Something you have. Something you are. Something You Know. Pick Two. This is the conventional wisdom for the basis of secure authentication.
Multifactor Auth and Keystone
Reply
Monthly Archives: October 2012
PKI tokens and Horizon
With PKI, tokens have gone from 40 byte to a varying size more than 3000 bytes long. This plus additional payload in Horizon means that they no longer fit inside an HTTP cookie. How do we deal with this?
Preauthorization in Keystone
“I’ll gladly pay you Tuesday for a Hamburger Today” –Wimpy, from the Popeye Cartoon.
Sometimes you need to authorize a service to perform an action on your behalf. Often, that action takes place long after any authentication token you can provide would have expired. Currently, the only mechanism in Keystone that people can use is to share credentials. We can do better.