Hi Chmouel,<div><br></div><div>Thank you for your information.<br><div><br></div><div>I installed swift-keystone2 and modified proxy-server.conf.</div><div><br></div><div>BUT authentication maybe not work well. for example, I want to check demo's status using the </div>
<div>following command.</div><div><br></div><div><div>[root@node01 ~]# swift -A <a href="http://127.0.0.1:5000/v1.0">http://127.0.0.1:5000/v1.0</a> -U demo -K password stat</div><div><br></div><div>Account HEAD failed: <a href="http://api.cloud.com:8080/v1/AUTH_2">http://api.cloud.com:8080/v1/AUTH_2</a> 403 Forbidden</div>
<div><br></div><div><div>[root@node01 ~]# swift -A <a href="http://127.0.0.1:5000/v1.0">http://127.0.0.1:5000/v1.0</a> -U demo -K password post test_container</div><div><br></div><div>Container POST failed: <a href="http://api.cloud.com:8080/v1/AUTH_2/test_container">http://api.cloud.com:8080/v1/AUTH_2/test_container</a> 403 Forbidden</div>
</div><div><br></div><div>ALL operation (HEAD/PUT/POST/GET) will be returned with 403 Forbidden.</div><div><br></div><div>But if I change proxy-server.conf back to the old config. ALL operation (HEAD/PUT/POST/GET) </div>
<div>are ok.</div><div><br></div><div>Keystone version: openstack-keystone-2011.3-b475.noarch</div><div>Swift version:</div><div><div>openstack-swift-1.4.3-b447.noarch</div><div>openstack-swift-account-1.4.3-b447.noarch</div>
<div>openstack-swift-proxy-1.4.3-b447.noarch</div><div>openstack-swift-object-1.4.3-b447.noarch</div><div>openstack-swift-container-1.4.3-b447.noarch</div></div><div><br></div><div>proxy-server.conf </div><div><div>[DEFAULT]</div>
<div>bind_port = 8080</div><div>user = swift</div><div><br></div><div>[pipeline:main]</div><div>pipeline = catch_errors cache keystone2 proxy-server</div><div><br></div><div>[app:proxy-server]</div><div>use = egg:swift#proxy</div>
<div>account_autocreate = true</div><div>log_facility = LOG_LOCAL1</div><div>log_level = DEBUG</div><div><br></div><div>[filter:keystone2]</div><div>use = egg:swiftkeystone2#keystone2</div><div>keystone_admin_token = 999888777666</div>
<div>keystone_url = <a href="http://127.0.0.1:5001/v2.0">http://127.0.0.1:5001/v2.0</a> ( 5001 for admin api port, 5000 for service api port)</div><div><br></div><div>[filter:cache]</div><div>use = egg:swift#memcache</div>
<div>set log_name = cache</div></div><div><br></div><div><div>[filter:catch_errors]</div><div>use = egg:swift#catch_errors</div></div><div><br></div><div><br></div><div>Does it need to upgrade keystone to the latest version ? How to debug keystone2 ? </div>
<div><br></div><div><br></div><div>Regards,</div><div>Li Hua</div><div><br></div><div><br></div><meta http-equiv="content-type" content="text/html; charset=utf-8"><br><div class="gmail_quote">On Thu, Nov 3, 2011 at 3:29 PM, Chmouel Boudjnah <span dir="ltr"><<a href="mailto:Chmouel.Boudjnah@rackspace.co.uk">Chmouel.Boudjnah@rackspace.co.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div style="word-wrap:break-word">
<p>
</p><div>Hi Li,</div>
<div><br>
</div>
<div>Swift middleware shipped with keystone doesn't support ACL, you may want to try this middleware instead :</div>
<div><br>
</div>
<div><a href="https://github.com/cloudbuilders/swift-keystone2" target="_blank">https://github.com/cloudbuilders/swift-keystone2</a></div>
<div><br>
</div>
<div>Chmouel.</div><div><div></div><div class="h5">
<br>
<div>
<div>On 3 Nov 2011, at 05:45, Li Hua wrote:</div>
<br>
<blockquote type="cite">
<div style="margin-top:5px;margin-right:15px;margin-bottom:5px;margin-left:15px;padding-bottom:20px">
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
Hi Folks,</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
I set up a SAIO test environment in RHEL6.1 using <span style="font-size:15px">openstack-swift-1.4.3-b447.noarch from </span></div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<span style="font-size:15px"></span><a href="http://yum.griddynamics.net/yum/diablo-centos/" target="_blank">http://yum.griddynamics.net/yum/diablo-centos/</a> .</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
I want to test the container Read/Write access permission using the following steps.</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
Creating a container with read access permission for anyone.</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div>
<div style="border-collapse:collapse;font-family:arial, sans-serif"><span style="font-size:15px">[root@node01 ~]# swift -A <a href="http://127.0.0.1:5000/v1.0" style="color:rgb(42, 93, 176)" target="_blank">http://127.0.0.1:5000/v1.0</a> -U
demo -K password post -r '.r:*' testcontainer</span></div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
Checking the stat of container:</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<div>[root@node01 ~]# swift -A <a href="http://127.0.0.1:5000/v1.0" style="color:rgb(42, 93, 176)" target="_blank">http://127.0.0.1:5000/v1.0</a> -U demo -K password stat testcontainer Account: AUTH_2</div>
<div>Container: testcontainer</div>
<div> Objects: 0</div>
<div> Bytes: 0</div>
<div> Read ACL: </div>
<div>Write ACL: </div>
<div> Sync To: </div>
<div> Sync Key: </div>
<div>Accept-Ranges: bytes</div>
<div>X-Trans-Id: tx1c0e9c6220ea433a90713c160a88b33f</div>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
<div><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px">It seems that testcontainer still has no Read ACL. Any comments </span></font><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px">?
thanks.</span></font></div>
<div><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px"><br>
</span></font></div>
<div><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px"><br>
</span></font></div>
<div><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px">Regards,</span></font></div>
<div><font face="arial, sans-serif" size="4"><span style="border-collapse:collapse;font-size:15px">Li Hua</span></font></div>
<div style="font-size:15px;border-collapse:collapse;font-family:arial, sans-serif">
<br>
</div>
</div>
</div>
</blockquote></div></div></div><p></p>
<p> </p>
<p>
</p><table border="0" cellpadding="0" width="504">
<tbody>
<tr>
<td style="width:270px">Chmouel Boudjnah<br>Cloud Product Engineer</td>
<td style="width:281px"><img alt="experience Fanatical Support" align="right" width="159" height="17"></td></tr>
<tr>
<td colspan="2"><img alt="LINE" width="504" height="4"></td></tr>
<tr>
<td><table><tbody><tr><td>Tel: </td><td><a href="tel:%2B442087344212" value="+442087344212" target="_blank">+442087344212</a></td></tr><tr><td>Fax: </td><td><a href="tel:%2B44%2020%208606%206111" value="+442086066111" target="_blank">+44 20 8606 6111</a></td>
</tr><tr><td>Web:</td><td><a title="">www.rackspace.co.uk</a></td></tr></tbody></table></td>
<td rowspan="2"><img alt="Rackspace" width="280" height="74"></td></tr>
<tr>
<td>
<p><a href="http://www.twitter.com/rackspaceemea/" target="_blank"><img alt="Follow us on twitter" width="146" height="20"></a></p></td></tr>
<tr>
<td colspan="2"><img width="504" height="3"></td></tr></tbody></table><p></p>
<p> </p>
<p></p><div><blockquote type="cite">_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
</blockquote>
</div>
<br>
<p></p></div>
</blockquote></div><br></div></div>