Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-27 Thread Khandeshi, Divyesh
- From: John Dickinson [mailto:john.dickin...@rackspace.com] Sent: Tuesday, July 19, 2011 10:08 AM To: Khandeshi, Divyesh Cc: 'openstack@lists.launchpad.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account Account deletes need to be handled by a DELETE c

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-19 Thread Jay Payne
t; propagated/synced to Swift? Who or how would the account tombstones be set? >> >> Thanks >> >> Divyesh >> >> >> -Original Message- >> From: John Dickinson [mailto:john.dickin...@rackspace.com] >> Sent: Monday, July 18, 2011 5:03 PM

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-19 Thread John Dickinson
vyesh > Cc: 'openstack@lists.launchpad.net' > Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account > > The security implications are tied to what credentials as user gets from the > auth server you are using. The possibility is that a user could d

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-19 Thread Khandeshi, Divyesh
d.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account The security implications are tied to what credentials as user gets from the auth server you are using. The possibility is that a user could delete their own account (or even another user's account) or crea

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-19 Thread Juan J.
On Mon, 2011-07-18 at 16:02 -0500, John Dickinson wrote: > The security implications are tied to what credentials as user gets from the > auth server you are using. The possibility is that a user could delete their > own account (or even another user's account) or create new accounts. > Disablin

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread John Dickinson
eshi, Divyesh > Sent: Monday, July 18, 2011 3:56 PM > To: John Dickinson > Cc: 'openstack@lists.launchpad.net' > Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account > > John, > > Thanks for the information. > > When you mention PUT/

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Khandeshi, Divyesh
, Divyesh Sent: Monday, July 18, 2011 3:56 PM To: John Dickinson Cc: 'openstack@lists.launchpad.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account John, Thanks for the information. When you mention PUT/DELETE accounts - where is this API documented? Or could y

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread John Dickinson
ide account management (Swift > account CRUD). > > Thanks > > Divyesh > > > From: Ziad Sawalha [mailto:ziad.sawa...@rackspace.com] > Sent: Monday, July 18, 2011 11:41 AM > To: Khandeshi, Divyesh; 'openstack@lists.launchpad.net' > Subject: Re: [Open

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Khandeshi, Divyesh
, 2011 3:41 PM To: Khandeshi, Divyesh Cc: Ziad Sawalha; 'openstack@lists.launchpad.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account To provision an account in a swift cluster without using the autocreate option, you must run a proxy serve

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Khandeshi, Divyesh
lly provide account management (Swift account CRUD). Thanks Divyesh From: Ziad Sawalha [mailto:ziad.sawa...@rackspace.com] Sent: Monday, July 18, 2011 11:41 AM To: Khandeshi, Divyesh; 'openstack@lists.launchpad.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swif

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Ziad Sawalha
"Khandeshi, Divyesh" mailto:divyesh.khande...@hp.com>> Date: Mon, 18 Jul 2011 15:47:31 +0100 To: Ziad Sawalha mailto:ziad.sawa...@rackspace.com>>, "'openstack@lists.launchpad.net'" mailto:openstack@lists.launchpad.net>> Subject: RE: [Openstack] [Key

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Ziad Sawalha
0100 To: Ziad Sawalha mailto:ziad.sawa...@rackspace.com>>, "'openstack@lists.launchpad.net'" mailto:openstack@lists.launchpad.net>> Subject: RE: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account Ziad, 1. You mention that Nova has a shim for lazy syncing

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-18 Thread Khandeshi, Divyesh
, Liem Manh; 'openstack@lists.launchpad.net' Subject: Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account Swift account and tenant should be the same. This does not prescribe that Swift not store them locally (Nova still stores projects). The synchronization can be lazy

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-17 Thread Jay Pipes
Hi Liem! Comments inline... > From: Nguyen, Liem Manh [mailto:liem_m_ngu...@hp.com] > Sent: Friday, July 15, 2011 05:56 PM > > For Nova, the Keystone Tenant maps to a Nova project, and according to the > “Finalize Auth integration” blueprint, the Nova project is going away (“no > more project/role

Re: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-16 Thread Ziad Sawalha
oying and operating openstack)... Z From: Nguyen, Liem Manh [mailto:liem_m_ngu...@hp.com] Sent: Friday, July 15, 2011 05:56 PM To: openstack@lists.launchpad.net Subject: [Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account Hi, For Nova, the Keystone Tenant maps to a Nova project

[Openstack] [Keystone] [Swift] Keystone Tenant vs Swift Account

2011-07-15 Thread Nguyen, Liem Manh
Hi, For Nova, the Keystone Tenant maps to a Nova project, and according to the "Finalize Auth integration" blueprint, the Nova project is going away ("no more project/roleuser info in nova"). What about Swift's account? I assume the Keystone tenant would map to a Swift account. How would thi