starlingx/stx-puppet
Code Issues Proposed changes

Merge "Enabling platform keystone account lockout"

Browse Source
This commit is contained in:
Zuul 2019-09-17 21:13:10 +00:00 committed by Gerrit Code Review
commit ca933be69f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
puppet-manifests/src/modules/openstack/manifests/keystone.pp
View File

@ -69,6 +69,10 @@ class openstack::keystone (
'token/allow_expired_window': value => 0;
}
keystone_config {
'security_compliance/lockout_duration': value => 1800;
'security_compliance/lockout_failure_attempts': value => 5;
}
file { '/etc/keystone/keystone-extra.conf':
ensure => present,