Note de la release actuelle¶
27.0.0-23¶
Nouvelles fonctionnalités¶
bug 2060972 Added new configuration option
[security_compliance] report_invalid_password_hash
to enable and configure reporting of hashes of submitted invalid passwords, which could be used to facilitate analysis of failed login attempts (as per PCI DSS requirements). The corresponding Keystone specification - Include invalid password details in audit messages.
Notes de mises à jours¶
The WSGI scripts,
keystone-wsgi-admin
andkeystone-wsgi-public
, have been removed. Deployment tooling should instead reference the Python module paths for the service,keystone.wsgi.api
, if their chosen WSGI server supports this (gunicorn, uWSGI) or implement a.wsgi
script themselves if not (mod_wsgi).