<HTML>
<HEAD>
<TITLE>Re: [Openstack] Where does Keystone middleware for Swift belong?</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>This also seems to make sense for other items in that directory /middleware?<BR>
<BR>
Should the EC2/S3 stuff be in nova? <BR>
<BR>
On 4/11/12 2:07 PM, "Maru Newby" <<a href="mnewby@internap.com">mnewby@internap.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>The Keystone repo currently contains the following Swift-specific wsgi middleware modules:<BR>
<BR>
<a href="https://github.com/openstack/keystone/blob/master/keystone/middleware/s3_token.py">https://github.com/openstack/keystone/blob/master/keystone/middleware/s3_token.py</a><BR>
<a href="https://github.com/openstack/keystone/blob/master/keystone/middleware/swift_auth.py">https://github.com/openstack/keystone/blob/master/keystone/middleware/swift_auth.py</a><BR>
<BR>
Neither module depends directly on Keystone. s3_token calls Keystone through HTTP, and swift_auth retrieves Keystone identity data from the wsgi environment. Both modules, however, depend directly on Swift, and this forces the Keystone test suite to have to install Swift to run successfully.<BR>
<BR>
Separate from the dependency issue, both middleware modules need to ensure that Swift-specific authorization requirements are met. It doesn't make sense for the Keystone project to be responsible for this, since the Swift team is the final arbiter of how Swift authorization should behave.<BR>
<BR>
All signs point to the Swift repo being the best place for these modules to be maintained. Does this seem reasonable, or is there a better alternative? Please chime in, especially if you are Swift core.<BR>
<BR>
Cheers,<BR>
<BR>
<BR>
Maru<BR>
_______________________________________________<BR>
Mailing list: <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><BR>
Post to : <a href="openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><BR>
Unsubscribe : <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><BR>
More help : <a href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a><BR>
<BR>
</SPAN></FONT></BLOCKQUOTE>
</BODY>
</HTML>