Re: [Openstack] 403 Forbidden integrate keystone essex with swift 1.4.9

2012-03-29 Thread Kuo Hugo
Well , it looks normal in my consideration. You specify the operator must have Member or admin role for accessing swift. If there's a user associates a role which named "watcher" . It will be block in swift_auth filter . That's the function of swift_auth , right ? It looks pretty match to your ex

[Openstack] 403 Forbidden integrate keystone essex with swift 1.4.9

2012-03-29 Thread jojo_wanglin
Hi all: The story is: when i integrate keystone essex with swift 1.4.9, i use swift_auth for authorization, the configuration is belows: [filter:keystone]paste.filter_factory = keystone.middleware.swift_auth:filter_factoryoperator_roles = Member,admin If I access the swift service using swift com