[Openstack] Swift not detect Keystone and Authtoken

Hua ZZ Zhang zhuadl at cn.ibm.com
Tue Sep 24 07:17:35 UTC 2013


I don't get what does it mean for "this syntax give same result"?
what is your version of swift and keystone?
Here's my suggestion for 3 sections in the proxy server paste file:

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            authtoken keystoneauth proxy-logging proxy-server

            [filter:authtoken]
            paste.filter_factory = keystoneclient
            .middleware.auth_token:filter_factory
            signing_dir = /var/cache/swift/
            auth_uri = http://10.10.10.40:5000/
            auth_host = 10.10.10.40
            #auth_uri = http://192.168.7.85:5000/
            #auth_host = 192.168.7.85
            auth_port = 35357
            auth_protocol = https
            admin_tenant_name = service
            admin_user = swift
            admin_password = admin
            #cache = swift.cache
            auth_token = admin

            [filter:keystoneauth]
            #use = egg:swift#keystoneauth
            operator_roles = Member,admin
            is_admin = true

http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html



                                                                           
             Mahardhika Gilang                                             
             <mahardika.gilang                                             
             @andalabs.com>                                             To 
                                       Hua ZZ Zhang/China/IBM at IBMCN,       
             2013-09-24 上午                                            cc 
             11:59                     Openstack Milis                     
                                       <openstack at lists.openstack.org>     
                                                                   Subject 
                                       Re: [Openstack] Swift not detect    
                                       Keystone and Authtoken              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




Hi, i've try change with auth_token and it's work, but does this syntax
give same result?

On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:


      try this:
      paste.filter_factory =
      keystoneclient.middleware.auth_token:filter_factory



      Inactive hide details for Mahardhika Gilang ---2013-09-23
          下
      午 07:15:28---Mahardhika Gilang
      <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-23 下午
      07:15:28---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-23 下午 07:16                                               
                                                    Hua ZZ                 
                                                    Zhang/China/IBM at IBMCN, 
                                                                           
                                                                        cc 
                                                                           
                                                    Openstack Milis        
                                                    <openstack at lists.opens 
                                                    tack.org>              
                                                                           
                                                                   Subject 
                                                                           
                                                    Re: [Openstack] Swift  
                                                    not detect Keystone    
                                                    and Authtoken          
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           



      Hi, thanks for answering, i believe it work till i stuck at this
      error
      ImportError: No module named swift_auth

      it's on filter:keystone part
      paste.filter_factory = keystone.middleware.swift_auth:filter_factory

      how to solved this issue?
      On 9/23/2013 4:53 PM, Hua ZZ Zhang wrote:



            The authtoken and keystone middleware should be put ahead of
            proxy-server.
            you need to change the main pipeline as below:

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            authtoken keystone
            proxy-logging proxy-server

            Best Regards,
                                                                             
       Edward Zhang(张华)                                                    
                                                                             


                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



            Inactive hide details for Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs.                                         
       com>                                                                
                                                                           
                                                                        To 
       09/23/2013 05:01 PM                                                 
                                                     Openstack Milis       
                                                     <openstack at lists.open 
                                                     stack.org>,           
                                                                           
                                                                        cc 
                                                                           
                                                                           
                                                                   Subject 
                                                                           
                                                     [Openstack] Swift not 
                                                     detect Keystone and   
                                                     Authtoken             
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            Hi all
            i've got an issue when i want to used keystone for
            authentication on
            swift proxy node.
            i got this when run #swift-init proxy restart
            LookupError: No section 'authtoken'
            LookupError: No section 'keystone'

            here's my proxy-server.conf
            [DEFAULT]
            cert_file = /etc/swift/cert.crt
            key_file = /etc/swift/cert.key
            bind_port = 8080
            #bind_port = 443
            workers = 8
            user = swift
            swift_dir = /etc/swift

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            tempauth
            proxy-logging proxy-server keystone authtoken

            [app:proxy-server]
            use = egg:swift#proxy
            allow_account_management = true
            account_autocreate = true

            [filter:authtoken]
            #use = egg:swift:authtoken
            paste.filter_factory =
            keystone.middleware.auth_token:filter_factory
            signing_dir = /var/cache/swift/
            auth_uri = http://10.10.10.40:5000/
            auth_host = 10.10.10.40
            #auth_uri = http://192.168.7.85:5000/
            #auth_host = 192.168.7.85
            auth_port = 35357
            auth_protocol = https
            admin_tenant_name = service
            admin_user = swift
            admin_password = admin
            #cache = swift.cache
            auth_token = admin

            [filter:catch_errors]
            use = egg:swift#catch_errors

            [filter:proxy-logging]
            use = egg:swift#proxy_logging

            #[filter:tempauth]
            #use = egg:swift#tempauth
            #user_system_root = testpass .admin
            https://10.10.10.40:8080/v1/AUTH_system
            #user_test_tester = testing .admin
            https://10.10.10.40:8080/v1/AUTH_test

            [filter:healthcheck]
            use = egg:swift#healthcheck

            [filter:cache]
            use = egg:swift#memcache
            memcache_servers = 10.10.10.40:11211

            [filter:keystone]
            #use = egg:swift#keystone
            paste.filter_factory =
            keystone.middleware.swift_auth:filter_factory
            operator_roles = Member,admin
            is_admin = true


            Please help
            thanks

            --
            Regards,
            Mahardhika Gilang



            _______________________________________________
            Mailing list:
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
            Post to     : openstack at lists.openstack.org
            Unsubscribe :
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack



      --
      Regards,
      Mahardhika Gilang

      PT. Andalabs Technology
      Gedung Gravira
      Jl. Cideng Barat no. 54
      Jakarta Pusat 10150

      HP : 0852 139 55861
      Email : mahardika.gilang at andalabs.com


--
Regards,
Mahardhika Gilang

PT. Andalabs Technology
Gedung Gravira
Jl. Cideng Barat no. 54
Jakarta Pusat 10150

Mobile : 0852 139 55861
Email : mahardika.gilang at andalabs.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130924/36842515/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130924/36842515/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic32146.gif
Type: image/gif
Size: 1255 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130924/36842515/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecblank.gif
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130924/36842515/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: F0701880.gif
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130924/36842515/attachment-0003.gif>


More information about the Openstack mailing list