openstack-manuals/doc/config-reference/source/tables/keystone-security.rst
venkatamahesh 6d9cbcac2b [config-ref] Update keystone tables
Change-Id: I71246b345591c1402ce596f1f24c97d2d77de614
2016-09-03 21:42:15 +05:30

1.2 KiB

Description of security configuration options
Configuration option = Default value Description
[DEFAULT]
crypt_strength = 10000 (Integer) The value passed as the keyword "rounds" to passlib's encrypt method. This option represents a trade off between security and performance. Higher values lead to slower performance, but higher security. Changing this option will only affect newly created passwords as existing password hashes already have a fixed number of rounds applied, so it is safe to tune this option in a running cluster. For more information, see https://pythonhosted.org/passlib/password_hash_api.html#choosing-the-right-rounds-value