keystonemiddleware - en to en_GB translation catalogue (15 entries)

en: It is recommended that the ``memcache_use_advanced_pool`` option is set to ``True`` in the ``keystone_authtoken`` configuration section of the various services (e.g. nova, glance, ...) when memcached is used for token cache.
en_GB: It is recommended that the ``memcache_use_advanced_pool`` option is set to ``True`` in the ``keystone_authtoken`` configuration section of the various services (e.g. nova, glance, ...) when Memcached is used for token cache.

en: Python 2.7 support has been dropped. Last release of keystonemiddleware to support python 2.7 is OpenStack Train. The minimum version of Python now supported is Python 3.6.
en_GB: Python 2.7 support has been dropped. Last release of keystonemiddleware to support Python 2.7 is OpenStack Train. The minimum version of Python now supported is Python 3.6.

en: The auth_uri parameter of keystone_authtoken is deprecated in favor of www_authenticate_uri. The auth_uri option was often confused with the auth_url parameter of the keystoneauth plugin, which was also effectively always required. The parameter refers to the WWW-Authenticate header that is returned when the user needs to be redirected to the Identity service for authentication.
en_GB: The auth_uri parameter of keystone_authtoken is deprecated in favour of www_authenticate_uri. The auth_uri option was often confused with the auth_url parameter of the keystoneauth plugin, which was also effectively always required. The parameter refers to the WWW-Authenticate header that is returned when the user needs to be redirected to the Identity service for authentication.

en: We no longer recommend using the eventlet unsafe keystonemiddleware's memcacheclientpool. This implementation may result in growing connections to memcached.
en_GB: We no longer recommend using the eventlet unsafe keystonemiddleware's memcacheclientpool. This implementation may result in growing connections to Memcached.

en: [`blueprint oauth2-client-credentials-ext <https://blueprints.launchpad.net/keystone/+spec/oauth2-client-credentials-ext>`_] The oauth2_token filter has been added for accepting or denying incoming requests containing OAuth2.0 client credentials access tokens passed via the Authorization headers as bearer tokens.
en_GB: [`blueprint oauth2-client-credentials-ext <https://blueprints.launchpad.net/keystone/+spec/oauth2-client-credentials-ext>`_] The oauth2_token filter has been added for accepting or denying incoming requests containing OAuth2.0 client credentials access tokens passed via the Authorisation headers as bearer tokens.

en: [`blueprint support-oauth2-mtls <https://blueprints.launchpad.net/keystone/+spec/support-oauth2-mtls>`_] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates.
en_GB: [`blueprint support-oauth2-mtls <https://blueprints.launchpad.net/keystone/+spec/support-oauth2-mtls>`_] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from Keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates.

en: [`bug 1490804 <https://bugs.launchpad.net/keystone/+bug/1490804>`_] [`CVE-2015-7546 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7546>`_] A bug is fixed where an attacker could avoid token revocation when the PKI or PKIZ token provider is used. The complete remediation for this vulnerability requires the corresponding fix in the Identity (keystone) project.
en_GB: [`bug 1490804 <https://bugs.launchpad.net/keystone/+bug/1490804>`_] [`CVE-2015-7546 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7546>`_] A bug is fixed where an attacker could avoid token revocation when the PKI or PKIZ token provider is used. The complete remediation for this vulnerability requires the corresponding fix in the Identity (Keystone) project.

en: [`bug 1583690 <https://bugs.launchpad.net/keystonemiddleware/+bug/1583690>`_] For services such as Swift, which may not be utilizing oslo_config, we need to be able to determine the project name from local config. If project name is specified in both local config and oslo_config, the one in local config will be used instead. In case project is undetermined (i.e. not set), we use taxonomy.UNKNOWN as an indicator so operators can take corrective actions.
en_GB: [`bug 1583690 <https://bugs.launchpad.net/keystonemiddleware/+bug/1583690>`_] For services such as Swift, which may not be utilising oslo_config, we need to be able to determine the project name from local config. If project name is specified in both local config and oslo_config, the one in local config will be used instead. In case project is undetermined (i.e. not set), we use taxonomy.UNKNOWN as an indicator so operators can take corrective actions.

en: [`bug 1583699 <https://bugs.launchpad.net/keystonemiddleware/+bug/1583699>`_] Some service APIs (such as Swift list public containers) do not require a token. Therefore, there will be no identity or service catalog information available. In these cases, audit now fills in the default (i.e. taxonomy.UNKNOWN) for both initiator and target instead of raising an exception.
en_GB: [`bug 1583699 <https://bugs.launchpad.net/keystonemiddleware/+bug/1583699>`_] Some service APIs (such as Swift list public containers) do not require a token. Therefore, there will be no identity or service catalogue information available. In these cases, audit now fills in the default (i.e. taxonomy.UNKNOWN) for both initiator and target instead of raising an exception.

en: [`bug 1695038 <https://bugs.launchpad.net/keystonemiddleware/+bug/1695038>`_] The use_oslo_messaging configuration option is added for services such as Swift, which need the audit middleware to use the local logger instead of the oslo.messaging notifier regardless of whether the oslo.messaging package is present or not. Leave this option set to its default True value to keep the previous behavior unchanged - the audit middleware will use the oslo.messaging notifier if the oslo.messaging package is present, and the local logger otherwise. Services that rely on the local logger for audit notifications must set this option to False.
en_GB: [`bug 1695038 <https://bugs.launchpad.net/keystonemiddleware/+bug/1695038>`_] The use_oslo_messaging configuration option is added for services such as Swift, which need the audit middleware to use the local logger instead of the oslo.messaging notifier regardless of whether the oslo.messaging package is present or not. Leave this option set to its default True value to keep the previous behaviour unchanged - the audit middleware will use the oslo.messaging notifier if the oslo.messaging package is present, and the local logger otherwise. Services that rely on the local logger for audit notifications must set this option to False.

en: [`bug 1737115 <https://bugs.launchpad.net/keystonemiddleware/+bug/1737115>`_] Last release have accidentaly make python-memcached a hard dependency, this have changed back to an optional one.
en_GB: [`bug 1737115 <https://bugs.launchpad.net/keystonemiddleware/+bug/1737115>`_] Last release had accidentally made python-memcached a hard dependency, this has changed it back to an optional one.

en: [`bug 1762362 <https://bugs.launchpad.net/keystonemiddleware/+bug/1762362>`_] The value of the header "WWW-Authenticate" in a 401 (Unauthorized) response now is double quoted to follow the RFC requirement.
en_GB: [`bug 1762362 <https://bugs.launchpad.net/keystonemiddleware/+bug/1762362>`_] The value of the header "WWW-Authenticate" in a 401 (Unauthorised) response now is double quoted to follow the RFC requirement.

en: [`bug 1845539 <https://bugs.launchpad.net/keystone/+bug/1845539>`_] [`bug 1777177 <https://bugs.launchpad.net/keystone/+bug/1777177>`_] keystonemiddleware no longer supports the keystone v2.0 api, all associated functionality has been removed.
en_GB: [`bug 1845539 <https://bugs.launchpad.net/keystone/+bug/1845539>`_] [`bug 1777177 <https://bugs.launchpad.net/keystone/+bug/1777177>`_] keystonemiddleware no longer supports the Keystone v2.0 api, all associated functionality has been removed.

en: [`bug 1892852 <https://bugs.launchpad.net/keystonemiddleware/+bug/1892852>`_] [`bug 1888394 <https://bugs.launchpad.net/oslo.cache/+bug/1888394>`_] [`bug 1883659 <https://bugs.launchpad.net/keystonemiddleware/+bug/1883659>`_] Keystonemiddleware now using eventlet-safe implementation of ``MemcacheClientPool`` from oslo.cache's library by default. The ``keystonemiddleware`` implementation is now deprecated. For backwards compatibility, the ``[keystone_authtoken] memcache_use_advanced_pool`` option can be set to ``False`` config files of the various services (e.g. nova, glance, ...) when memcached is used for token cache.
en_GB: [`bug 1892852 <https://bugs.launchpad.net/keystonemiddleware/+bug/1892852>`_] [`bug 1888394 <https://bugs.launchpad.net/oslo.cache/+bug/1888394>`_] [`bug 1883659 <https://bugs.launchpad.net/keystonemiddleware/+bug/1883659>`_] Keystonemiddleware now using eventlet-safe implementation of ``MemcacheClientPool`` from oslo.cache's library by default. The ``keystonemiddleware`` implementation is now deprecated. For backwards compatibility, the ``[keystone_authtoken] memcache_use_advanced_pool`` option can be set to ``False`` config files of the various services (e.g. nova, glance, ...) when Memcached is used for token cache.

en: [`spec <http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/capabilities-app-creds.html>`_] The auth_token middleware now has support for accepting or denying incoming requests based on access rules provided by users in their keystone application credentials.
en_GB: [`spec <http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/capabilities-app-creds.html>`_] The auth_token middleware now has support for accepting or denying incoming requests based on access rules provided by users in their Keystone application credentials.
