[DEFAULT]
;delegated means we still allow unauthenticated requests through so the
;service can make the final decision on authentication
delay_auth_decision = 0

;where to find the OpenStack service (if not in local WSGI chain)
service_protocol = http
service_host = 127.0.0.1
service_port = 35357
;used to verify this component with the OpenStack service (or PAPIAuth)
service_pass = dTpw


[app:echo]
paste.app_factory = echo:app_factory

[pipeline:main]
pipeline =
    basicauth
    echo

[filter:tokenauth]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
;where to find the token auth service
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
;how to authenticate to the auth service for priviledged operations
;like validate token
admin_token = 999888777666
;Uncomment the following out for memcached caching
;memcache_hosts = 127.0.0.1:11211

[filter:basicauth]
paste.filter_factory = keystone.middleware.auth_basic:filter_factory

[filter:openidauth]
paste.filter_factory = keystone.middleware.auth_openid:filter_factory
