Re: [Openstack] Keystone + Swift integration
On Sat, 26 Nov 2011 20:52:36 + Ziad Sawalha wrote: > Hi Pete - the brackets were a mistake in the documentation. The correct > syntax is %tenant_id%. Thanks, makes sense. I saw your commit just now, too. I'm still unable to coax Keystone into giving me X-Storage-Url:, so if I run swift CLI, it tracebacks (it receives X-Auth-Token fine and assumes that X-Storage-Url must be there too). It looks like the endpointTemplates wasn't added for some reason. Very mysterious. -- Pete ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Thanks a lot ziad we noticed the global way of.endponting and the private with association per tenant. Having detailed docs its always really helpfull. Integration between keystone and the other components are not well documented, we foght a lot with nova and keystone broken packages ended up cloning the cloudbuilders repo to get it working On Nov 26, 2011 5:52 PM, "Ziad Sawalha" wrote: > Hi Pete - the brackets were a mistake in the documentation. The correct > syntax is %tenant_id%. > > Z > > On 11/25/11 5:00 PM, "Pete Zaitcev" wrote: > > >On Wed, 23 Nov 2011 09:28:01 -0300 > >Leandro Reox wrote: > > > >> keystone-manage endpointTemplates add RegionOne swift > >> http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ > >> http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 > > > >I'm curious, did you actually put the '%' (percent) into those URLs, > >or you replaced it with the appropriate tennant ID? The documentation > >(doc/configuration.rst) tells to use square brackets, not percents, > >which is probably another hint to substitute the actual tenant ID. > >But what to do if we have 2 tenants? > > > >-- Pete > > > >___ > >Mailing list: https://launchpad.net/~openstack > >Post to : openstack@lists.launchpad.net > >Unsubscribe : https://launchpad.net/~openstack > >More help : https://help.launchpad.net/ListHelp > > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Hi Pete - the brackets were a mistake in the documentation. The correct syntax is %tenant_id%. Z On 11/25/11 5:00 PM, "Pete Zaitcev" wrote: >On Wed, 23 Nov 2011 09:28:01 -0300 >Leandro Reox wrote: > >> keystone-manage endpointTemplates add RegionOne swift >> http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ >> http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 > >I'm curious, did you actually put the '%' (percent) into those URLs, >or you replaced it with the appropriate tennant ID? The documentation >(doc/configuration.rst) tells to use square brackets, not percents, >which is probably another hint to substitute the actual tenant ID. >But what to do if we have 2 tenants? > >-- Pete > >___ >Mailing list: https://launchpad.net/~openstack >Post to : openstack@lists.launchpad.net >Unsubscribe : https://launchpad.net/~openstack >More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Thanks Chmouel , a type :> I do mean v2.0 2011/11/26 Chmouel Boudjnah > On Sat, Nov 26, 2011 at 6:33 AM, Kuo Hugo wrote: > > For Swift API v1.0 + keystone ... an User could only access one tenant.. > > But in Swift API v1.0 + keystone your can access different tenants > via > ^^^ > I guess you mean 2.0 and not 1.0 here. > > > "-U %tenant%:%USER%: hope it help > > Chmouel. > -- +Hugo Kuo+ tonyt...@gmail.com hugo@cloudena.com +886-935-004-793 www.cloudena.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
On Sat, Nov 26, 2011 at 6:33 AM, Kuo Hugo wrote: > For Swift API v1.0 + keystone ... an User could only access one tenant.. > But in Swift API v1.0 + keystone your can access different tenants via ^^^ I guess you mean 2.0 and not 1.0 here. > "-U %tenant%:%USER%: hope it help Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
2011/11/26 Pete Zaitcev > On Wed, 23 Nov 2011 09:28:01 -0300 > Leandro Reox wrote: > > > keystone-manage endpointTemplates add RegionOne swift > > http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ > > http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 > > I'm curious, did you actually put the '%' (percent) into those URLs, > or you replaced it with the appropriate tennant ID? The documentation > (doc/configuration.rst) tells to use square brackets, not percents, > which is probably another hint to substitute the actual tenant ID. > But what to do if we have 2 tenants? > > For Swift API v1.0 + keystone ... an User could only access one tenant.. But in Swift API v1.0 + keystone your can access different tenants via "-U %tenant%:%USER%: hope it help > -- Pete > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- +Hugo Kuo+ tonyt...@gmail.com hugo@cloudena.com +886-935-004-793 www.cloudena.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
In keystone endpoint templates, the appropriate syntax is to use is %tenant_id%, which keystone then substitutes with actual tenant ID's. Which documentation are you referring to (doc/configuration.rst)? -Dolph On Fri, Nov 25, 2011 at 5:00 PM, Pete Zaitcev wrote: > On Wed, 23 Nov 2011 09:28:01 -0300 > Leandro Reox wrote: > > > keystone-manage endpointTemplates add RegionOne swift > > http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ > > http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 > > I'm curious, did you actually put the '%' (percent) into those URLs, > or you replaced it with the appropriate tennant ID? The documentation > (doc/configuration.rst) tells to use square brackets, not percents, > which is probably another hint to substitute the actual tenant ID. > But what to do if we have 2 tenants? > > -- Pete > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
On Wed, 23 Nov 2011 09:28:01 -0300 Leandro Reox wrote: > keystone-manage endpointTemplates add RegionOne swift > http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ > http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 I'm curious, did you actually put the '%' (percent) into those URLs, or you replaced it with the appropriate tennant ID? The documentation (doc/configuration.rst) tells to use square brackets, not percents, which is probably another hint to substitute the actual tenant ID. But what to do if we have 2 tenants? -- Pete ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Ok, solved !!! was an issue on the Storage nodes, the path /srv/node was not found so the sda6 was returning "unmounted" ... actually weird the way that is presented to the user Regards On Wed, Nov 23, 2011 at 7:41 PM, Marcelo Martins wrote: > Hi Leandro, > > > If you search all swift services logs for the transaction Id returned what > do you see ? > > > > > > > Marcelo Martins > Openstack-swift > btorch...@zeroaccess.org > > “Knowledge is the wings on which our aspirations take flight and soar. > When it comes to surfing and life if you know what to do you can do it. If > you desire anything become educated about it and succeed. “ > > > > > On Nov 23, 2011, at 8:25 AM, Leandro Reox wrote: > > Im getting 404 with both tools, curl and swift , we're using the repo > where you commited 41 minutes ago > > > Regards > > On Wed, Nov 23, 2011 at 10:51 AM, Chmouel Boudjnah > wrote: > >> Hi, >> >> Which version did you use for keystone2 from cloudbuilders github >> trunk? can you try again (I just updated some fixes to it just now). >> >> And what do you mean you are getting 404, how do you test it ? with >> swift cli or via curl ? >> >> Chmouel. >> >> On Wed, Nov 23, 2011 at 2:27 PM, Leandro Reox >> wrote: >> > Hi Hugo, >> > >> > We changed out everything to keystone2 , now we're getting a 404 when >> we try >> > to create the container, maybe the account autocreation is not working >> > properly any thoughts ? >> > >> > Regards >> > >> > On Wed, Nov 23, 2011 at 10:20 AM, Kuo Hugo wrote: >> >> >> >> Hi Leandro , >> >> Post on launchpad QA will be a better place though. Plz post it on >> >> launchpad , and we will jump to there for further discussion. >> >> 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: >> >> MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 >> >> If keystone working properly , should return X-Auth-Token & >> X-Storage-url >> >> etc. >> >> After step 1 ... >> >> Use the returned X-Auth-Token and X-Storage-Url for the following cURL >> cmd >> >> curl -k -v -H "X-Auth-Token: %token%" %Returned >> >> X-storage-Url% http://%Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% >> >> I guess it will be >> >> curl -v -k -H "X-Auth-Token: 1234567890" >> >> http://172.16.0.88:8080/v1/AUTH_%tenant_ID% >> >> >> >> If so , I believe that your problem is on the protocol of Swift-proxy >> , as >> >> your post , it's under https in your proxy-server.conf . >> >> To disable it by comment >> >> cert_file = /etc/swift/cert.crt >> >> key_file = /etc/swift/cert.key >> >> or correct the endpoint of swift to https.. >> >> If you were deploying keystone via cloudbuilder/devstack script ... You >> >> might need to check the sampledata . With swift client v1.0 , it >> needs the >> >> value of Tenant_Id in USERS table. >> >> Hope it help ... >> >> -- >> >> +Hugo Kuo+ >> >> tonyt...@gmail.com >> >> hugo@cloudena.com >> >> +886-935-004-793 >> >> www.cloudena.com >> > >> > ___ >> > Mailing list: https://launchpad.net/~openstack >> > Post to : openstack@lists.launchpad.net >> > Unsubscribe : https://launchpad.net/~openstack >> > More help : https://help.launchpad.net/ListHelp >> > >> > >> > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Hi Leandro, If you search all swift services logs for the transaction Id returned what do you see ? Marcelo Martins Openstack-swift btorch...@zeroaccess.org “Knowledge is the wings on which our aspirations take flight and soar. When it comes to surfing and life if you know what to do you can do it. If you desire anything become educated about it and succeed. “ On Nov 23, 2011, at 8:25 AM, Leandro Reox wrote: > Im getting 404 with both tools, curl and swift , we're using the repo where > you commited 41 minutes ago > > > Regards > > On Wed, Nov 23, 2011 at 10:51 AM, Chmouel Boudjnah > wrote: > Hi, > > Which version did you use for keystone2 from cloudbuilders github > trunk? can you try again (I just updated some fixes to it just now). > > And what do you mean you are getting 404, how do you test it ? with > swift cli or via curl ? > > Chmouel. > > On Wed, Nov 23, 2011 at 2:27 PM, Leandro Reox wrote: > > Hi Hugo, > > > > We changed out everything to keystone2 , now we're getting a 404 when we try > > to create the container, maybe the account autocreation is not working > > properly any thoughts ? > > > > Regards > > > > On Wed, Nov 23, 2011 at 10:20 AM, Kuo Hugo wrote: > >> > >> Hi Leandro , > >> Post on launchpad QA will be a better place though. Plz post it on > >> launchpad , and we will jump to there for further discussion. > >> 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: > >> MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 > >> If keystone working properly , should return X-Auth-Token & X-Storage-url > >> etc. > >> After step 1 ... > >> Use the returned X-Auth-Token and X-Storage-Url for the following cURL cmd > >> curl -k -v -H "X-Auth-Token: %token%" %Returned > >> X-storage-Url% http://%Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% > >> I guess it will be > >> curl -v -k -H "X-Auth-Token: 1234567890" > >> http://172.16.0.88:8080/v1/AUTH_%tenant_ID% > >> > >> If so , I believe that your problem is on the protocol of Swift-proxy , as > >> your post , it's under https in your proxy-server.conf . > >> To disable it by comment > >> cert_file = /etc/swift/cert.crt > >> key_file = /etc/swift/cert.key > >> or correct the endpoint of swift to https.. > >> If you were deploying keystone via cloudbuilder/devstack script ... You > >> might need to check the sampledata . With swift client v1.0 , it needs > >> the > >> value of Tenant_Id in USERS table. > >> Hope it help ... > >> -- > >> +Hugo Kuo+ > >> tonyt...@gmail.com > >> hugo@cloudena.com > >> +886-935-004-793 > >> www.cloudena.com > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Need more informations . Maybe you can check the log of keystone , verifying where's the 404 come from If keystone log tell you that it already return 200 to swift . I think the 404 is returned from swift. the 404 bad request , should be log in proxy log and keystone log. -- +Hugo Kuo+ tonyt...@gmail.com hugo@cloudena.com +886-935-004-793 www.cloudena.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Im getting 404 with both tools, curl and swift , we're using the repo where you commited 41 minutes ago Regards On Wed, Nov 23, 2011 at 10:51 AM, Chmouel Boudjnah wrote: > Hi, > > Which version did you use for keystone2 from cloudbuilders github > trunk? can you try again (I just updated some fixes to it just now). > > And what do you mean you are getting 404, how do you test it ? with > swift cli or via curl ? > > Chmouel. > > On Wed, Nov 23, 2011 at 2:27 PM, Leandro Reox > wrote: > > Hi Hugo, > > > > We changed out everything to keystone2 , now we're getting a 404 when we > try > > to create the container, maybe the account autocreation is not working > > properly any thoughts ? > > > > Regards > > > > On Wed, Nov 23, 2011 at 10:20 AM, Kuo Hugo wrote: > >> > >> Hi Leandro , > >> Post on launchpad QA will be a better place though. Plz post it on > >> launchpad , and we will jump to there for further discussion. > >> 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: > >> MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 > >> If keystone working properly , should return X-Auth-Token & > X-Storage-url > >> etc. > >> After step 1 ... > >> Use the returned X-Auth-Token and X-Storage-Url for the following cURL > cmd > >> curl -k -v -H "X-Auth-Token: %token%" %Returned > >> X-storage-Url% http://%Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% > >> I guess it will be > >> curl -v -k -H "X-Auth-Token: 1234567890" > >> http://172.16.0.88:8080/v1/AUTH_%tenant_ID% > >> > >> If so , I believe that your problem is on the protocol of Swift-proxy , > as > >> your post , it's under https in your proxy-server.conf . > >> To disable it by comment > >> cert_file = /etc/swift/cert.crt > >> key_file = /etc/swift/cert.key > >> or correct the endpoint of swift to https.. > >> If you were deploying keystone via cloudbuilder/devstack script ... You > >> might need to check the sampledata . With swift client v1.0 , it > needs the > >> value of Tenant_Id in USERS table. > >> Hope it help ... > >> -- > >> +Hugo Kuo+ > >> tonyt...@gmail.com > >> hugo@cloudena.com > >> +886-935-004-793 > >> www.cloudena.com > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Hi, Which version did you use for keystone2 from cloudbuilders github trunk? can you try again (I just updated some fixes to it just now). And what do you mean you are getting 404, how do you test it ? with swift cli or via curl ? Chmouel. On Wed, Nov 23, 2011 at 2:27 PM, Leandro Reox wrote: > Hi Hugo, > > We changed out everything to keystone2 , now we're getting a 404 when we try > to create the container, maybe the account autocreation is not working > properly any thoughts ? > > Regards > > On Wed, Nov 23, 2011 at 10:20 AM, Kuo Hugo wrote: >> >> Hi Leandro , >> Post on launchpad QA will be a better place though. Plz post it on >> launchpad , and we will jump to there for further discussion. >> 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: >> MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 >> If keystone working properly , should return X-Auth-Token & X-Storage-url >> etc. >> After step 1 ... >> Use the returned X-Auth-Token and X-Storage-Url for the following cURL cmd >> curl -k -v -H "X-Auth-Token: %token%" %Returned >> X-storage-Url% http://%Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% >> I guess it will be >> curl -v -k -H "X-Auth-Token: 1234567890" >> http://172.16.0.88:8080/v1/AUTH_%tenant_ID% >> >> If so , I believe that your problem is on the protocol of Swift-proxy , as >> your post , it's under https in your proxy-server.conf . >> To disable it by comment >> cert_file = /etc/swift/cert.crt >> key_file = /etc/swift/cert.key >> or correct the endpoint of swift to https.. >> If you were deploying keystone via cloudbuilder/devstack script ... You >> might need to check the sampledata . With swift client v1.0 , it needs the >> value of Tenant_Id in USERS table. >> Hope it help ... >> -- >> +Hugo Kuo+ >> tonyt...@gmail.com >> hugo@cloudena.com >> +886-935-004-793 >> www.cloudena.com > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Hi Hugo, We changed out everything to keystone2 , now we're getting a 404 when we try to create the container, maybe the account autocreation is not working properly any thoughts ? Regards On Wed, Nov 23, 2011 at 10:20 AM, Kuo Hugo wrote: > Hi Leandro , > > Post on launchpad QA will be a better place though. Plz post it on > launchpad , and we will jump to there for further discussion. > > 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: > MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 > > If keystone working properly , should return X-Auth-Token & X-Storage-url > etc. > > After step 1 ... > > Use the returned X-Auth-Token and X-Storage-Url for the following cURL cmd > > curl -k -v -H "X-Auth-Token: %token%" %Returned X-storage-Url% * *http:// > %Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% > > I guess it will be > curl -v -k -H "X-Auth-Token: 1234567890" > http://172.16.0.88:8080/v1/AUTH_%tenant_ID% > > > If so , I believe that your problem is on the protocol of Swift-proxy , as > your post , it's under https in your proxy-server.conf . > > To disable it by comment > > cert_file = /etc/swift/cert.crt > key_file = /etc/swift/cert.key > > or correct the endpoint of swift to https.. > > If you were deploying keystone via cloudbuilder/devstack script ... You > might need to check the sampledata . With swift client v1.0 , it needs > the value of Tenant_Id in USERS table. > > Hope it help ... > -- > +Hugo Kuo+ > tonyt...@gmail.com > hugo@cloudena.com > +886-935-004-793 > > www.cloudena.com > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone + Swift integration
Hi Leandro , Post on launchpad QA will be a better place though. Plz post it on launchpad , and we will jump to there for further discussion. 1. Verify that your keystone is running , via curl -v -H "X-Auth-User: MAX" -H "X-Auth-Key: Infa" http://%keystone_IP%:5000/v1.0 If keystone working properly , should return X-Auth-Token & X-Storage-url etc. After step 1 ... Use the returned X-Auth-Token and X-Storage-Url for the following cURL cmd curl -k -v -H "X-Auth-Token: %token%" %Returned X-storage-Url% * *http:// %Swift-proxy_IP%:8080/v1/AUTH_%tenant_id% I guess it will be curl -v -k -H "X-Auth-Token: 1234567890" http://172.16.0.88:8080/v1/AUTH_%tenant_ID% If so , I believe that your problem is on the protocol of Swift-proxy , as your post , it's under https in your proxy-server.conf . To disable it by comment cert_file = /etc/swift/cert.crt key_file = /etc/swift/cert.key or correct the endpoint of swift to https.. If you were deploying keystone via cloudbuilder/devstack script ... You might need to check the sampledata . With swift client v1.0 , it needs the value of Tenant_Id in USERS table. Hope it help ... -- +Hugo Kuo+ tonyt...@gmail.com hugo@cloudena.com +886-935-004-793 www.cloudena.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Keystone + Swift integration
Hi guys, Anyone has a working proxy-server.conf and endpoint templates for swift, we're trying to integrate them but we always face a different error. We're using keystone from the Cloudbuilders repo and Swift release 1.4.3 . When we test our environment all the POST and GETs via swift tool or CURL returns empty , and actually swift is not logging anything (any log config there too ? ) *Here is our proxy-server.conf on swifts proxys : * [DEFAULT] # Enter these next two values if using SSL certifications cert_file = /etc/swift/cert.crt key_file = /etc/swift/cert.key bind_port = 8080 workers = 8 user = swift [pipeline:main] # keep swauth in the line below if you plan to use swauth for authentication pipeline = catch_errors cache keystone proxy-server [app:proxy-server] use = egg:swift#proxy account_autocreate = true [filter:keystone] use = egg:keystone#tokenauth auth_protocol = http auth_host = 172.16.144.51 auth_port = 35357 admin_token = 1234567890 delay_auth_decision = 0 service_protocol = http service_host = 172.16.144.51 service_port = 5000 service_pass = dTpw [filter:cache] use = egg:swift#memcache memcache_servers = 172.16.168.10:11211,172.16.168.11:11211 set log_name = cache [filter:catch_errors] use = egg:swift#catch_errors [filter:swift3] use = egg:swift#swift3 log_facility = LOG_LOCAL1 *And here is our endpoint template on keystone ( 172.16.0.88:8080 is our proxys VIP) :* keystone-manage service add swift object-store "Swift Service" keystone-manage endpointTemplates add RegionOne swift http://172.16.0.88:8080/v1/AUTH_%tenant_id% http://172.16.0.88:8080/ http://172.16.0.88:8080/v1/AUTH_%tenant_id% 1 1 keystone-manage endpoint add admin 4 keystone-manage endpoint add demo 4 keystone-manage endpoint add infra 4 When we request a token via curl, its all the info in the headers but when we do a swift -A http://172.16.144.51:5000/v1.0 -U Max -K Infra post container swift -A http://172.16.144.51:5000/v1.0 -U Max -K Infra stat -v Hangs forever and returns empty ! We have a very big swift environment running OK with swauth , but we want to integrate it with keystone , we should use the keystone2 swift middleware that comes with devstack instead of this ? What is wrong on the confs ? Regards Lele ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Keystone / Swift integration
Hello, can anyone comment on the status of the Keystone auth middle-ware component for Swift? When can we expect ACL support included? Will we have swauth comparable functionality by the time Diablo releases? Thanks, Jason smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
