<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    On 02/02/2013 07:52 PM, Ravi Chunduru wrote:
    <blockquote
cite="mid:CAEgw6yvmD-j_is6cF8bRLV=j411P6EbRwhZ=oH729xFucE-=6Q@mail.gmail.com"
      type="cite">
      <div dir="ltr">L3 agent uses Qclient to communicate with Quantum
        server while Plugin agents used RPC.
        <div>I understand there is a BP for L3 agent to use RPC in
          coming days.</div>
      </div>
    </blockquote>
    <br>
    Hi Ravi,<br>
    In Grizzly the L3 agent makes use of the RPC to interface with the
    Quantum plugin. In Folsom the L3 agent makes use of the Quantum
    client API to retrieve the l3 data.<br>
    Yes, there is keystone authentication. Can you please look at:<br>
<a class="moz-txt-link-freetext" href="https://github.com/openstack/quantum/blob/stable/folsom/quantum/agent/l3_agent.py#L120">https://github.com/openstack/quantum/blob/stable/folsom/quantum/agent/l3_agent.py#L120</a><br>
    This is via the parameters in the INI file:<br>
<a class="moz-txt-link-freetext" href="https://github.com/openstack/quantum/blob/stable/folsom/etc/l3_agent.ini#L13">https://github.com/openstack/quantum/blob/stable/folsom/etc/l3_agent.ini#L13</a><br>
    <br>
    <blockquote
cite="mid:CAEgw6yvmD-j_is6cF8bRLV=j411P6EbRwhZ=oH729xFucE-=6Q@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div><br>
        </div>
        <div>I was going through OVS agent code, found that it does not
          authenticate with keystone, which I feel is a  security
          concern.</div>
        <div><br>
        </div>
      </div>
    </blockquote>
    <br>
    The code that you are referring to is most probably for the l2 agent
    interface.<br>
    <br>
    <blockquote
cite="mid:CAEgw6yvmD-j_is6cF8bRLV=j411P6EbRwhZ=oH729xFucE-=6Q@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>self.rpc_context = context.RequestContext('quantum',
            'quantum',</div>
          <div>                                                 
            is_admin=False)</div>
        </div>
        <div><br>
        </div>
        <div style="">auth token is not sent while creating context.</div>
        <div style=""><br>
        </div>
        <div style="">Any considerations to do that way?</div>
        <div style=""><br>
        </div>
        <div style="">Thanks,</div>
        <div>
          <div><br>
          </div>
          -- <br>
          Ravi<br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
OpenStack-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>