Comment 17 for bug 1215627

Revision history for this message
Ravi Chunduru (ravivsn) wrote :

This is really effecting keystone performance in large scale deployments. I would definitely agree for this fix. Here are additional comments

1) Should check possibility of clients specifying scope of the token wrt duration in its request to keystone. Either specifying as short, long lived tokens or specific duration must be considered.
2) Keystone server should not re-use tokens that has time duration less than configured threshold duration and also look into the request whether it requests short or long lived tokens.