Right now the solution is to increase the token expiration time in keystone config. I personally am working on a longer term solution but it is a ways out (regarding changing how services pass authorization around internally). Unfortunately the current architecture makes changing how token timeouts affect long running tasks difficult until we make more forward progress on separating user-to-service authorization and service-to-service authorization.
--Morgan On Dec 18, 2015 03:16, "Paul Carlton" <paul.carlt...@hpe.com> wrote: > Jamie > > John Garbutt suggested I follow up this issue with you. I understand you > may be leading the > effort to address the issue of token expiry during a long running > operation. Nova > encounter this scenario during image snapshots and live migrations. > > Is there a keystone blueprint for this issue? > > Thanks > > -- > Paul Carlton > Software Engineer > Cloud Services > Hewlett Packard > BUK03:T242 > Longdown Avenue > Stoke Gifford > Bristol BS34 8QZ > > Mobile: +44 (0)7768 994283 > Email: mailto:paul.carlt...@hpe.com > Hewlett-Packard Limited registered Office: Cain Road, Bracknell, Berks > RG12 1HN Registered No: 690597 England. > The contents of this message and any attachments to it are confidential > and may be legally privileged. If you have received this message in error, > you should delete it from your system immediately and advise the sender. To > any recipient of this message within HP, unless otherwise stated you should > consider this message and attachments as "HP CONFIDENTIAL". > > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > >
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
