<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>On 17 Feb 2012, at 06:12, Pete Zaitcev wrote:</div><blockquote type="cite"><div><blockquote type="cite">- A S3Token middleware which is based on Akira version with some fixes.</blockquote>Yeah, that looks beautiful... Unfortunately the back-end<br>inherits the old problem: it authorizes against EC2 credentials<br>instead of Swift credentials. The result is, if two applications<br>A and B use different access methods, CF and S3, to the same account,<br>they do not see each other's objects. It happens because the storage<br>URL returned by Keystone differs for them, as far as I can discern.</div></blockquote><div><br></div><div>This is actually supported as mentioned in my temporary doc[1] see the transcript here :</div><div><br></div><div><a href="http://pastie.org/3401911">http://pastie.org/3401911</a> </div><div><br></div><div>this made of from a fresh devstack with a few tweaks to the configurations.</div><div>I plan to add this to devstack but I am waiting first for some of my other review to get approved to push those changes and be able to get rid of swift-keystone2 for good.</div><div><br></div><blockquote type="cite"><div><blockquote type="cite">S3token middleware: <a href="https://review.openstack.org/#change,3910">https://review.openstack.org/#change,3910</a><br></blockquote><blockquote type="cite">Swift token middleware: <a href="https://review.openstack.org/#change,3911">https://review.openstack.org/#change,3911</a></blockquote>Do you still want reviews on these, after the merge of redux?<br></div></blockquote><br></div><div>This has been merged to keystone master, feel free to review the one the add reseller admin support :</div><div><br></div><div><a href="https://review.openstack.org/#change,4234">https://review.openstack.org/#change,4234</a></div><div><br></div><div>and the doc update :</div><div><br></div><div><a href="https://review.openstack.org/#change,4233">https://review.openstack.org/#change,4233</a></div><div><br></div><div>The reseller admin will allow us ultimately to have swift acting as a nova-objectstore for nova.</div><div><br></div><div>I have more plans for the middleware, I'd like to get the compressive tempauth testsuite running on swiftauth with almost no modifications and add along the way anonymous user object access via ACL.</div><div><br></div><div>Let me know if you have questions.</div><div><br></div><div>Cheers,</div><div>Chmouel.</div><div><br></div><div>PS: readding openstack@ as this may be useful for everyone.</div><div><br></div><div>[1] <a href="http://p.chmouel.com/swift-keystonelight-s3.txt">http://p.chmouel.com/swift-keystonelight-s3.txt</a></div><br></body></html>