Re: [Openstack] Swift Object Storage ACLs with KeyStone

2013-11-13 Thread thorfinn
@Dheerendra: the correct IP address is 192.168.3.100. It's a mistake. Same problem with correct ip adress. @Kuo Hugo: I don't understand the item 1. On the item 2: curl -i -X POST -H X-Auth-Token: $tokenTest1 -H X-Container-Read:test2 -H X-Container-Write: test2

Re: [Openstack] Swift Object Storage ACLs with KeyStone

2013-11-13 Thread thorfinn
This syntax is correct: curl -i -X POST -H X-Auth-Token: $tokenTest1 -H X-Container-Read: *:* -H \ X-Container-Write: *:* http://192.168.3.100:8080/v1/AUTH_$tenantTest1/foo curl -i -X GET -H X-Auth-Token: $tokenTest2 http://192.168.3.100:8080/v1/AUTH_$tenantTest1/foo HTTP/1.1 204 No

Re: [Openstack] Swift Object Storage ACLs with KeyStone

2013-11-13 Thread Kuo Hugo
I may know the problem now. You can have a look at @fbo's blog : http://blog.fsquat.net/?p=40 I had a deep diving on the auth middleware today. The authtoken middleware will reject the request if the token's tenant mapping is not matching to the one your requested. *[Debug log]* Nov 13

[Openstack] Swift Object Storage ACLs with KeyStone

2013-11-12 Thread thorfinn
Hi all, I use Openstack Havana (Storage + Identity) I encountered some problems when i set permissions (ACLs) on Openstack Swift containers. My swift proxy-server.conf is here: http://pastebin.com/0hpfebNp My keystone.conf is here: http://pastebin.com/VUGYbcM5 I have the token of