<div dir="ltr">Thiago,<div><br></div><div>My current ml2_conf.ini looks like your example. My environment also continues to work if I omit the entire [security_group] section. However, it stops working if I omit the [securitygroup] section.</div>
<div><br></div><div>Matt</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Apr 7, 2014 at 5:36 PM, Martinx - $B%8%'!<%`%:(B <span dir="ltr"><<a href="mailto:thiagocmartinsc@gmail.com" target="_blank">thiagocmartinsc@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi!<div><br></div><div>I faced this problem this weekend, look:  <a href="https://bugs.launchpad.net/bugs/1303517" target="_blank">https://bugs.launchpad.net/bugs/1303517</a></div>
<div><br></div><div>Currently, my ml2_conf.ini contains:</div>

<div><br></div><div>---</div><div><div><font face="courier new, monospace">[security_group]</font></div><div><font face="courier new, monospace">enable_security_group = True</font></div><div><font face="courier new, monospace"><br>


</font></div><div><font face="courier new, monospace">[securitygroup]</font></div><div><font face="courier new, monospace">firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver</font></div>


</div><div>---</div><div><br></div><div>Best!</div><div>Thiago</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On 7 April 2014 19:50, Akihiro Motoki <span dir="ltr"><<a href="mailto:amotoki@gmail.com" target="_blank">amotoki@gmail.com</a>></span> wrote:<br>


<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Matt,<br>
<br>
Thanks for raising this. Both should be the same section.<br>
[securitygroup] section exists in Havana and previous releases and<br>
it is the right section name.<br>
<br>
When we introduced enable_security_group option, we seem to have added<br>
a new section<br>
accidentally. We don't intended to introduce a new section name.<br>
<br>
IMO, both firewall_driver and enable_security_group are placed in<br>
[securitygroup].<br>
It should be fixed ASAP. I will take care of it.<br>
<br>
Thanks,<br>
Akihiro<br>
<div><div><br>
<br>
On Tue, Apr 8, 2014 at 5:51 AM, Matt Kassawara <<a href="mailto:mkassawara@gmail.com" target="_blank">mkassawara@gmail.com</a>> wrote:<br>
> I'm writing the ML2 configuration sections for the installation guide and<br>
> found a potential location conflict for the 'enable_security_group' key in<br>
> ml2_conf.ini. In the patch associated with this feature, the example<br>
> configuration file has this key under [security_group].<br>
><br>
> <a href="https://review.openstack.org/#/c/67281/33/etc/neutron/plugins/ml2/ml2_conf.ini" target="_blank">https://review.openstack.org/#/c/67281/33/etc/neutron/plugins/ml2/ml2_conf.ini</a><br>
><br>
> The most recent gate from the milestone-proposed branch also has this key<br>
> under [security_group].<br>
><br>
> <a href="http://logs.openstack.org/76/85676/1/gate/gate-tempest-dsvm-neutron/80af0f6/logs/etc/neutron/plugins/ml2/ml2_conf.ini.txt.gz" target="_blank">http://logs.openstack.org/76/85676/1/gate/gate-tempest-dsvm-neutron/80af0f6/logs/etc/neutron/plugins/ml2/ml2_conf.ini.txt.gz</a><br>



><br>
> However, the code has this key under [securitygroup] with the<br>
> 'firewall_driver' key.<br>
><br>
> <a href="https://github.com/openstack/neutron/blob/master/neutron/agent/securitygroups_rpc.py" target="_blank">https://github.com/openstack/neutron/blob/master/neutron/agent/securitygroups_rpc.py</a><br>
><br>
> What's the proper location for the 'enable_security_group' key?<br>
><br>
> Thanks,<br>
> Matt<br>
><br>
</div></div>> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org" target="_blank">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>