[Openstack] Nova root wrapper understanding

2013-01-11 Thread Kun Huang
Hi, all: In this wiki, http://wiki.openstack.org/Nova/Rootwrap, the part of "security model" results in "This chain ensures that the nova user itself is not in control of the configuration or modules used by the nova-rootwrap executable". I understand that chain but I`m confused with this conclusi

Re: [Openstack] Nova root wrapper understanding

2013-01-11 Thread Kun Huang
Thanks, Thierry Carrez. Your explanation is easy to understand. I have got why we need such a mechanism. BTW, is root-wrap a general or popular way to keep security? I have no experience on security, but I have heard the *root *should be banned because of security. Ideally, should we ban *root *in

[Openstack] [Swift] Auth problem

2013-01-13 Thread Kun Huang
Hi,all I build a swift server with default tempauth accourding to http://docs.openstack.org/developer/swift/development_saio.html. And my problem is about accounts. In the conf, here are first four accounts: use = egg:swift#tempauth user_admin_admin = admin .admin .reseller_admin user_test_tes

Re: [Openstack] [Swift] Auth problem

2013-01-13 Thread Kun Huang
Thanks, Adrian! I have no questions any more. On Mon, Jan 14, 2013 at 12:36 AM, Adrian Smith wrote: > Hi Kun, > > > I got "user__ = " from > > > http://www.stephenbroeker.com/2012/03/28/openstack-swift-tempauth-module/, > > but what's different from login1 and login2? > > Perhaps the "login1",

Re: [Openstack] [openstack-community] Calling all user group and meetup organizers

2013-01-15 Thread Kun Huang
please press star 1 to join the conference or . what is "star 1"? I try "1" and "* 1" but failed . On Wed, Jan 16, 2013 at 12:30 AM, Nicolae Paladi wrote: > Hi, > > Unfortunately I might not be able to attend the meetup tonight (evening in > Sweden), but would be glad to > go through t

[Openstack] [swift]

2013-02-11 Thread Kun Huang
Hi, swift developers I found the script /usr/local/bin/swift is: #!/usr/bin/python -u # EASY-INSTALL-DEV-SCRIPT: 'python-swiftclient==1.3.0.4.gb5f222b','swift' __requires__ = 'python-swiftclient==1.3.0.4.gb5f222b' from pkg_resources import require; require('python-swiftclient==1.3.0.4.gb5f222b')

[Openstack] [SWIFT] code reading

2013-02-12 Thread Kun Huang
Hi, Chmouel and Darrell I know you're working on /swift/proxy/controllers/base.py for this bug: https://review.openstack.org/#/c/21563/ I didn't know the https://github.com/openstack/swift/blob/master/swift/proxy/controllers/base.py#L371 to #372. Could you show me a simple understanding?

Re: [Openstack] [SWIFT] code reading

2013-02-14 Thread Kun Huang
he info > (if the create was successful, else error) > Got any errors other than 404 or 507 but no success: return error (ie > return None, None, None) > Got 507 from a server: skip that server for this an subsequent requests > (ie error_limit) and carry on > > --John > >

[Openstack] [SWIFT] Account or User or Account_User?

2013-02-19 Thread Kun Huang
In tempauth of SAIO, what's the meaning of *user_test_tester3 = testing3* * * not account is test tester3 is a user of that account, but tester3 is not admin or reseller admin. Could testers get(GET,HEAD) information from account:test? In the current code, the answer is no. I'm not sure what can

Re: [Openstack] [Keystone][Swift] Problems with admin_user, admin_password, admin_tenant_name

2013-02-21 Thread Kun Huang
ser, > admin_password, and admin_tenant_name values by specifying a static token. > I'd recommend removing it and using the auth credentials you've already > provided. > > -Dolph > > > On Thu, Feb 21, 2013 at 3:10 AM, Kun Huang wrote: > >> Following another question

Re: [Openstack] [Keystone][Swift] Problems with admin_user, admin_password, admin_tenant_name

2013-02-21 Thread Kun Huang
ser, > admin_password, and admin_tenant_name values by specifying a static token. > I'd recommend removing it and using the auth credentials you've already > provided. > > -Dolph > > > On Thu, Feb 21, 2013 at 3:10 AM, Kun Huang wrote: > >> Following another question

Re: [Openstack] [Keystone][Swift] Problems with admin_user, admin_password, admin_tenant_name

2013-02-22 Thread Kun Huang
Back to my first question, should I create admin_user, admin_password, admin_tenant_name by keystone command myself? On Fri, Feb 22, 2013 at 9:02 AM, Kun Huang wrote: > Dolph, thanks your advice, but in my environment, both below two case > > 1. setting admin_token,admin_user, admin

Re: [Openstack] [Keystone][Swift] Problems with admin_user, admin_password, admin_tenant_name

2013-02-24 Thread Kun Huang
le is the configuration of keysoneauth. > > [filter:keystoneauth] > use = egg:swift#keystoneauth > operator_roles = admin, swiftoperator > > > 2013/2/23 Kun Huang > >> Back to my first question, should I create admin_user, admin_password, >> admin_tenant_name by

[Openstack] [Keystone] which config works?

2013-02-25 Thread Kun Huang
Hi all, In auth_token (at keystoneclient middleware), if we config like below: auth_uri = http://localhost:5000/ (without auth_protocal setting which default https) or like below auth_uri = http://localhost:5000/ auth_protocal = http Which one SHOULD works? The first one is brief but doesn't w

Re: [Openstack] [Keystone] my token generated by curling http://localhost:35357/v2.0/tokens is too long...

2013-02-25 Thread Kun Huang
ription": "Default Tenant", "enabled": true, "id": "718f6769f52442829cf1c57c1227d2d1", "name": "demo" } }, "user": { "id": "

Re: [Openstack] Regarding Role Management

2013-02-26 Thread Kun Huang
That policy.json is about keystone/keystone-client project On Wed, Feb 27, 2013 at 3:21 AM, Zach Antonas wrote: > Hi Kevin, > > Is there any Swift documentation for this? I can't find any example > policy.json parameters for Swift. > > Thanks, > Zach > > > On 26/02/2013 18:43, Kevin Stevens wr