.xml"/>
|
|
<xi:include href="../common/tables/keystone-os_inherit.xml"/>
|
|
<xi:include href="../common/tables/keystone-policy.xml"/>
|
|
<xi:include href="../common/tables/keystone-revoke.xml"/>
|
|
<xi:include href="../common/tables/keystone-security.xml"/>
|
|
<xi:include href="../common/tables/keystone-ssl.xml"/>
|
|
<xi:include href="../common/tables/keystone-stats.xml"/>
|
|
<xi:include href="../common/tables/keystone-token.xml"/>
|
|
<xi:include href="../common/tables/keystone-trust.xml"/>
|
|
|
|
<xi:include href="../common/tables/keystone-rpc.xml"/>
|
|
<xi:include href="../common/tables/keystone-amqp.xml"/>
|
|
<xi:include href="../common/tables/keystone-qpid.xml"/>
|
|
<xi:include href="../common/tables/keystone-rabbit.xml"/>
|
|
<xi:include href="../common/tables/keystone-zeromq.xml"/>
|
|
<xi:include href="../common/tables/keystone-redis.xml"/>
|
|
</section>
|
|
|
|
<xi:include href="identity/section_keystone-sample-conf-files.xml"/>
|
|
<xi:include href="../common/tables/keystone-conf-changes-icehouse.xml"/>
|
|
</chapter>
|