[openstack-dev] Keystone auth_token middleware

heckj heckj at mac.com
Mon Sep 24 16:55:34 UTC 2012


Seeing as it's a client for keystone, just like the CLI mechanisms, keystoneclient is a good choice - thanks for suggesting it Brian!

I've created a new blueprint - https://blueprints.launchpad.net/keystone/+spec/authtoken-to-keystoneclient-repo
and we'll review this at the keystone meeting tomorrow (http://wiki.openstack.org/Meetings/KeystoneMeeting) 

-joe


On Sep 24, 2012, at 3:27 AM, Doug Hellmann <doug.hellmann at dreamhost.com> wrote:
> On Mon, Sep 24, 2012 at 6:13 AM, Alan Pevec <apevec at gmail.com> wrote:
> On Mon, Sep 24, 2012 at 10:45 AM, Thierry Carrez <thierry at openstack.org> wrote:
> > Brian Waldon wrote:
> >> The auth_token middleware shouldn't live in the Keystone source tree. It is not intended to be used alongside any of the Keystone code as it gets pulled in to every service *but* Keystone. It is super frustrating to have to install all of Keystone just to get this one piece of code. As this middleware is just a client, I am proposing we move it into the existing keystone client library - python-keystoneclient. What are the immediate feelings here?
> >
> > Distributions can solve this by creating multiple binary packages from
> > the same source package,
> 
> I did that in Fedora for Essex, but it broke post folsom-2 due to new
> intra-keystone dependencies in auth-token middleware:
> https://bugzilla.redhat.com/show_bug.cgi?id=844508
> 
> There's also an issue with python subpackages sharing python namespace
> - who owns overlapping __init__.py ?
> 
> One common way to solve that is by using a namespace package at the top level.
> 
> Doug
>  
> Best would be if auth-token is moved out of keystone.middleware, there
> are stuff imported[1] not required by auth-token.
> 
> Alan
> 
> 
> [1] https://github.com/openstack/keystone/blob/master/keystone/middleware/__init__.py#L17
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20120924/e9a18fda/attachment.html>


More information about the OpenStack-dev mailing list