[Openstack] [OSSN 0024] Sensitive data is exposed in log statements by python-keystoneclient

2014-09-25 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sensitive data is exposed in log statements by python-keystoneclient - --- ### Summary ### Python-keystoneclient is a client tool for the OpenStack Identity API, which is implemented by the Keystone project. Various OpenStack services including the Op

[Openstack] Load balancer questions

2014-09-25 Thread Marcus White
Hello, I had some basic questions on a load balancer we are considering for Swift. Some of them might be pretty stupid and basic. 1. Assuming layer 7 is what would be used for openstack services like keystone and Swift, not layer 4? I saw a layer 4 in front of a layer 7 in one of the diagrams, did

[Openstack] Ubuntu Cloud Archive not reachable via IPv6

2014-09-25 Thread Martinx - ジェームズ
Hey Stackers! I'm already building IceHouse Clouds that are IPv6-Only networks, using Trusty. Now, I would like to start testing Juno, in my IPv6 lab but, it doesn't work. Apparently, the entire Ubuntu PPA infrastructure doesn't have IPv6 connectivity, and this is affecting OpenStack users, b

[Openstack] [OSSA 2014-030] TLS cert verification option not honoured in paste configs (CVE-2014-7144)

2014-09-25 Thread Grant Murphy
OpenStack Security Advisory: 2014-030 CVE: CVE-2014-7144 Date: September 25, 2014 Title: TLS cert verification option not honoured in paste configs Reporter: Qin Zhao (IBM) Products: keystonemiddleware, python-keystoneclient Versions: versions up to 1.1.1 (keystonemiddleware), versions u

[Openstack] [openstack][keystone] Need a solution for large catalog in PKI tokens

2014-09-25 Thread Ved Lad
The Openstack installation (Havana) at our company has a large number of service endpoints in the catalog. As a consequence, when using PKI tokens, my HTTP request header gets too big to handle for services like neutron. Im evaluating different options for reducing the size of the catalog in the PK

[Openstack] [Ironic] Deploying a physical node through Ironic

2014-09-25 Thread Peeyush Gupta
Hi all, I have been trying to deploy a physical node through Ironic. I have set up Ironic using devstack in a Ubuntu virtual environment. Now, I was able to register the node with Ironic and I can shut it down and turn it on using Ironic (meaning ipmi works). The problem is when I try to boot

Re: [Openstack] Nat rules of Floating IP on wrong router

2014-09-25 Thread Remo Mattei
Hi you could boot up your vm and specify which port to use I am not sure if you can from the ui. Remo Inviato da iPhone () > Il giorno 25/set/2014, alle ore 04:19, Heiko Krämer > ha scritto: > > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hi guys, > > i'm running in a problem

Re: [Openstack] [Devstack][Neutron][Neutron N1KV Plugin] How to enable in local.conf?

2014-09-25 Thread foss geek
taken cisco plugin file from below url: https://github.com/CiscoSystems/devstack/blob/bobmel/csr1kv_for_routing_icehouse/lib/neutron_plugins/cisco Downloaded vem and vem-dkms from the below url: https://launchpad.net/~cisco-n1kv/+archive/ubuntu/n1kv-updates/+packages nexus-1000v-vem-dkms_14.04.

[Openstack] Nat rules of Floating IP on wrong router

2014-09-25 Thread Heiko Krämer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi guys, i'm running in a problem if i associate a floating IP address to an instance. My system: * icehouse / Ubuntu * 2 different tenants * each tenant have his own router * each tenant have his own fixed net/subnet attached to his own router I'v

Re: [Openstack] [TripleO]Error while running RDO instack

2014-09-25 Thread Peeyush Gupta
On 09/24/2014 10:20 PM, Steve Gordon wrote: - Original Message - From: "Peeyush Gupta" To: openstack@lists.openstack.org Hi all, I have been trying to set up TripleO using RDO instack. I tried it in virtual environment and it works fine. Now, I am trying on physical environment. I in