Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Joseph Heck
Hey Maru, I think you're putting too many words in Adam's mouth here. First, Adam didnt assert is wasnt valuable, useful, or nessecary - simply that it wasnt in the first cut and not in the list that we agreed was critically essential to an initial implementation. As you noted, its a complex

[Openstack] how to create different instance name when create more instance in same time

2012-08-02 Thread Shake Chen
Hi Now I try to create more instance in same time in Dashobard. but the Instance name is same. how to sovle it? -- Shake Chen ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe :

Re: [Openstack] Cells Status

2012-08-02 Thread Chris Behrens
I found time to update the branch with the latest code tonight: https://github.com/comstud/nova/tree/cells_service I put a review up here as a WIP also: https://review.openstack.org/#/c/10707/ I reviewed what's changed since the last update… and it was essentially: Rebase against master…

Re: [Openstack] how to create different instance name when create more instance in same time

2012-08-02 Thread Sébastien Han
You can always rename them with the dashboard, but this doesn't mean that the hostname will change... It will remain the same for every VMs. On Thu, Aug 2, 2012 at 9:31 AM, Shake Chen shake.c...@gmail.com wrote: Hi Now I try to create more instance in same time in Dashobard. but the

Re: [Openstack] how to create different instance name when create more instance in same time

2012-08-02 Thread Shake Chen
in HPcloud , when create a VM, no need setting the Server name. how to achive it? On Thu, Aug 2, 2012 at 3:49 PM, Sébastien Han han.sebast...@gmail.comwrote: You can always rename them with the dashboard, but this doesn't mean that the hostname will change... It will remain the same for

Re: [Openstack] Angry People and OpenStack

2012-08-02 Thread Razique Mahroua
+1 :) Nuage Co - Razique Mahrouarazique.mahr...@gmail.com Le 2 août 2012 à 06:17, Atul Jha atul@csscorp.com a écrit :Hi,snipi believe openstack is the best :0/snipIndeed it is.snipif the model of open and transparency still issue, we can fix anyway/snipI don`t see there is any. Its just

Re: [Openstack] swift authentication problem

2012-08-02 Thread Derek Higgins
On 08/02/2012 05:09 AM, sarath zacharia wrote: Hi, We successfully configured the swift in our cloud environment. But when a non admin user accessing the container it shows an *Error: *Unable to retrieve container list. Is there any option for accessing the

[Openstack] Nova Volume and provisionning on iSCSI SAN

2012-08-02 Thread Bilel Msekni
Hi all, I have a question relating to nova-volume, and provisioning block devices as storage for VMs. As I understand it from the documentation, nova-volume will take a block device with LVM on it, and then become an iSCSI target to share the logical volumes to compute nodes. I also

[Openstack] growing fixed-ip network

2012-08-02 Thread Christoph Kluenter
Hi, I don't know how to handle the case when a tenant has used up all IPs. We use FlatNetworking, so no Floating IPs possible. So, when one tenant has used up all the IPs in their net, how can I assign another net to the same tenant ? If I just assign another net, every new instance just gets

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-08-02 Thread Thierry Carrez
Brian Waldon wrote: Ok, so I spent some time on this and got all of the existing/legacy CLI working within python-glanceclient. It should let anybody using the existing client keep on keepin' on without having to worry about CLI compatibility (until we actually remove the deprecated

[Openstack] Multiple vNICs for Multiple networks.

2012-08-02 Thread Trinath Somanchi
Hi- I have installed Openstack+Quantum+OVS in two machines. One Controller and the other as node. I have created tenant specific/labeled and public labeled networks. Upon bringing up instances in a tenant, I'm able to see 3 types of IP address for the instance. and Upon login into the

[Openstack] Node Disk Cleaning Script

2012-08-02 Thread Алексей Кайтаз
Hi! I hope this script will usefull for somebody. #!/bin/bash cd /var/lib/nova/instances find -name disk* | xargs -n1 qemu-img info | grep backing | sed -e's/.*file: //' -e 's/ .*//' | sort | uniq /tmp/ignore while read i; do ARGS=$ARGS \( ! -path $i \) done /tmp/ignore find

Re: [Openstack] Qcow2 Details on base images

2012-08-02 Thread Gaurab Basu
Hi Jay, Thanks for your reply, it helped me get started. I have been going through the code and some of the sparse docs that are available. This is the code file https://github.com/openstack/nova/blob/master/nova/virt/libvirt/utils.py However I am facing a new issue and require some help. I

[Openstack] Nova Manage Network unable to add vlan ID

2012-08-02 Thread Trinath Somanchi
Hi- I issued the command, nova-manage network create --label=tenant-1 --fixed_range_v4=172.15.1.0/24 --bridge_interface=br-int --vlan=15 --project_id=a17de6f647b14739acb33f09d246f72e But in the network listing the vlanID is none root@OpenstackController:~# nova-manage network list id

Re: [Openstack] growing fixed-ip network

2012-08-02 Thread Ravi Jagannathan
It should hop on to the next subnet block if available ( assuming that in LAN its a private address scheme ) . Ravi On Thu, Aug 2, 2012 at 5:58 AM, Christoph Kluenter c...@iphh.net wrote: Hi, I don't know how to handle the case when a tenant has used up all IPs. We use FlatNetworking, so no

Re: [Openstack] [Netstack] Multiple vNICs for Multiple networks.

2012-08-02 Thread Akihiro MOTOKI
Hi, Your environment seems to work well. The problem you have perhaps depends on your VM image. If you use ifconfig -a, you should see all thress interfaces. When ifconfig w/o -a option show interface(s) which are UP, ifconfig with -a shows all interfaces available on a machine. But for

Re: [Openstack] growing fixed-ip network

2012-08-02 Thread Christoph Kluenter
* Am Thu, Aug 02 2012 at 09:24:55 -0400 , schrieb Ravi Jagannathan: It should hop on to the next subnet block if available ( assuming that in LAN its a private address scheme ) . We only use routable IPs. thats why we have some nets which can't be subnetted. What difference does it make if its

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Adam Young
On 08/02/2012 01:56 AM, Joseph Heck wrote: Hey Maru, I think you're putting too many words in Adam's mouth here. First, Adam didnt assert is wasnt valuable, useful, or nessecary - simply that it wasnt in the first cut and not in the list that we agreed was critically essential to an initial

Re: [Openstack] Angry People and OpenStack

2012-08-02 Thread George Reese
On Aug 1, 2012, at 11:17 PM, Atul Jha atul@csscorp.com wrote: I don`t see there is any. Its just there are certain section of people who are bound to create FUD and act as TROLL. What we can simply do is to ignore them. :) This is a dangerous attitude here. People who criticize

Re: [Openstack] [Netstack] Nova Manage Network unable to add vlan ID

2012-08-02 Thread Akihiro MOTOKI
Minor correction for my previous mail. Quantum OVS plugin (with non-tunneling mode) assigns VLAN-ID automatically for each virtual network. (with non-tunneling mode) is unnecessary. All modes of OVS plugin do the same behavior. OVS plugin assigns VLAN-ID automatically for each virtual

Re: [Openstack] Inbound connectivity and FlatDHCP networking

2012-08-02 Thread Lars Kellogg-Stedman
Traffic from vm to vm on different hosts should be able to go accross flat_interface Okay, that makes sense. Getting inbound connectivity over fixed_ips can be tricky. It looks like you want to set up a specific range from vms that is not snatted. there is a config option for this called

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Rouault, Jason (Cloud Services)
This was a concern for HP as well. This is one of the reasons we were happy to see that signed tokens are currently a deployment option. So, you can continue to use the unsigned model until such a time that revocation can be put into place for the token signing model. Jason From:

Re: [Openstack] growing fixed-ip network

2012-08-02 Thread Narayan Desai
On Thu, Aug 2, 2012 at 8:42 AM, Christoph Kluenter c...@iphh.net wrote: * Am Thu, Aug 02 2012 at 09:24:55 -0400 , schrieb Ravi Jagannathan: It should hop on to the next subnet block if available ( assuming that in LAN its a private address scheme ) . We only use routable IPs. thats why we have

[Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Heng Xu
Hi folks: I am new to openstack, I am current trying to test the json filter, I changed my /etc/nova/nova.conf as follow scheduler_driver=nova. scheduler.multi.MultiScheduler compute_scheduler_driver=nova.scheduler.filter_scheduler.FilterScheduler

Re: [Openstack] [Netstack] Multiple vNICs for Multiple networks.

2012-08-02 Thread Sumit Naiksatam (snaiksat)
Hi, Yes, if you do not specify networks using the “–nic” option you will get a vnic on each of the public networks and one for each network belonging to that tenant. Using the “—nic net-id=uuid-xyz” option you can refer to specific networks on which you want the vnics. Thanks, ~Sumit. From:

Re: [Openstack] growing fixed-ip network

2012-08-02 Thread Ravi Jagannathan
Also.. builds are better created in Private IP and then prepped to release to Public cloud. After all just an instance rinning OS is not yet there in terms of APP stack. Ravi. On Thu, Aug 2, 2012 at 10:49 AM, Narayan Desai narayan.de...@gmail.comwrote: On Thu, Aug 2, 2012 at 8:42 AM, Christoph

Re: [Openstack] Instance stuck in deleting state with error

2012-08-02 Thread Jonathan Proulx
On Wed, Aug 1, 2012 at 3:12 PM, Lorin Hochstein lo...@nimbisservices.com wrote: I believe pip gets it from PyPI: http://pypi.python.org/pypi/python-novaclient/ Ah, I documented this internally and promptly forgot, this is where my version of python-novaclient with reset-state came from: sudo

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Heng Xu
Hello Joseph: I am not sure where to find the log, so I just used the screen to n-sch, and one of the error is TRACE nova.rpc.amqp ValueError: No JSON object could be decoded and I have no idea why this happened? Thank you. Heng From: Joseph Suh

Re: [Openstack] Angry People and OpenStack

2012-08-02 Thread Stefano Maffulli
On Thu 02 Aug 2012 07:19:28 AM PDT, George Reese wrote: ignore the fact that OpenStack governance has a huge trust problem, I don't think this is true: It's true that some people don't trust OpenStack governance, not that the governance is broken. The bylaws have been discussed for months,

Re: [Openstack] Nova Volume and provisionning on iSCSI SAN

2012-08-02 Thread Thomas, Duncan
I guess you might need to port one of the other iSCSI-based drivers (e.g. lefthand) to use whatever creation/deletion/access control mechanisms your Dell SAN uses... This does not look to be a significant amount of work, but such commands aren't generally standardized so would need to be done

Re: [Openstack] Nova Volume and provisionning on iSCSI SAN

2012-08-02 Thread Vishvananda Ishaya
You will likely have to write a nova-volume/cinder backend to talk to the dell SAN directly. You could probably base it on the HP lefthand san code and get something working pretty quickly: https://github.com/openstack/nova/blob/master/nova/volume/san.py Vish On Aug 2, 2012, at 2:31 AM,

Re: [Openstack] Inbound connectivity and FlatDHCP networking

2012-08-02 Thread Vishvananda Ishaya
On Aug 2, 2012, at 7:35 AM, Lars Kellogg-Stedman l...@seas.harvard.edu wrote: With a multi_host, flatDHCP model, is the general idea that fixed_ips are -- generally -- internal to the compute host, and all external access is supposed to be via floating ips? That's sort of how it looks,

Re: [Openstack] qpid_heartbeat...doesn't?

2012-08-02 Thread Lars Kellogg-Stedman
On Thu, Aug 02, 2012 at 12:33:13PM -0400, Lars Kellogg-Stedman wrote: Looks like a typo. Could you try this. FYI: The same typo appears to exist in notify_qpid.py. Err, that is, glance/notifier/notify_qpid.py, in case it wasn't obvious... -- Lars Kellogg-Stedman l...@seas.harvard.edu

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Pengjun Pan
Hi Heng, The log should be in /var/log/nova/nova-scheduler.log. PJ On Thu, Aug 2, 2012 at 10:44 AM, Heng Xu shouhengzhang...@mail.utoronto.ca wrote: Hello Joseph: I am not sure where to find the log, so I just used the screen to n-sch, and one of the error is TRACE nova.rpc.amqp ValueError:

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Heng Xu
Hi PJ I don't know what happen, I could not find the file in my Ubuntu filesystem, I searched for it, no result, but I just used ./stack.sh to install it, I it is just me could not find the file? Any thoughts? thank you Heng From: Pengjun Pan

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Pengjun Pan
Hi Heng, I didn't know that you were using devstack. The path I provided is for manually installation of openstack. I didn't try it with devstack. According to https://answers.launchpad.net/nova/+question/176973, devstack outputs the log to the screen. Try Vish's suggestion. Good luck. PJ On

Re: [Openstack] Nova Volume and provisionning on iSCSI SAN

2012-08-02 Thread John Griffith
On Thu, Aug 2, 2012 at 10:21 AM, Vishvananda Ishaya vishvana...@gmail.com wrote: You will likely have to write a nova-volume/cinder backend to talk to the dell SAN directly. You could probably base it on the HP lefthand san code and get something working pretty quickly:

[Openstack] [nova] Reminder: nova team meeting today at 2100 UTC

2012-08-02 Thread Vishvananda Ishaya
Hello Everyone, Just a quick reminder that we are having a nova team meeting today at 2100 UTC. That is 2PM on the West Coast, and 4PM Central. Check your city/timezone here: http://www.timeanddate.com/worldclock/fixedtime.html?hour=21min=0sec=0 The agenda is located at:

Re: [Openstack] Qcow2 Details on base images

2012-08-02 Thread Jay Pipes
On 08/02/2012 07:47 AM, Gaurab Basu wrote: Hi Jay, Thanks for your reply, it helped me get started. I have been going through the code and some of the sparse docs that are available. This is the code file https://github.com/openstack/nova/blob/master/nova/virt/libvirt/utils.py

Re: [Openstack] Node Disk Cleaning Script

2012-08-02 Thread Pádraig Brady
On 08/02/2012 12:12 PM, Алексей Кайтаз wrote: Hi! I hope this script will usefull for somebody. #!/bin/bash cd /var/lib/nova/instances find -name disk* | xargs -n1 qemu-img info | grep backing | sed -e's/.*file: //' -e 's/ .*//' | sort | uniq /tmp/ignore while read i; do ARGS=$ARGS \(

Re: [Openstack] Inbound connectivity and FlatDHCP networking

2012-08-02 Thread Lars Kellogg-Stedman
On Thu, Aug 02, 2012 at 09:24:56AM -0700, Vishvananda Ishaya wrote: It isn't explicitly that way, but it is the easiest setup. It is possible to set up fixed ips that are accessible/routable from outside but there are a lot of gotchas Got it. The snatting rule is created exclusively from

[Openstack] Preventing OpenStack from allocating some floating ips?

2012-08-02 Thread Lars Kellogg-Stedman
If I create a floating address range like this: nova-manage floating create --ip_range=10.243.30.0/24 Is there any way to block out specific addresses in that range? For example, the .1 address is the network gateway, and everything will fall apart if that address is accidentally allocated to

Re: [Openstack] qpid_heartbeat...doesn't?

2012-08-02 Thread Pádraig Brady
On 08/02/2012 05:35 PM, Lars Kellogg-Stedman wrote: On Thu, Aug 02, 2012 at 12:33:13PM -0400, Lars Kellogg-Stedman wrote: Looks like a typo. Could you try this. FYI: The same typo appears to exist in notify_qpid.py. Err, that is, glance/notifier/notify_qpid.py, in case it wasn't

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Heng Xu
Hi, I recorded the error message, below 2012-08-02 13:51:02 TRACE nova.rpc.amqp File /opt/stack/nova/nova/scheduler/filters/json_filter.py, line 141, in host_passes 2012-08-02 13:51:02 TRACE nova.rpc.amqp result = self._process_filter(jsonutils.loads(query), host_state) 2012-08-02

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Pengjun Pan
Post your filter file. Might be a typo. PJ On Thu, Aug 2, 2012 at 1:02 PM, Heng Xu shouhengzhang...@mail.utoronto.ca wrote: Hi, I recorded the error message, below 2012-08-02 13:51:02 TRACE nova.rpc.amqp File /opt/stack/nova/nova/scheduler/filters/json_filter.py, line 141, in

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Heng Xu
Hi, attached is the json_filter file I was used, but I it just came with devstack script installation, I did not even modify it. Heng From: Pengjun Pan [panpeng...@gmail.com] Sent: Thursday, August 02, 2012 6:07 PM To: Heng Xu Cc:

Re: [Openstack] Angry People and OpenStack

2012-08-02 Thread Matt Joyce
George I like your contributions. I also like the idea of people treating each other well. Makes it easier for us to have the discussions you want to have. -Matt On Thu, Aug 2, 2012 at 8:54 AM, Stefano Maffulli stef...@openstack.orgwrote: On Thu 02 Aug 2012 07:19:28 AM PDT, George Reese

[Openstack] Fwd: Re: Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Adam Young
Origianlly respoded just to Christopher. Forwarding this on to a the main list. First of all, let me say thanks to everyone participating in the discussion. This is the only way we are going to identify all of the issues and come up with a decent implementation. I knew this would be a

Re: [Openstack] Announcing proof-of-concept Load Balancing as a Service project

2012-08-02 Thread Eugene Kirpichov
REMINDER: the IRC meeting will happen in 5 minutes on #openstack-meetings. On Tue, Jul 24, 2012 at 6:33 PM, Eugene Kirpichov ekirpic...@gmail.com wrote: Hello community, We at Mirantis have had a number of clients request functionality to control various load balancer devices (software and

Re: [Openstack] Preventing OpenStack from allocating some floating ips?

2012-08-02 Thread Calvin Walton
On Thu, 2012-08-02 at 13:59 -0400, Lars Kellogg-Stedman wrote: If I create a floating address range like this: nova-manage floating create --ip_range=10.243.30.0/24 Is there any way to block out specific addresses in that range? For example, the .1 address is the network gateway, and

Re: [Openstack] Swift account listing

2012-08-02 Thread Pete Zaitcev
On Thu, 19 Jul 2012 16:10:06 +0100 Juan J. Martinez j...@memset.com wrote: I guess you can use the list of current accounts from Keystone and translate that into the account ring hash. swift-get-nodes /etc/swift/account.ring.gz myKeyStoneAcct | grep Hash | cut -f2

Re: [Openstack] Preventing OpenStack from allocating some floating ips?

2012-08-02 Thread Lars Kellogg-Stedman
(The following is assuming you're using Essex - I don't really know anything about Quantum) Yeah, we're using Essex with FlatDHCP networking for now. An interesting thing about how floating IPs work is that internally nova-network just has a big table of ip addresses in the database. That's

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Eric Windisch
On Monday, July 23, 2012 at 12:04 PM, Doug Hellmann wrote: Sorry if this rekindles old arguments, but could someone summarize the reasons for an openstack-common PTL without voting rights? I would have defaulted to giving them a vote *especially* because the code in common is, well,

Re: [Openstack] Preventing OpenStack from allocating some floating ips?

2012-08-02 Thread Vishvananda Ishaya
The create command via cidr is just a convienience to create a bunch of floating ips at once, floating ips are actually individual entries in the db. It should skip the network and gateway addressses by default, but it is perfectly acceptable to delete individual addresses with nova-manage

[Openstack] EC2 api and tenants

2012-08-02 Thread Mitchell Broome
I'm using essex 2012.1 and I'm running into an issue with tenant separation using the ec2 api. I end up having to give a user the 'admin' role in keytone to create instances within a tenant. I can live with that but the problem is, now that the user has 'admin', they also see all of the

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-08-02 Thread Brian Waldon
The review has now landed in python-glanceclient master, so I'm going to release it tomorrow as v0.3.0 if nothing comes up between now and then. On Aug 2, 2012, at 3:10 AM, Thierry Carrez wrote: Brian Waldon wrote: Ok, so I spent some time on this and got all of the existing/legacy CLI

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Christopher B Ferris
+1Cheers,Christopher FerrisIBM Distinguished Engineer, CTO Industry and Cloud StandardsMember, IBM Academy of TechnologyIBM Software Group, Standards Strategyemail: chris...@us.ibm.comTwitter: christo4ferrisphone: +1 508 234 2986-openstack-bounces+chrisfer=us.ibm@lists.launchpad.net wrote:

Re: [Openstack] EC2 api and tenants

2012-08-02 Thread Vishvananda Ishaya
Which version of the code are you using? This could potentially be a bug. Can you give some more information on what goes wrong with creating an instance? Do you get a traceback anywhere? Vish On Aug 2, 2012, at 1:23 PM, Mitchell Broome mitchell.bro...@gmail.com wrote: I'm using essex 2012.1

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Vishvananda Ishaya
On Aug 2, 2012, at 1:05 PM, Eric Windisch e...@cloudscaling.com wrote: The scope of common is expanding. I believe it is time to seriously consider a proper PTL. Preferably, before the PTL elections. +1 ___ Mailing list:

Re: [Openstack] EC2 api and tenants

2012-08-02 Thread Ryan Lane
On Thu, Aug 2, 2012 at 1:23 PM, Mitchell Broome mitchell.bro...@gmail.com wrote: I'm using essex 2012.1 and I'm running into an issue with tenant separation using the ec2 api. I end up having to give a user the 'admin' role in keytone to create instances within a tenant. I can live with that

Re: [Openstack] Cannot pass hint to Nova Scheduler

2012-08-02 Thread Jay Pipes
Sorry for top-posting, but there's not really a good place to inline comment. First, let's tackle logging in devstack... When using devstack, you noticed that it logs to the screen session by default. To make devstack ALSO log to a file, put the following in your localrc: LOG_COLOR=False

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Jay Pipes
On 08/02/2012 04:05 PM, Eric Windisch wrote: On Monday, July 23, 2012 at 12:04 PM, Doug Hellmann wrote: Sorry if this rekindles old arguments, but could someone summarize the reasons for an openstack-common PTL without voting rights? I would have defaulted to giving them a vote *especially*

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Zhongyue Luo
+1 On Fri, Aug 3, 2012 at 6:47 AM, Vishvananda Ishaya vishvana...@gmail.comwrote: On Aug 2, 2012, at 1:05 PM, Eric Windisch e...@cloudscaling.com wrote: The scope of common is expanding. I believe it is time to seriously consider a proper PTL. Preferably, before the PTL elections. +1

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Eric Windisch
What do you mean by membership services? See the email today from Yun Mao. This is a proposal to have a pluggable framework for integration services that maintain memberships. This was originally desiged to replace the MySQL heartbeats in Nova, although there will be a mysql-heartbeat

[Openstack] User Account and Authentication Service (UAA)

2012-08-02 Thread Frans Thamura
hi all anyone here have paper related to User Account and Authentication Service (UAA) in is OpenStack using UAA also? thx in advance F ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe :

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Adam Young
On 08/01/2012 11:05 PM, Maru Newby wrote: Hi Adam, I apologize if my questions were answered before. I wasn't aware that what I perceive as a very serious security concern was openly discussed. The arguments against revocation support, as you've described them, seem to be: - it's

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Maru Newby
Hi Adam, I was thinking along the same lines - the revocation list could be accessed via a simple url. It wouldn't even have to be hosted by Keystone, necessarily. For larger clusters where performance might become an issue, what about generating to a static file as needed that is made

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Maru Newby
Hi Adam, I apologize if I came across as disrespectful. I was becoming frustrated that what I perceived as a valid concern was seemingly being ignored, but I recognize that there is no excuse for addressing you in a manner that I would not myself wish to be treated. I will do better going

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Nathanael Burton
Adam, I haven't yet had a chance to review how the new PKI signed tokens is implemented, but what you're describing sounds quite similar to online certificate status protocol (OCSP) but for tokens. Nate On Aug 2, 2012 10:24 PM, Adam Young ayo...@redhat.com wrote: On 08/01/2012 11:05 PM, Maru

Re: [Openstack] Node Disk Cleaning Script

2012-08-02 Thread Алексей Кайтаз
Pádraig, thanks. That I need. 2012/8/2 Pádraig Brady p...@draigbrady.com On 08/02/2012 12:12 PM, Алексей Кайтаз wrote: Hi! I hope this script will usefull for somebody. #!/bin/bash cd /var/lib/nova/instances find -name disk* | xargs -n1 qemu-img info | grep backing | sed

Re: [Openstack] best practices for merging common into specific projects

2012-08-02 Thread Mark McLoughlin
On Thu, 2012-08-02 at 15:47 -0700, Vishvananda Ishaya wrote: On Aug 2, 2012, at 1:05 PM, Eric Windisch e...@cloudscaling.com wrote: The scope of common is expanding. I believe it is time to seriously consider a proper PTL. Preferably, before the PTL elections. +1 So, I guess I've been

Re: [Openstack] User Account and Authentication Service (UAA)

2012-08-02 Thread Endre Karlson
It has keystone. Den 3. aug. 2012 03:05 skrev Frans Thamura fr...@meruvian.org følgende: hi all anyone here have paper related to User Account and Authentication Service (UAA) in is OpenStack using UAA also? thx in advance F ___ Mailing

Re: [Openstack-doc-core] Videos !

2012-08-02 Thread Anne Gentle
Hi all - I took a look at the Gallery plugins and it's used for images not videos as far as I can tell. So manually changing them is fine, but I'm having trouble choosing another neutral one for the next rotation. The current one has been there 2 months, past time to switch it. I was thinking

[Openstack-ubuntu-testing-notifications] Build Failure: quantal_folsom_python-glanceclient_trunk #51

2012-08-02 Thread openstack-testing-bot
at 20120802-1434Build needed 00:01:12, 768k disc spaceERROR:root:Error occurred during package creation/buildERROR:root:Command '['sbuild', '-d

[Openstack-ubuntu-testing-notifications] Build Still Failing: quantal_folsom_swift_trunk #38

2012-08-02 Thread openstack-testing-bot
at 20120802

[Openstack-ubuntu-testing-notifications] Build Still Failing: precise_folsom_python-glanceclient_trunk #46

2012-08-02 Thread openstack-testing-bot
at 20120802-2035Build needed 00:01:18, 760k disc spaceERROR:root:Error occurred during package creation/buildERROR:root:Command '['sbuild