documentation_complete: true

prodtype: osp7

title: 'Check-Identity-06: Disable admin token in /etc/keystone/keystone.conf'

description: |-
    The admin token is generally used to bootstrap Identity. This token is the most valuable Identity asset, which could be used to gain cloud admin privileges.

    <br />
    <br />
    Pass: If admin_token under [DEFAULT] section in /etc/keystone/keystone.conf is disabled. And, AdminTokenAuthMiddleware under [filter:admin_token_auth] is deleted from /etc/keystone/keystone-paste.ini

    <br />
    <br />
    Fail: If admin_token under [DEFAULT] section is set and AdminTokenAuthMiddleware exists in keystone-paste.ini.

rationale: ""

severity: unknown
