Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-29 Thread Lukasz Oles
In latest version of python-keystoneclient using admin_token in auth_token middleware was depracted. So in future we need to create configuration similar to openstack with nailgun_service user. In that configuration there should be no problem with upgrades. We can do it after 5.1. On Mon, Jul

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-28 Thread Mike Scherbakov
Lukasz, what do you think on this? Is someone addressing the issues mentioned by Evgeny? Thanks, On Fri, Jul 25, 2014 at 3:31 PM, Evgeniy L e...@mirantis.com wrote: Hi, I have several concerns about password changing. Default password can be changed via UI or via fuel-cli. In case of

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-28 Thread Lukasz Oles
As I said in another topic, storing user password in plain text is not an option. Ad. 1. We can create special upgrade_user with the same rights as admin user. We can use it to authenticate in nailgun. It can be done after 5.1 release. Ad. 2. In perfect world during upgrade

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-28 Thread Evgeniy L
Hi, 1. yes, we can do it, if it's possible to create new user with admin_token. But it will complicate upgrade process and will take some time to design/implement and test, because I see several new cases, for example we need to create new user in previous version of the container (we use nailgun

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-25 Thread Evgeniy L
Hi, I have several concerns about password changing. Default password can be changed via UI or via fuel-cli. In case of changing password via UI or fuel-cli password is not stored in any file only in keystone It's important to change password in /etc/fuel/astute.yaml otherwise it will be

[openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-24 Thread Kamil Sambor
Hi folks, All parts of code related to stage I and II from blueprint http://docs-draft.openstack.org/29/96429/11/gate/gate-fuel-specs-docs/2807f30/doc/build/html/specs/5.1/access-control-master-node.htm

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-24 Thread Mike Scherbakov
Kamil, thank you for the detailed information. Meg, do we have anything documented about authx yet? I think Kamil's email can be used as a source to prepare user and operation guides for Fuel 5.1. Thanks, On Thu, Jul 24, 2014 at 5:45 PM, Kamil Sambor ksam...@mirantis.com wrote: Hi folks,

Re: [openstack-dev] [Fuel] Authentication is turned on - Fuel API and UI

2014-07-24 Thread Lukasz Oles
Hi all, one more thing. You do not need to install keystone in your development environment. By default it runs there in fake mode. Keystone mode is enabled only on iso. If you want to test it locally you have to install keystone and configure nailgun as Kamil explained. Regards, On Thu, Jul