Re: [Openstack] Keystone 8K header size limit

2013-05-29 Thread Dolph Mathews 
Apologies, none of these configuration settings were documented in
etc/keystone.conf.sample. The last one is the one that controls this
behavior.

  [DEFAULT]

  # enforced by sizelimit middleware
(keystone.middleware:RequestBodySizeLimiter)
  max_request_body_size = 114688

  # limit the sizes of user  tenant ID/names
  max_param_size = 64

  # similar to max_param_size, but provides an exception for token values
  max_token_size = 8192

I also put these docs up for review: https://review.openstack.org/30932



-Dolph


On Wed, May 29, 2013 at 1:23 PM, Miller, Mark M (EB SW Cloud - RD -
Corvallis) mark.m.mil...@hp.com wrote:

  Hi Guang,

 We are running into a problem with PKI tokens being greater than 8K and
 having Keystone not able to validate them. Do you know of a workaround?

 Mark


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Keystone 8K header size limit

2013-05-29 Thread Miller, Mark M (EB SW Cloud - RD - Corvallis) 
Thank you Dolph.

Mark

From: Dolph Mathews [mailto:dolph.math...@gmail.com]
Sent: Wednesday, May 29, 2013 12:55 PM
To: Miller, Mark M (EB SW Cloud - RD - Corvallis); openstack
Cc: Yee, Guang
Subject: Re: Keystone 8K header size limit

Apologies, none of these configuration settings were documented in 
etc/keystone.conf.sample. The last one is the one that controls this behavior.

  [DEFAULT]

  # enforced by sizelimit middleware 
(keystone.middleware:RequestBodySizeLimiter)
  max_request_body_size = 114688

  # limit the sizes of user  tenant ID/names
  max_param_size = 64

  # similar to max_param_size, but provides an exception for token values
  max_token_size = 8192

I also put these docs up for review: https://review.openstack.org/30932



-Dolph

On Wed, May 29, 2013 at 1:23 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) 
mark.m.mil...@hp.commailto:mark.m.mil...@hp.com wrote:
Hi Guang,

We are running into a problem with PKI tokens being greater than 8K and having 
Keystone not able to validate them. Do you know of a workaround?

Mark


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp