Open Stack

>
> This has been inconsistent across the projects, true. But since the icehouse
> release there is no need to touch the *-paste.ini files, all the authtoken
> settings are done in the main configuration file of each project.
>
> Note that this is not something that the doc team could handle anyway.
> Projects developers choose where the configuration options should be, we
> just document this.

with hughes new project growing, and i think we need standard, and the
team that can "know" usually from doc team

doc team is like an organizing thing team

CMIIW

F

>
> Regards,
> Gauvain
>
>
>>
>> F
>> --
>> Frans Thamura (曽志胜)
>> Shadow Master and Lead Investor
>> Meruvian.
>> Integrated Hypermedia Java Solution Provider.
>>
>> Mobile: +628557888699
>> Blog: http://blogs.mervpolis.com/roller/flatburger (id)
>>
>> FB: http://www.facebook.com/meruvian
>> TW: http://www.twitter.com/meruvian / @meruvian
>> Website: http://www.meruvian.org
>>
>> "We grow because we share the same belief."
>>
>>
>> On Sat, Jun 21, 2014 at 10:41 PM, Anne Gentle <anne at openstack.org> wrote:
>>>
>>>
>>>
>>>
>>> On Sat, Jun 21, 2014 at 5:25 AM, Frans Thamura <frans at meruvian.org>
>>> wrote:
>>>>
>>>>
>>>> hi all
>>>>
>>>> i find there is glance-api-paste.ini
>>>>
>>>> and i google that if we put under  [filter:authtoken]
>>>>
>>>> sql_connection = mysql://glanceuser:glance-pass@db-host/glance
>>>>
>>>> [keystone_authtoken]
>>>> auth_host = <auth-host>
>>>> auth_port = 35357
>>>> auth_protocol = http
>>>> admin_tenant_name = <service tenant name>
>>>> admin_user = <glance user>
>>>> admin_password = <admin password>
>>>>
>>>> [paste_deploy]
>>>> flavor=keystone
>>>>
>>>>
>>>> we dont have to modify the 4 .confs, in installation chapter 4 sub 8.
>>>>
>>>> Configure the Image Service to use the Identity Service for
>>>> authentication.
>>>>
>>>> Edit the /etc/glance/glance-api.conf and
>>>> /etc/glance/glance-registry.conf
>>>>
>>>>
>>>> why dont we use the glance-api-paste.ini instead
>>>>
>>>> so let the keystone token as defaulat as
>>>>
>>>> admin_tenant_name = %SERVICE_TENANT_NAME%
>>>> admin_user = %SERVICE_USER%
>>>> admin_password = %SERVICE_PASSWORD%
>>>>
>>>>
>>>
>>> I think it was changed by default a security measure -- any middleware
>>> passing of passwords is an additional exposure it's better not to take.
>>>
>>>
>>> http://docs.openstack.org/security-guide/content/ch021_paste-and-middleware.html
>>>
>>>>
>>>>
>>>> anyone can explain?
>>>>
>>>>
>>>> F
>>>>
>>>> _______________________________________________
>>>> Openstack-docs mailing list
>>>> Openstack-docs at lists.openstack.org
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs
>>>
>>>
>>>
>>
>> _______________________________________________
>> Openstack-docs mailing list
>> Openstack-docs at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs