Enabling the Revocation ExtensionΒΆ

Warning

The OS-REVOKE Extension is considered experimental in Icehouse and will continue to see improvement over the next development cycle.

To enable the OS-REVOKE extension:

  1. Add the driver fields and values in the [revoke] section in keystone.conf. For the KVS Driver:

    [revoke]
    driver = keystone.contrib.revoke.backends.kvs.Revoke
    

    For the SQL driver:

    driver = keystone.contrib.revoke.backends.sql.Revoke
    
  2. Add the required filter to the pipeline in keystone-paste.ini:

    [filter:revoke_extension]
    paste.filter_factory = keystone.contrib.revoke.routers:RevokeExtension.factory
    
    [pipeline:api_v3]
    pipeline = access_log sizelimit url_normalize token_auth admin_token_auth xml_body json_body revoke_extension service_v3
    
  3. Optionally, create the extension tables if using the provided SQL backend:

    ./bin/keystone-manage db_sync --extension revoke
    

    Note that as of the Juno release this extension is now migrated by default.

Previous topic

Enabling Federation Extension

Next topic

Configuring Keystone for Federation

This Page