Re: [Openstack] Messaging level auth

2011-10-02 Thread Raphael Cohn
Would there be any advantage in moving the quota checks inside the MQ? eg for nodes, links, RAM usage, disk usage, etc. Would there also be an advantage in using the SASL 'authzid' and 'authcid', ie user authenticated as x, but authorized to act as role y? Raphael Cohn Managing Director raphael.

[Openstack] [OpenStack QA] Sessions at the Design Summit

2011-10-02 Thread Jay Pipes
Hi Stack QAers, There are quite a few folks interested in QA coming to the OpenStack Essex Design Summit next week. I wanted to give you all a heads-up on the sessions that may be of interest to you. Here they are: Monday, Oct 3rd: 09:30-10:25 - Essex Release Cycle - http://essexdesignsummit.sc

Re: [Openstack] [OpenStack QA] Sessions at the Design Summit

2011-10-02 Thread Nati Ueno
Hi Jay Thank you for your great recommendations! Cheers Nachi 2011/10/2 Jay Pipes : > Hi Stack QAers, > > There are quite a few folks interested in QA coming to the OpenStack > Essex Design Summit next week. I wanted to give you all a heads-up on > the sessions that may be of interest to you. > >

Re: [Openstack] Messaging level auth

2011-10-02 Thread Jesse Andrews
There have been various discussions about this before. There are actually two issues if you don't like a security breach on a single node to compromise other systems: * messages are not verifed * database access is global As you've said anyone with access to the queue can send any message and ma

Re: [Openstack] nova-compute is unable to contact the metadata server

2011-10-02 Thread Jesse Andrews
If the request isn't coming into the nova-api then I recommend checking the network path using tcpdump (or wireshark - there is a curses version). As you can see it tries 100 times to hit the metadata server so you should see traffic every couple seconds On Sat, Oct 1, 2011 at 1:59 PM, Shashank

Re: [Openstack] Glance client release?

2011-10-02 Thread Monty Taylor
Sorry guys - I kind of missed this thread. I'm extremely against having two setup.py's in a single repo, mainly because it makes a ton of other stuff way harder. I think that either: a) The projects should live in their own source code repos and therefore have completely separate PyPI uploads an

[Openstack] OpenStack Dashboard Diablo branch

2011-10-02 Thread Devin Carlen
Hello all, There is now an official Diablo branch on GitHub: https://github.com/4p/openstack-dashboard/tree/diablo I'll be sending out a more formal note about this later. Thanks, Devin___ Mailing list: https://launchpad.net/~openstack Post to