Re: [openstack-dev] [Openstack] [Barbican] Keystone PKI token too much long

2014-07-31 Thread Russell Bryant
On 07/30/2014 10:57 AM, Dolph Mathews wrote: We recently merged an implementation for GET /v3/catalog which finally enables POST /v3/auth/tokens?nocatalog to be a reasonable default behavior, at the cost of an extra HTTP call from remote service back to keystone where necessary. Is that

Re: [openstack-dev] [Openstack] [Barbican] Keystone PKI token too much long

2014-07-31 Thread Morgan Fainberg
On Thursday, July 31, 2014, Russell Bryant rbry...@redhat.com wrote: On 07/30/2014 10:57 AM, Dolph Mathews wrote: We recently merged an implementation for GET /v3/catalog which finally enables POST /v3/auth/tokens?nocatalog to be a reasonable default behavior, at the cost of an extra HTTP

Re: [openstack-dev] [Openstack] [Barbican] Keystone PKI token too much long

2014-07-31 Thread Dolph Mathews
Yes, it's a change in default client-side behavior (the client can explicitly request ?nocatalog). The default server-side behavior is to continue returning catalogs in requests unless the client requests otherwise. Before the client adopts the new default, we need well-established support in

Re: [openstack-dev] [Openstack] [Barbican] Keystone PKI token too much long

2014-07-30 Thread Dolph Mathews
We recently merged an implementation for GET /v3/catalog which finally enables POST /v3/auth/tokens?nocatalog to be a reasonable default behavior, at the cost of an extra HTTP call from remote service back to keystone where necessary. Spec: