<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Hi Leandro - </div>
<div><br>
</div>
<div>As an aside, I notice in your commands you are creating a <i>global</i> endpoint template and then adding it to all your tenants. A global endpoint template should be added to all tenants by automatically (no need for the adds on each tenant).</div>
<div><br>
</div>
<div>I have just finished submitting a review of our docs with better explanation of endpoints and endpoint templates. It's not merged in yet so I attached a PDF version.</div>
<div><br>
</div>
<div>Ziad</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Leandro Reox <<a href="mailto:leandro.reox@gmail.com">leandro.reox@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wed, 23 Nov 2011 09:28:01 -0300<br>
<span style="font-weight:bold">To: </span><<a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>><br>
<span style="font-weight:bold">Subject: </span>[Openstack] Keystone + Swift integration<br>
</div>
<div><br>
</div>
Hi guys, <br>
<br>
Anyone has a working proxy-server.conf and endpoint templates for swift, we're trying to integrate them but we always face a different error. We're using keystone from the Cloudbuilders repo and Swift release 1.4.3 . <br>
<br>
When we test our environment all the POST and GETs via swift tool or CURL returns empty , and actually swift is not logging anything (any log config there too ? )
<div><br>
</div>
<div><b>Here is our proxy-server.conf on swifts proxys :<br>
</b><br>
<div>[DEFAULT]</div>
<div># Enter these next two values if using SSL certifications</div>
<div>cert_file = /etc/swift/cert.crt</div>
<div>key_file = /etc/swift/cert.key</div>
<div>bind_port = 8080</div>
<div>workers = 8</div>
<div>user = swift</div>
<div><br>
</div>
<div>[pipeline:main]</div>
<div># keep swauth in the line below if you plan to use swauth for authentication</div>
<div>pipeline = catch_errors cache keystone proxy-server</div>
<div><br>
</div>
<div>[app:proxy-server]</div>
<div>use = egg:swift#proxy</div>
<div>account_autocreate = true</div>
<div><br>
</div>
<div>[filter:keystone]</div>
<div>use = egg:keystone#tokenauth</div>
<div>auth_protocol = http</div>
<div>auth_host = 172.16.144.51</div>
<div>auth_port = 35357</div>
<div>admin_token = 1234567890</div>
<div>delay_auth_decision = 0</div>
<div>service_protocol = http</div>
<div>service_host = 172.16.144.51</div>
<div>service_port = 5000</div>
<div>service_pass = dTpw</div>
<div><br>
</div>
<div>[filter:cache]</div>
<div>use = egg:swift#memcache</div>
<div>memcache_servers = <a href="http://172.16.168.10:11211">172.16.168.10:11211</a>,<a href="http://172.16.168.11:11211">172.16.168.11:11211</a></div>
<div>set log_name = cache</div>
<div><br>
</div>
<div>[filter:catch_errors]</div>
<div>use = egg:swift#catch_errors</div>
<div><br>
</div>
<div>[filter:swift3]</div>
<div>use = egg:swift#swift3</div>
<div>log_facility = LOG_LOCAL1</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div><b>And here is our endpoint template on keystone ( <a href="http://172.16.0.88:8080">172.16.0.88:8080</a> is our proxys VIP) :</b></div>
<div><br>
</div>
<div>
<div>keystone-manage service add swift object-store "Swift Service"</div>
<div>keystone-manage endpointTemplates add RegionOne swift <a href="http://172.16.0.88:8080/v1/AUTH_%tenant_id%">
http://172.16.0.88:8080/v1/AUTH_%tenant_id%</a> <a href="http://172.16.0.88:8080/">
http://172.16.0.88:8080/</a> <a href="http://172.16.0.88:8080/v1/AUTH_%tenant_id%">
http://172.16.0.88:8080/v1/AUTH_%tenant_id%</a> 1 1</div>
</div>
<div>
<div>keystone-manage endpoint add admin 4</div>
<div>keystone-manage endpoint add demo 4</div>
<div>keystone-manage endpoint add infra 4</div>
</div>
<div><br>
</div>
<div>When we request a token via curl, its all the info in the headers but when we do a </div>
<div>
<div><br>
</div>
<div>swift -A <a href="http://172.16.144.51:5000/v1.0">http://172.16.144.51:5000/v1.0</a> -U Max -K Infra post container</div>
<div>swift -A <a href="http://172.16.144.51:5000/v1.0">http://172.16.144.51:5000/v1.0</a> -U Max -K Infra stat -v</div>
</div>
<div><br>
</div>
<div>Hangs forever and returns empty !<br>
<br>
We have a very big swift environment running OK with swauth , but we want to integrate it with keystone , we should use the keystone2 swift middleware that comes with devstack instead of this ? What is wrong on the confs ?<br>
<br>
Regards<br>
Lele</div>
<div><br>
</div>
_______________________________________________ Mailing list: <a href="https://launchpad.net/~openstack">
https://launchpad.net/~openstack</a> Post to : <a href="mailto:openstack@lists.launchpad.net">
openstack@lists.launchpad.net</a> Unsubscribe : <a href="https://launchpad.net/~openstack">
https://launchpad.net/~openstack</a> More help : <a href="https://help.launchpad.net/ListHelp">
https://help.launchpad.net/ListHelp</a> </span>
</body>
</html>