Message definition (ReleaseNotes/Juno )
* Due to the simpler out-of-the-box experience, the default token provider is now UUID instead of PKI. * Database migrations for releases prior to Havana have been dropped, meaning that you must upgrade to the Juno release from either a Havana or Icehouse deployment. * A comprehensive list of all updated, deprecated or removed options in Keystone can be found at: http://docs.openstack.org/trunk/config-reference/content/keystone-conf-changes-master.html ** All <code>token_api</code> methods are now deprecated. ** LDAP configuration options that previously contained the deprecated <code>tenant</code> terminology have been superseded by options using the term <code>project</code>. ** Proxy methods from the identity backend to the assignment backend (created to provide backwards compatibility as a result of the split of the Assignment backend from the Identity backend), have been removed. This should only affect custom, out-of-tree API extensions. ** Loading authentication plugins solely by class name in <code>keystone.conf</code> is now deprecated in favor of loading them by <code>custom-method-name = custom_package.CustomClass</code> pairs, and then defining the sequence of authentication methods as a list (<code>methods = custom-method-name, password</code>). ** In-tree token drivers (<code>keystone.token.backends</code>) have been moved to <code>keystone.token.persistence.backends</code>. Proxy objects exist to maintain compatibility. If a non-default value is used, it is recommended the value of the <code>driver</code> option in the <code>[token]</code> section of <code>keystone.conf</code> is updated to use the new location. * All KVS backends besides the <code>token</code> driver have been formally deprecated. * LDAP/AD configuration: All configuration options containing the term "tenant" have been deprecated in favor of similarly named configuration options using the term "project" (for example, <code>tenant_id_attribute</code> has been replaced by <code>project_id_attribute</code>).
* Due to the simpler out-of-the-box experience, the default token provider is now UUID instead of PKI.
* Database migrations for releases prior to Havana have been dropped, meaning that you must upgrade to the Juno release from either a Havana or Icehouse deployment.
* A comprehensive list of all updated, deprecated or removed options in Keystone can be found at: http://docs.openstack.org/trunk/config-reference/content/keystone-conf-changes-master.html
** All <code>token_api</code> methods are now deprecated.
** LDAP configuration options that previously contained the deprecated <code>tenant</code> terminology have been superseded by options using the term <code>project</code>.
** Proxy methods from the identity backend to the assignment backend (created to provide backwards compatibility as a result of the split of the Assignment backend from the Identity backend), have been removed. This should only affect custom, out-of-tree API extensions.
** Loading authentication plugins solely by class name in <code>keystone.conf</code> is now deprecated in favor of loading them by <code>custom-method-name = custom_package.CustomClass</code> pairs, and then defining the sequence of authentication methods as a list (<code>methods = custom-method-name, password</code>).
** In-tree token drivers (<code>keystone.token.backends</code>) have been moved to <code>keystone.token.persistence.backends</code>. Proxy objects exist to maintain compatibility. If a non-default value is used, it is recommended the value of the <code>driver</code> option in the <code>[token]</code> section of <code>keystone.conf</code> is updated to use the new location.
* All KVS backends besides the <code>token</code> driver have been formally deprecated.
* LDAP/AD configuration: All configuration options containing the term "tenant" have been deprecated in favor of similarly named configuration options using the term "project" (for example, <code>tenant_id_attribute</code> has been replaced by <code>project_id_attribute</code>).