Re: [Openstack] Swift S3 with Keystone anyone?

2012-02-02 Thread Vishvananda Ishaya
We have a developer (Chmouel Boudjnah) working on getting S3 Auth/Keystone(light)/ACLs all working together. The hope is that we can have a viable production-ready alternative to nova-objectstore to support euca-upload-bundle. He is very close to having it all working and he was hoping to

Re: [Openstack] Remove Zones code - FFE

2012-02-02 Thread Chris Behrens
Well, I can actually say with confidence that the replacement would be stable by essex release. In fact, I expect the first commit to be a completely working solution that solves a number of problems with the original implementation. I don't think there's any issue getting something

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-02 Thread Thierry Carrez
Vishvananda Ishaya wrote: We don't need support from microsoft specifically. What we need is one or more companies committed to: a) actually using the Hyper-V driver b) writing tests and fakes so that the existing functionality doesn't break c) providing test hardware and jenkins

Re: [Openstack] Remove Zones code - FFE

2012-02-02 Thread Thierry Carrez
Chris Behrens wrote: Well, I can actually say with confidence that the replacement would be stable by essex release. In fact, I expect the first commit to be a completely working solution that solves a number of problems with the original implementation. I don't think there's any issue

Re: [Openstack] Swift S3 with Keystone anyone?

2012-02-02 Thread Akira Yoshiyama
Hi, Please check the review: https://review.openstack.org/#q,3076,n,z Use swiftauth and s3token middleware and you may be able to do what you want. I'm sorry that I haven't try it. Or, you can use authtoken and _patched_ swift3 middleware. You'll find the patch in the view above. Regards,

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-02 Thread Armando Migliaccio
To the best of my knowledge, the ESXi support is up to date. There may be bugs, but which virt driver is perfect ;)? Sateesh may know more, because he is the main contributor/maintainer from Citrix. However, as Vish pointed out in a previous email, any driver is doomed to rot if: a) no one

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-02 Thread Armando Migliaccio
Errata corrige for point b) a pool of developers (not necessarily the first committer) DOES NOT keep the code up to date, AND DOES NOT increase functionality and test coverage (both unit and functional); :) -Original Message- From:

Re: [Openstack] Essex-3 Milestone of Quantum Available

2012-02-02 Thread Doude
Nice job netstackers. I've got a remark. I downloaded the Quantum archive from Quantum project Launchpad page and I untared it but I cannot find any OVS agent in the plugin directory. Does it mean it's packaged alone ? If yes, where I can find it ? Regards, Doude. On Fri, Jan 27, 2012 at 1:59

Re: [Openstack] Remove Zones code - FFE

2012-02-02 Thread Alejandro Comisario
Thierry et. al. Responses inline. On 02/02/2012 06:03 AM, Thierry Carrez wrote: Chris Behrens wrote: Well, I can actually say with confidence that the replacement would be stable by essex release. In fact, I expect the first commit to be a completely working solution that solves a number

[Openstack] Wishlist bugs

2012-02-02 Thread Mark McLoughlin
Hey, Wishlist (I want a pony) bugs that have sat in launchpad for an extended period with no progress contribute to the general noise in launchpad - for developers trying to fix stuff that matter to people, they're not a very good source of information. So, how about we do this:

Re: [Openstack] Configure Rate limits on OS API

2012-02-02 Thread Michael Pittaro
On Fri, Dec 30, 2011 at 11:34 AM, Jay Pipes jaypi...@gmail.com wrote: I struggled to figure out how to change this ratelimiting stuff for ages while working on Tempest. Eventually, I just removed the ratelimit middleware entirely from the pipeline since I could find no documentation

Re: [Openstack] Essex-3 Milestone of Quantum Available

2012-02-02 Thread Shake Chen
Hi Quantum team! Now the Quantum E3, still can not manage in Horizion E3. I test in Devstack. The Horizion team said the Quantum API not stable。 Any plan fix the problem and let Horizon can manage the Quantum. On Fri, Jan 27, 2012 at 7:36 AM, Dan Wendlandt d...@nicira.com wrote:

Re: [Openstack] Capture of the Keystone/LDAP Role discussion

2012-02-02 Thread Adam Young
On 02/02/2012 02:38 AM, Vishvananda Ishaya wrote: Nice summary. As you said ldap structures are going to vary by company. I am curious if AD has a standard way of dealing with this that we could use. FWIW, the nova deprecated ldap auth code uses subtrees for roles, and yes it is painful, but

Re: [Openstack] [Netstack] Essex-3 Milestone of Quantum Available

2012-02-02 Thread Dan Wendlandt
2012/2/2 Doude doudou...@gmail.com: Nice job netstackers. I've got a remark. I downloaded the Quantum archive from Quantum project Launchpad page and I untared it but I cannot find any OVS agent in the plugin directory. Does it mean it's packaged alone ? If yes, where I can find it ? Hi

Re: [Openstack] [Netstack] updating quantum in horizon

2012-02-02 Thread Dan Wendlandt
Hi Shake, You can read more details about quantum + horizon in the thread below. If you are able to do any work to fix things, please let us know. Dan On Tue, Jan 31, 2012 at 4:47 PM, Tres Henry t...@treshenry.net wrote: Yeah, the Quantum UI hasn't been getting a lot of use because of it's

Re: [Openstack] [Netstack] Essex-3 Milestone of Quantum Available

2012-02-02 Thread Dan Wendlandt
2012/2/2 Doude doudou...@gmail.com: No, it's not necessary. Like you said, I can use github archive or download manually the missing files. Do you want I create a bug for that ? I was about to, but go ahead :) Regards, Doude. 2012/2/2 Dan Wendlandt d...@nicira.com 2012/2/2 Doude

Re: [Openstack] [Netstack] Essex-3 Milestone of Quantum Available

2012-02-02 Thread Robert Kukura
On 02/02/2012 11:45 AM, Dan Wendlandt wrote: 2012/2/2 Doudedoudou...@gmail.com: Nice job netstackers. I've got a remark. I downloaded the Quantum archive from Quantum project Launchpad page and I untared it but I cannot find any OVS agent in the plugin directory. Does it mean it's packaged

Re: [Openstack] nova scaling-zone and trusted computing

2012-02-02 Thread Yang, Fred
Chris, The scaling-zone enforces designs on capabilities - capability must be periodically updated, within 3 keep-alive ticks, from components, otherwise the capability is viewed as stale and removed. Is any intention to create sticky, i.e., good until update/cancel, capabilities from

Re: [Openstack] Quantum Bug-Squashing Next Thurs (2/2)

2012-02-02 Thread Dan Wendlandt
Adding main openstack list to thread with webex link for Quantum bus-squashing event. Remember to have you devstack environment setup ahead of time. Event starts @ 2pm Pacific. Anyone is welcome to participate, though the content is geared toward folks already familiar with Quantum basics.

Re: [Openstack] Capture of the Keystone/LDAP Role discussion

2012-02-02 Thread Adam Young
On 02/02/2012 11:50 AM, Ryan Lane wrote: Based on discussions with numerous people, It seems that the subtree approach (as done by nova deprecated) is the norm. It's a normal approach taken by a number of applications, yes. It's not a bad way to handle this, and we are already doing it in

[Openstack] Keystone installation with ManagedIT packages...

2012-02-02 Thread Lillie Ross-CDSR11
Still having issues. I found a config bug in my Keystone.conf file in the filter pipeline for the d5_compat modules. However, when I fix the config to match the installation guide and restart keystone, I get an error message that the d5_compat module can't be found. My keystone installation

Re: [Openstack] Keystone installation with ManagedIT packages...

2012-02-02 Thread Paras pradhan
I got the same error and now resolved. You can check if you have pipeline = versionnegotiation authtoken keystone_shim apiv1app in glance-api and pipeline = authtoken keystone_shim registryapp in glance-registry. Paras. On Thu, Feb 2, 2012 at 4:12 PM, Lillie Ross-CDSR11

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-02 Thread Ewan Mellor
-Original Message- From: openstack-bounces+ewan.mellor=citrix@lists.launchpad.net [mailto:openstack-bounces+ewan.mellor=citrix@lists.launchpad.net] On Behalf Of Thierry Carrez Sent: Thursday, February 02, 2012 12:53 AM To: openstack@lists.launchpad.net Subject: Re:

Re: [Openstack] Capture of the Keystone/LDAP Role discussion

2012-02-02 Thread Yee, Guang
Sorry I am a little late to this thread. When we talk about Roles, we mean the permissions a given user has in a given tenant. As such, it is a three way relationship, and LDAP does not handle those well. Have we also consider services and global roles? There was security bug regarding

Re: [Openstack] Keystone installation with ManagedIT packages...

2012-02-02 Thread Kiall Mac Innes
That should have read... ... Also - Can you run SELECT * from `endpoint_templates`; against the keystone DB ... Thanks, Kiall On Fri, Feb 3, 2012 at 12:15 AM, Kiall Mac Innes ki...@managedit.ie wrote: Hi Lille, My packages (the Managed I.T ones) certainly do work, the config files

Re: [Openstack] Capture of the Keystone/LDAP Role discussion

2012-02-02 Thread Adam Young
Had a chat with some long time Identity Management developers. They cautioned me against using organizationalRole as it is often abused in organizations and we might have conflicts.. However, it seems like using organizationalUnit for tenants is corrent, and very much in keeping with what

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-02 Thread Peter J. Pouliot
Having deployed an early OpenStack HyperV cloud, I'd say the following are some good places for MS to start: A MS driven development effort to bring feature parity with other supported hypervisors. A commitment to maintain the HyperV components on an ongoing basis. Contribution of resources

[Openstack-poc] [Bug 925775] [NEW] utils.import_object sometimes masks the failed import

2012-02-02 Thread Jason Kölker
Public bug reported: 146 def import_class(import_str): 147 Returns a class from a string including module and class 148 mod_str, _sep, class_str = import_str.rpartition('.') 149 try: 150 __import__(mod_str) 151 return getattr(sys.modules[mod_str], class_str) 152

[Openstack-poc] [Bug 925775] Re: utils.import_object sometimes masks the failed import

2012-02-02 Thread Jason Kölker
** Changed in: openstack-common Status: New = Confirmed -- You received this bug notification because you are a member of OpenStack Common Drivers, which is the registrant for openstack-common. https://bugs.launchpad.net/bugs/925775 Title: utils.import_object sometimes masks the failed