aa3966ea7a
The persistence of the openstackid session causes issues where when people log out, then click "Sign-In" again, they aren't prompted for their password. Instead they are logged in automatically with the users they just logged out from because the openstackid endpoint still has them as logged in. With this patch, the user will be logged out of refstack as well as openstackid when signing out of RefStack. This way a user can sign into refstack with another openstackid without having to delete cookies or navigate to the openstackid site to manually log out. Change-Id: I23936ba6b64b58e4f6a3f4d62ba89439c4ddee21
314 lines
11 KiB
Plaintext
314 lines
11 KiB
Plaintext
[DEFAULT]
|
|
|
|
#
|
|
# From oslo.log
|
|
#
|
|
|
|
# Print debugging output (set logging level to DEBUG instead of
|
|
# default WARNING level). (boolean value)
|
|
#debug = false
|
|
|
|
# Print more verbose output (set logging level to INFO instead of
|
|
# default WARNING level). (boolean value)
|
|
#verbose = false
|
|
|
|
# The name of a logging configuration file. This file is appended to
|
|
# any existing logging configuration files. For details about logging
|
|
# configuration files, see the Python logging module documentation.
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/log_config
|
|
#log_config_append = <None>
|
|
|
|
# DEPRECATED. A logging.Formatter log message format string which may
|
|
# use any of the available logging.LogRecord attributes. This option
|
|
# is deprecated. Please use logging_context_format_string and
|
|
# logging_default_format_string instead. (string value)
|
|
#log_format = <None>
|
|
|
|
# Format string for %%(asctime)s in log records. Default: %(default)s
|
|
# . (string value)
|
|
#log_date_format = %Y-%m-%d %H:%M:%S
|
|
|
|
# (Optional) Name of log file to output to. If no default is set,
|
|
# logging will go to stdout. (string value)
|
|
# Deprecated group/name - [DEFAULT]/logfile
|
|
#log_file = <None>
|
|
|
|
# (Optional) The base directory used for relative --log-file paths.
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/logdir
|
|
#log_dir = <None>
|
|
|
|
# Use syslog for logging. Existing syslog format is DEPRECATED during
|
|
# I, and changed in J to honor RFC5424. (boolean value)
|
|
#use_syslog = false
|
|
|
|
# (Optional) Enables or disables syslog rfc5424 format for logging. If
|
|
# enabled, prefixes the MSG part of the syslog message with APP-NAME
|
|
# (RFC5424). The format without the APP-NAME is deprecated in K, and
|
|
# will be removed in M, along with this option. (boolean value)
|
|
# This option is deprecated for removal.
|
|
# Its value may be silently ignored in the future.
|
|
#use_syslog_rfc_format = true
|
|
|
|
# Syslog facility to receive log lines. (string value)
|
|
#syslog_log_facility = LOG_USER
|
|
|
|
# Log output to standard error. (boolean value)
|
|
#use_stderr = true
|
|
|
|
# Format string to use for log messages with context. (string value)
|
|
#logging_context_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [%(request_id)s %(user_identity)s] %(instance)s%(message)s
|
|
|
|
# Format string to use for log messages without context. (string
|
|
# value)
|
|
#logging_default_format_string = %(asctime)s.%(msecs)03d %(process)d %(levelname)s %(name)s [-] %(instance)s%(message)s
|
|
|
|
# Data to append to log format when level is DEBUG. (string value)
|
|
#logging_debug_format_suffix = %(funcName)s %(pathname)s:%(lineno)d
|
|
|
|
# Prefix each line of exception output with this format. (string
|
|
# value)
|
|
#logging_exception_prefix = %(asctime)s.%(msecs)03d %(process)d ERROR %(name)s %(instance)s
|
|
|
|
# List of logger=LEVEL pairs. (list value)
|
|
#default_log_levels = amqp=WARN,amqplib=WARN,boto=WARN,qpid=WARN,sqlalchemy=WARN,suds=INFO,oslo.messaging=INFO,iso8601=WARN,requests.packages.urllib3.connectionpool=WARN,urllib3.connectionpool=WARN,websocket=WARN,requests.packages.urllib3.util.retry=WARN,urllib3.util.retry=WARN,keystonemiddleware=WARN,routes.middleware=WARN,stevedore=WARN
|
|
|
|
# Enables or disables publication of error events. (boolean value)
|
|
#publish_errors = false
|
|
|
|
# Enables or disables fatal status of deprecations. (boolean value)
|
|
#fatal_deprecations = false
|
|
|
|
# The format for an instance that is passed with the log message.
|
|
# (string value)
|
|
#instance_format = "[instance: %(uuid)s] "
|
|
|
|
# The format for an instance UUID that is passed with the log message.
|
|
# (string value)
|
|
#instance_uuid_format = "[instance: %(uuid)s] "
|
|
|
|
# Enables or disables fatal status of deprecations. (boolean value)
|
|
#fatal_deprecations = false
|
|
|
|
#
|
|
# From refstack
|
|
#
|
|
|
|
# Url of user interface for Refstack. Need for redirects after sign in
|
|
# and sign out. (string value)
|
|
#ui_url = https://refstack.openstack.org
|
|
|
|
# The backend to use for database. (string value)
|
|
#db_backend = sqlalchemy
|
|
|
|
|
|
[api]
|
|
|
|
#
|
|
# From refstack
|
|
#
|
|
|
|
# Url of public Refstack API. (string value)
|
|
#api_url = https://refstack.openstack.org/api
|
|
|
|
# The directory where your static files can be found. Pecan comes with
|
|
# middleware that can be used to serve static files (like CSS and
|
|
# Javascript files) during development. Here, a special variable
|
|
# %(project_root)s can be used to point to the root directory of Refstack
|
|
# project's main module, so paths can be specified relative to that.
|
|
# (string value)
|
|
#static_root = refstack-ui/app
|
|
|
|
# Points to the directory where your template files live. Here, a special
|
|
# variable %(project_root)s can be used to point to the root directory of
|
|
# the Refstack project's main module, so paths can be specified relative to
|
|
# that. (string value)
|
|
#template_path = refstack-ui/app
|
|
|
|
# List of sites allowed cross-site resource access. If this is empty,
|
|
# only same-origin requests are allowed. (list value)
|
|
#allowed_cors_origins =
|
|
|
|
# Switch Refstack app into debug mode. Helpful for development. In
|
|
# debug mode static file will be served by pecan application. Also,
|
|
# server responses will contain some details with debug information.
|
|
# (boolean value)
|
|
#app_dev_mode = false
|
|
|
|
# Template for test result url. (string value)
|
|
#test_results_url = /#/results/%s
|
|
|
|
# The GitHub API URL of the repository and location of the DefCore
|
|
# capability files. This URL is used to get a listing of all
|
|
# capability files. (string value)
|
|
#github_api_capabilities_url = https://api.github.com/repos/openstack/defcore/contents
|
|
|
|
# This is the base URL that is used for retrieving specific capability
|
|
# files. Capability file names will be appended to this URL to get the
|
|
# contents of that file. (string value)
|
|
#github_raw_base_url = https://raw.githubusercontent.com/openstack/defcore/master/
|
|
|
|
# Number of results for one page (integer value)
|
|
#results_per_page = 20
|
|
|
|
# The format for start_date and end_date parameters (string value)
|
|
#input_date_format = %Y-%m-%d %H:%M:%S
|
|
|
|
|
|
[database]
|
|
|
|
#
|
|
# From oslo.db
|
|
#
|
|
|
|
# The file name to use with SQLite. (string value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_db
|
|
#sqlite_db = oslo.sqlite
|
|
|
|
# If True, SQLite uses synchronous mode. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sqlite_synchronous
|
|
#sqlite_synchronous = true
|
|
|
|
# The back end to use for the database. (string value)
|
|
# Deprecated group/name - [DEFAULT]/db_backend
|
|
#backend = sqlalchemy
|
|
|
|
# The SQLAlchemy connection string to use to connect to the database.
|
|
# (string value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection
|
|
# Deprecated group/name - [DATABASE]/sql_connection
|
|
# Deprecated group/name - [sql]/connection
|
|
#connection = <None>
|
|
|
|
# The SQLAlchemy connection string to use to connect to the slave
|
|
# database. (string value)
|
|
#slave_connection = <None>
|
|
|
|
# The SQL mode to be used for MySQL sessions. This option, including
|
|
# the default, overrides any server-set SQL mode. To use whatever SQL
|
|
# mode is set by the server configuration, set this to no value.
|
|
# Example: mysql_sql_mode= (string value)
|
|
#mysql_sql_mode = TRADITIONAL
|
|
|
|
# Timeout before idle SQL connections are reaped. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_idle_timeout
|
|
# Deprecated group/name - [DATABASE]/sql_idle_timeout
|
|
# Deprecated group/name - [sql]/idle_timeout
|
|
#idle_timeout = 3600
|
|
|
|
# Minimum number of SQL connections to keep open in a pool. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_min_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_min_pool_size
|
|
#min_pool_size = 1
|
|
|
|
# Maximum number of SQL connections to keep open in a pool. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_pool_size
|
|
# Deprecated group/name - [DATABASE]/sql_max_pool_size
|
|
#max_pool_size = <None>
|
|
|
|
# Maximum number of database connection retries during startup. Set to
|
|
# -1 to specify an infinite retry count. (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_retries
|
|
# Deprecated group/name - [DATABASE]/sql_max_retries
|
|
#max_retries = 10
|
|
|
|
# Interval between retries of opening a SQL connection. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_retry_interval
|
|
# Deprecated group/name - [DATABASE]/reconnect_interval
|
|
#retry_interval = 10
|
|
|
|
# If set, use this value for max_overflow with SQLAlchemy. (integer
|
|
# value)
|
|
# Deprecated group/name - [DEFAULT]/sql_max_overflow
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow
|
|
#max_overflow = <None>
|
|
|
|
# Verbosity of SQL debugging information: 0=None, 100=Everything.
|
|
# (integer value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_debug
|
|
#connection_debug = 0
|
|
|
|
# Add Python stack traces to SQL as comment strings. (boolean value)
|
|
# Deprecated group/name - [DEFAULT]/sql_connection_trace
|
|
#connection_trace = false
|
|
|
|
# If set, use this value for pool_timeout with SQLAlchemy. (integer
|
|
# value)
|
|
# Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout
|
|
#pool_timeout = <None>
|
|
|
|
# Enable the experimental use of database reconnect on connection
|
|
# lost. (boolean value)
|
|
#use_db_reconnect = false
|
|
|
|
# Seconds between retries of a database transaction. (integer value)
|
|
#db_retry_interval = 1
|
|
|
|
# If True, increases the interval between retries of a database
|
|
# operation up to db_max_retry_interval. (boolean value)
|
|
#db_inc_retry_interval = true
|
|
|
|
# If db_inc_retry_interval is set, the maximum seconds between retries
|
|
# of a database operation. (integer value)
|
|
#db_max_retry_interval = 10
|
|
|
|
# Maximum retries in case of connection error or deadlock error before
|
|
# error is raised. Set to -1 to specify an infinite retry count.
|
|
# (integer value)
|
|
#db_max_retries = 20
|
|
|
|
|
|
[osid]
|
|
|
|
#
|
|
# From refstack
|
|
#
|
|
|
|
# OpenStackID Auth Server URI. (string value)
|
|
#openstack_openid_endpoint = https://openstackid.org/accounts/openid2
|
|
|
|
# OpenStackID logout URI. (string value)
|
|
#openid_logout_endpoint = https://openstackid.org/accounts/user/logout
|
|
|
|
# Interaction mode. Specifies whether Openstack Id IdP may interact
|
|
# with the user to determine the outcome of the request. (string
|
|
# value)
|
|
#openid_mode = checkid_setup
|
|
|
|
# Protocol version. Value identifying the OpenID protocol version
|
|
# being used. This value should be "http://specs.openid.net/auth/2.0".
|
|
# (string value)
|
|
#openid_ns = http://specs.openid.net/auth/2.0
|
|
|
|
# Return endpoint in Refstack's API. Value indicating the endpoint
|
|
# where the user should be returned to after signing in. Openstack Id
|
|
# Idp only supports HTTPS address types. (string value)
|
|
#openid_return_to = /v1/auth/signin_return
|
|
|
|
# Claimed identifier. This value must be set to
|
|
# "http://specs.openid.net/auth/2.0/identifier_select". or to user
|
|
# claimed identity (user local identifier or user owned identity [ex:
|
|
# custom html hosted on a owned domain set to html discover]). (string
|
|
# value)
|
|
#openid_claimed_id = http://specs.openid.net/auth/2.0/identifier_select
|
|
|
|
# Alternate identifier. This value must be set to
|
|
# http://specs.openid.net/auth/2.0/identifier_select. (string value)
|
|
#openid_identity = http://specs.openid.net/auth/2.0/identifier_select
|
|
|
|
# Indicates request for user attribute information. This value must be
|
|
# set to "http://openid.net/extensions/sreg/1.1". (string value)
|
|
#openid_ns_sreg = http://openid.net/extensions/sreg/1.1
|
|
|
|
# Comma-separated list of field names which, if absent from the
|
|
# response, will prevent the Consumer from completing the registration
|
|
# without End User interation. The field names are those that are
|
|
# specified in the Response Format, with the "openid.sreg." prefix
|
|
# removed. Valid values include: "country", "email", "firstname",
|
|
# "language", "lastname" (string value)
|
|
#openid_sreg_required = email,fullname
|