<div dir="ltr">Thx<div style>My problem has been solved. Such of test tenant/user should be created by my self not the swift....</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Feb 25, 2013 at 9:56 AM, Alex Yang <span dir="ltr"><<a href="mailto:alex890714@gmail.com" target="_blank">alex890714@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">If you want to create a reseller_admin user with keystone, you should add this user in keystone with admin role.<div>
The admin role is the configuration of keysoneauth.</div><div class="im"><div><div style="font-family:arial,sans-serif;font-size:14px">
<br></div><div style="font-family:arial,sans-serif;font-size:14px">[filter:keystoneauth]</div><div style="font-family:arial,sans-serif;font-size:14px">use = egg:swift#keystoneauth</div><div style="font-family:arial,sans-serif;font-size:14px">
operator_roles = admin, swiftoperator</div></div></div></div><div class="gmail_extra"><div><div class="h5"><br><br><div class="gmail_quote">2013/2/23 Kun Huang <span dir="ltr"><<a href="mailto:Academicgareth@gmail.com" target="_blank">Academicgareth@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Back to my first question, should I create admin_user, admin_password, admin_tenant_name by keystone command myself?</div>
<div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Feb 22, 2013 at 9:02 AM, Kun Huang <span dir="ltr"><<a href="mailto:Academicgareth@gmail.com" target="_blank">Academicgareth@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr">Dolph, thanks your advice, but in my environment, both below two case<div><br><div>1. setting admin_token,admin_user, admin_password, admin_tenant_name in proxy.conf and setting admin_token in keystone.conf</div>
<div>2. setting admin_user, admin_password, admin_tenant_name in proxy.conf and setting admin_token in keystone.conf</div><div><br></div><div>only admin_token in keystone.conf is valuable. (default ADMIN)</div>
<div>Should I create admin_user, admin_password, admin_tenant_name by keystone command myself?</div><div><br></div><div><br></div></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div>
On Fri, Feb 22, 2013 at 1:45 AM, Dolph Mathews <span dir="ltr"><<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>></span> wrote:<br>
</div><div><div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Setting the admin_token config is overriding the admin_user, admin_password, and admin_tenant_name values by specifying a static token. I'd recommend removing it and using the auth credentials you've already provided.<div class="gmail_extra">
<div><div><br></div>-Dolph</div>
<br><br><div class="gmail_quote"><div><div>On Thu, Feb 21, 2013 at 3:10 AM, Kun Huang <span dir="ltr"><<a href="mailto:Academicgareth@gmail.com" target="_blank">Academicgareth@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<div dir="ltr">Following another question:<div>In document: <a href="http://docs.openstack.org/developer/keystone/middleware_architecture.html" target="_blank">http://docs.openstack.org/developer/keystone/middleware_architecture.html</a>, </div>
<div><br></div><div><pre style="overflow:auto;font-family:Consolas,'Deja Vu Sans Mono','Bitstream Vera Sans Mono',monospace;font-size:13.63636302947998px;line-height:16.363636016845703px;padding:0.5em;border:1px solid rgb(204,204,204);background-color:rgb(248,248,248);color:rgb(85,85,85)">
[filter:tokenauth]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
auth_uri = <a href="http://127.0.0.1:5000/" target="_blank">http://127.0.0.1:5000/</a>
admin_token = Super999Sekret888Password777
admin_user = admin
admin_password = SuperSekretPassword
admin_tenant_name = service
;Uncomment next line and check ip:port to use memcached to cache tokens
;memcache_servers = <a href="http://127.0.0.1:11211" target="_blank">127.0.0.1:11211</a></pre>That admin token is not admin_token = ADMIN in keystone, right?</div><div><br></div><div><br><br></div></div><div>
<div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Thu, Feb 21, 2013 at 4:06 PM, Kun Huang <span dir="ltr"><<a href="mailto:Academicgareth@gmail.com" target="_blank">Academicgareth@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I'm building environment with Swift + Keystone.<div>I have set <tt style="font-family:Consolas,'Deja Vu Sans Mono','Bitstream Vera Sans Mono',monospace;font-size:13.63636302947998px;background-color:rgb(242,242,242);border-bottom-width:1px;border-bottom-style:solid;border-bottom-color:rgb(221,221,221);color:rgb(51,51,51);line-height:20px"><span>admin_user</span></tt><span style="line-height:20px;font-size:13.63636302947998px;font-family:'Lucida Grande','Lucida Sans Unicode',Geneva,Verdana,sans-serif">, </span><tt style="font-family:Consolas,'Deja Vu Sans Mono','Bitstream Vera Sans Mono',monospace;font-size:13.63636302947998px;background-color:rgb(242,242,242);border-bottom-width:1px;border-bottom-style:solid;border-bottom-color:rgb(221,221,221);color:rgb(51,51,51);line-height:20px"><span>admin_password</span></tt><span style="line-height:20px;font-size:13.63636302947998px;font-family:'Lucida Grande','Lucida Sans Unicode',Geneva,Verdana,sans-serif">, </span><tt style="font-family:Consolas,'Deja Vu Sans Mono','Bitstream Vera Sans Mono',monospace;font-size:13.63636302947998px;background-color:rgb(242,242,242);border-bottom-width:1px;border-bottom-style:solid;border-bottom-color:rgb(221,221,221);color:rgb(51,51,51);line-height:20px"><span>admin_tenant_name</span></tt>, but it doesn't work.</div>
<div>I followed the document: <a href="http://docs.openstack.org/developer/swift/overview_auth.html" target="_blank">http://docs.openstack.org/developer/swift/overview_auth.html</a> and chmouel's blog: <a href="http://blog.chmouel.com/2011/11/24/swift-and-keystone-middleware-part1/" target="_blank">http://blog.chmouel.com/2011/11/24/swift-and-keystone-middleware-part1/</a></div>
<div><br></div><div>My swift and keystone run well:</div><div><br></div><div><img alt="Inline image 1" width="764" height="428"><br></div><div><br></div><div>
But failed in curl:</div><div><img alt="Inline image 2" width="764" height="121"><br></div><div><br></div><div>I guess the value of admin_user/admin_password/admin_tenant_name doesn't save in db.</div>
<div><br></div><div>Which step do I missed? or some problems in my proxy config?</div><div><br></div><div>Here is my current config.</div><div><div>[DEFAULT]</div><div>bind_port = 8888</div><div>
user = swift</div><div><br></div><div>[pipeline:main]</div><div>pipeline = catch_errors healthcheck cache authtoken keystoneauth proxy-server</div><div><br></div><div>[app:proxy-server]</div><div>use = egg:swift#proxy</div>
<div>account_autocreate = true</div><div><br></div><div>[filter:keystoneauth]</div><div>use = egg:swift#keystoneauth</div><div>operator_roles = admin, swiftoperator</div><div><br></div><div>[filter:authtoken]</div><div># Delaying the auth decision is required to support token-less</div>
<div># usage for anonymous referrers ('.r:*').</div><div>paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory</div><div>auth_host = keystonehost</div><div>auth_port = 35357</div><div>auth_protocol = http</div>
<div>auth_uri = <a href="http://keystonehost:5000/" target="_blank">http://keystonehost:5000/</a></div><div>admin_tenant_name = service</div><div>admin_user = swift</div><div>admin_password = password</div><div><br></div>
<div>[filter:cache]</div>
<div>use = egg:swift#memcache</div><div>set log_name = cache</div><div><br></div><div>[filter:catch_errors]</div><div>use = egg:swift#catch_errors</div><div><br></div><div>[filter:healthcheck]</div><div>use = egg:swift#healthcheck</div>
</div></div>
</blockquote></div><br></div>
</div></div><br></div></div>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div></div>
</blockquote></div></div></div><br></div>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br> 杨雨<div> Email: <a href="mailto:alex890714@gmail.com" target="_blank">alex890714@gmail.com</a><div>
GitHub: <a href="https://github.com/AlexYangYu" target="_blank">https://github.com/AlexYangYu</a></div>
<div> Blog: <a href="http://alexyang.sinaapp.com" target="_blank">http://alexyang.sinaapp.com</a></div><div> Weibo: <a href="http://www.weibo.com/alexyangyu" target="_blank">http://www.weibo.com/alexyangyu</a></div>
</div>
</font></span></div>
</blockquote></div><br></div>