[Openstack] [Swift]
Hi, I have rather basic question. I've read through various documentation but I still do not sufficiently understand how the authentication works. So far I have managed to create a tenant, user and add him a role which is also listed in proxy-server.conf in operator_roles This works fine but I would like to have more users. My goal is to have several users which can access objects stored via swift service and have various access rights. Similar to permissions on Linux/Unix system. And I would like to have it done via keystone. Is this possible? Thanks, Tomas ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [Swift]
Hi,
I am following the OpenStack WalkThrough instructions and I am failing to
verify my setup as described here:
http://docs.openstack.org/folsom/openstack-compute/install/yum/content/verify-swift-installation.html
In this forum I have found that the instructions are not exactly correct so
I tried what was suggested but without any success.
Following command always return '404 Not Found'
curl -k -v -H 'X-Storage-User: service:swift' -H 'X-Storage-Pass: 12345678'
-X 'POST' http://localhost:5000/v2.0/auth
But when for following it works:
curl -k -v -X 'POST' http://localhost:5000/v2.0/tokens -d
'{auth:{passwordCredentials:{username:swift,
password:12345678}, tenantName:service}}' -H 'Content-type:
application/json' -H 'Accept: application/xml'
What am I missing here?
Thanks
Tomáš Šoltys
tomas.sol...@gmail.com
http://www.range-software.com
(+420) 776-843-663
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift]
Forgot to attach /etc/swift/proxy-server.conf
[DEFAULT]
bind_port =
user = swift
[pipeline:main]
pipeline = healthcheck cache authtoken keystone proxy-server
[app:proxy-server]
use = egg:swift#proxy
allow_account_management = true
account_autocreate = true
[filter:keystone]
paste.filter_factory = keystone.middleware.swift_auth:filter_factory
operator_roles = Member,admin, swiftoperator
[filter:authtoken]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
# Delaying the auth decision is required to support token-less
# usage for anonymous referrers ('.r:*').
delay_auth_decision = 10
service_port = 5000
service_host = 127.0.0.1
auth_port = 35357
auth_host = 127.0.0.1
auth_protocol = http
auth_uri = http://127.0.0.1:5000/
auth_token = 12345678
admin_token = 12345678
admin_tenant_name = service
admin_user = swift
admin_password = 12345678
[filter:cache]
use = egg:swift#memcache
set log_name = cache
[filter:catch_errors]
use = egg:swift#catch_errors
[filter:healthcheck]
use = egg:swift#healthcheck
2013/3/15 Tomáš Šoltys tomas.sol...@gmail.com
Hi,
I am following the OpenStack WalkThrough instructions and I am failing to
verify my setup as described here:
http://docs.openstack.org/folsom/openstack-compute/install/yum/content/verify-swift-installation.html
In this forum I have found that the instructions are not exactly correct
so I tried what was suggested but without any success.
Following command always return '404 Not Found'
curl -k -v -H 'X-Storage-User: service:swift' -H 'X-Storage-Pass:
12345678' -X 'POST' http://localhost:5000/v2.0/auth
But when for following it works:
curl -k -v -X 'POST' http://localhost:5000/v2.0/tokens -d
'{auth:{passwordCredentials:{username:swift,
password:12345678}, tenantName:service}}' -H 'Content-type:
application/json' -H 'Accept: application/xml'
What am I missing here?
Thanks
Tomáš Šoltys
tomas.sol...@gmail.com
http://www.range-software.com
(+420) 776-843-663
--
Tomáš Šoltys
tomas.sol...@gmail.com
http://www.range-software.com
(+420) 776-843-663
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] [Swift]
Hi,
I am trying to setup a swift proxy server and I got stuck with following
message when I try to execute 'swift-init proxy start'
os_admin@osvm01:~$ sudo swift-init proxy start
Starting proxy-server...(/etc/swift/proxy-server.conf)
Traceback (most recent call last):
File /usr/bin/swift-proxy-server, line 22, in module
run_wsgi(conf_file, 'proxy-server', default_port=8080, **options)
File /usr/lib/python2.7/dist-packages/swift/common/wsgi.py, line 122,
in run_wsgi
loadapp('config:%s' % conf_file, global_conf={'log_name': log_name})
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
247, in loadapp
return loadobj(APP, uri, name=name, **kw)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
271, in loadobj
global_conf=global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
296, in loadcontext
global_conf=global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
320, in _loadconfig
return loader.get_context(object_type, name, global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
450, in get_context
global_additions=global_additions)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
562, in _pipeline_app_context
for name in pipeline[:-1]]
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
454, in get_context
section)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
476, in _context_from_use
object_type, name=use, global_conf=global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
406, in get_context
global_conf=global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
296, in loadcontext
global_conf=global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
328, in _loadegg
return loader.get_context(object_type, name, global_conf)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
620, in get_context
object_type, name=name)
File /usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py, line
659, in find_egg_entry_point
for prot in protocol_options] or '(no entry points)'
LookupError: Entry point 'proxy_logging' not found in egg 'swift' (dir:
/usr/lib/python2.7/dist-packages; protocols: paste.filter_factory,
paste.filter_app_factory; entry_points: )
Here is my proxy-server.conf
[DEFAULT]
bind_port = 8080
user = os_admin
log_facility = LOG_LOCAL1
eventlet_debug = true
[pipeline:main]
pipeline = healthcheck cache tempauth proxy-logging proxy-server
[app:proxy-server]
use = egg:swift#proxy
allow_account_management = true
account_autocreate = true
[filter:tempauth]
use = egg:swift#tempauth
user_admin_admin = admin .admin .reseller_admin
user_test_tester = testing .admin
user_test2_tester2 = testing2 .admin
user_test_tester3 = testing3
[filter:healthcheck]
use = egg:swift#healthcheck
[filter:cache]
use = egg:swift#memcache
[filter:proxy-logging]
use = egg:swift#proxy_logging
Does anybody knows what am I missing?
Thanks,
Tomas
--
Tomáš Šoltys
tomas.sol...@gmail.com
http://www.range-software.com
(+420) 776-843-663
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] [Keystone] service unavailable
Hi, I am trying to setup keystone myself on CentOS using this step-by-step instructions: http://docs.openstack.org/essex/openstack-compute/install/yum/content/install-keystone.html I have followed the steps above but when I try to create a tenant I get Unable to communicate with identity service: (503, 'Service Unavailable'). (HTTP 400) The command I am using is: keystone --os-token 012345SECRET99TOKEN012345 --endpoint http://127.0.0.1:35357/v2.0 tenant-create --name openstackDefault --description Default tenant The service is running and listening on port 35357. Am I missing something? Thanks, Tomáš Šoltys tomas.sol...@gmail.com http://www.range-software.com (+420) 776-843-663 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Keystone] service unavailable
Hi, Yes, the service is running and listening. I can see it via ps as well as by using netstat Here is my keystone.conf - [DEFAULT] log_file = /var/log/keystone/keystone.log admin_token = 012345SECRET99TOKEN012345 [sql] connection = mysql://keystone:12345678@localhost/keystone [identity] driver = keystone.identity.backends.sql.Identity [catalog] template_file = /etc/keystone/default_catalog.templates driver = keystone.catalog.backends.sql.Catalog [token] driver = keystone.token.backends.sql.Token [policy] [ec2] driver = keystone.contrib.ec2.backends.sql.Ec2 [ssl] [signing] [ldap] [filter:debug] paste.filter_factory = keystone.common.wsgi:Debug.factory [filter:token_auth] paste.filter_factory = keystone.middleware:TokenAuthMiddleware.factory [filter:admin_token_auth] paste.filter_factory = keystone.middleware:AdminTokenAuthMiddleware.factory [filter:xml_body] paste.filter_factory = keystone.middleware:XmlBodyMiddleware.factory [filter:json_body] paste.filter_factory = keystone.middleware:JsonBodyMiddleware.factory [filter:user_crud_extension] paste.filter_factory = keystone.contrib.user_crud:CrudExtension.factory [filter:crud_extension] paste.filter_factory = keystone.contrib.admin_crud:CrudExtension.factory [filter:ec2_extension] paste.filter_factory = keystone.contrib.ec2:Ec2Extension.factory [filter:s3_extension] paste.filter_factory = keystone.contrib.s3:S3Extension.factory [filter:url_normalize] paste.filter_factory = keystone.middleware:NormalizingFilter.factory [filter:stats_monitoring] paste.filter_factory = keystone.contrib.stats:StatsMiddleware.factory [filter:stats_reporting] paste.filter_factory = keystone.contrib.stats:StatsExtension.factory [app:public_service] paste.app_factory = keystone.service:public_app_factory [app:admin_service] paste.app_factory = keystone.service:admin_app_factory [pipeline:public_api] pipeline = stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug ec2_extension user_crud_extension public_service [pipeline:admin_api] pipeline = stats_monitoring url_normalize token_auth admin_token_auth xml_body json_body debug stats_reporting ec2_extension s3_extension crud_extension admin_service [app:public_version_service] paste.app_factory = keystone.service:public_version_app_factory [app:admin_version_service] paste.app_factory = keystone.service:admin_version_app_factory [pipeline:public_version_api] pipeline = stats_monitoring url_normalize xml_body public_version_service [pipeline:admin_version_api] pipeline = stats_monitoring url_normalize xml_body admin_version_service [composite:main] use = egg:Paste#urlmap /v2.0 = public_api / = public_version_api [composite:admin] use = egg:Paste#urlmap /v2.0 = admin_api / = admin_version_api - 2013/2/27 Sylvain Bauza sylvain.ba...@digimind.com Could you please paste your keystone.conf ? Also, could you please check keystone service is started ? -Sylvain Le 27/02/2013 15:06, Tomáš Šoltys a écrit : Hi, I am trying to setup keystone myself on CentOS using this step-by-step instructions: http://docs.openstack.org/essex/openstack-compute/install/yum/content/install-keystone.html I have followed the steps above but when I try to create a tenant I get Unable to communicate with identity service: (503, 'Service Unavailable'). (HTTP 400) The command I am using is: keystone --os-token 012345SECRET99TOKEN012345 --endpoint http://127.0.0.1:35357/v2.0 tenant-create --name openstackDefault --description Default tenant The service is running and listening on port 35357. Am I missing something? Thanks, Tomáš Šoltys tomas.sol...@gmail.com http://www.range-software.com (+420) 776-843-663 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Tomáš Šoltys tomas.sol...@gmail.com http://www.range-software.com (+420) 776-843-663 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] keystone - service unavailable
I do not thinks so. I just checked whether they are defined, and they are not. Regards, Tomas 2013/2/27 JuanFra Rodriguez Cardoso juanfra.rodriguez.card...@gmail.com It could be a problem with environment variables loaded previously (such as OS_USERNAME, OS_PASSWORD...). Regards, JuanFra 2013/2/27 Tomáš Šoltys tomas.sol...@gmail.com Hi, I am trying to setup keystone myself on CentOS using this step-by-step instructions: http://docs.openstack.org/essex/openstack-compute/install/yum/content/install-keystone.html I have followed the steps above but when I try to create a tenant I get Unable to communicate with identity service: (503, 'Service Unavailable'). (HTTP 400) The command I am using is: keystone --os-token 012345SECRET99TOKEN012345 --endpoint http://127.0.0.1:35357/v2.0 tenant-create --name openstackDefault --description Default tenant The service is running and listening on port 35357. Am I missing something? Thanks, Tomáš Šoltys tomas.sol...@gmail.com http://www.range-software.com (+420) 776-843-663 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Tomáš Šoltys tomas.sol...@gmail.com http://www.range-software.com (+420) 776-843-663 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
