summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorChmouel Boudjnah <chmouel@chmouel.com>2012-12-08 13:38:45 +0100
committerChmouel Boudjnah <chmouel@chmouel.com>2012-12-12 21:54:45 +0100
commite577cd60871e1810b45236d3642d60e460dc4858 (patch)
treedb706d4fa8e955d36c5b23d1fc15677470cf9fff /doc
parent7978bb271bf0e978a095aa088e4bb2bdb1d684f8 (diff)
downloadkeystone-e577cd60871e1810b45236d3642d60e460dc4858.tar.gz
keystone-e577cd60871e1810b45236d3642d60e460dc4858.tar.xz
keystone-e577cd60871e1810b45236d3642d60e460dc4858.zip
Remove swift auth.
- This has been moved since last release to swift main repository. Change-Id: I11fc4001fbc4a1d78823d41450cdfcc97677c420
Diffstat (limited to 'doc')
-rw-r--r--doc/source/configuringservices.rst147
1 files changed, 2 insertions, 145 deletions
diff --git a/doc/source/configuringservices.rst b/doc/source/configuringservices.rst
index 4dbba55e..2a8c1472 100644
--- a/doc/source/configuringservices.rst
+++ b/doc/source/configuringservices.rst
@@ -176,151 +176,8 @@ Configuring Swift to use Keystone
---------------------------------
Similar to Nova, swift can be configured to use Keystone for authentication
-rather than its built in 'tempauth'.
-
-1. Add a service endpoint for Swift to Keystone
-
-2. Configure the paste file for swift-proxy (`/etc/swift/swift-proxy.conf`)
-
-3. Reconfigure Swift's proxy server to use Keystone instead of TempAuth.
- Here's an example `/etc/swift/proxy-server.conf`::
-
- [DEFAULT]
- bind_port = 8888
- user = <user>
-
- [pipeline:main]
- pipeline = catch_errors healthcheck cache authtoken keystone proxy-server
-
- [app:proxy-server]
- use = egg:swift#proxy
- account_autocreate = true
-
- [filter:keystone]
- paste.filter_factory = keystone.middleware.swift_auth:filter_factory
- operator_roles = admin, swiftoperator
-
- [filter:authtoken]
- paste.filter_factory = keystone.middleware.auth_token:filter_factory
- # Delaying the auth decision is required to support token-less
- # usage for anonymous referrers ('.r:*') or for tempurl/formpost
- # middleware.
- delay_auth_decision = 1
- auth_port = 35357
- auth_host = 127.0.0.1
- auth_token = ADMIN
- admin_token = ADMIN
-
- [filter:cache]
- use = egg:swift#memcache
- set log_name = cache
-
- [filter:catch_errors]
- use = egg:swift#catch_errors
-
- [filter:healthcheck]
- use = egg:swift#healthcheck
-
-.. Note::
- Your user needs to have the role swiftoperator or admin by default
- to be able to operate on an swift account or as specified by the
- variable `operator_roles`.
-
-4. Restart swift
-
-5. Verify that keystone is providing authentication to Swift
-
- $ swift -V 2 -A http://localhost:5000/v2.0 -U admin:admin -K ADMIN stat
-
-.. NOTE::
- Instead of connecting to Swift here, as you would with other services, we
- are connecting directly to Keystone.
-
-Configuring Swift with S3 emulation to use Keystone
----------------------------------------------------
-
-Keystone supports validating S3 tokens using the same tokens as the
-generated EC2 tokens. When you have generated a pair of EC2 access
-token and secret you can access your swift cluster directly with the
-S3 API.
-
-1. Ensure you have defined the S3 service in your `keystone.conf`. First, define the filter as follows::
-
- [filter:s3_extension]
- paste.filter_factory = keystone.contrib.s3:S3Extension.factory
-
-Then, ensure that the filter is being called by the admin_api pipeline, as follows::
-
- [pipeline:admin_api]
- pipeline = token_auth [....] ec2_extension s3_extension [...]
-
-2. Configure the paste file for swift-proxy
- (`/etc/swift/swift-proxy.conf` to use S3token and Swift3
- middleware.
-
- Here's an example that by default communicates with keystone via https ::
-
- [DEFAULT]
- bind_port = 8080
- user = <user>
-
- [pipeline:main]
- pipeline = catch_errors healthcheck cache swift3 s3token authtoken keystone proxy-server
-
- [app:proxy-server]
- use = egg:swift#proxy
- account_autocreate = true
-
- [filter:catch_errors]
- use = egg:swift#catch_errors
-
- [filter:healthcheck]
- use = egg:swift#healthcheck
-
- [filter:cache]
- use = egg:swift#memcache
-
- [filter:swift3]
- use = egg:swift#swift3
-
- [filter:keystone]
- paste.filter_factory = keystone.middleware.swift_auth:filter_factory
- operator_roles = admin, swiftoperator
-
- [filter:s3token]
- paste.filter_factory = keystone.middleware.s3_token:filter_factory
- # uncomment the following line if you don't want to use SSL
- # auth_protocol = http
- auth_port = 35357
- auth_host = 127.0.0.1
-
- [filter:authtoken]
- paste.filter_factory = keystone.middleware.auth_token:filter_factory
- # uncomment the following line if you don't want to use SSL
- # auth_protocol = http
- auth_port = 35357
- auth_host = 127.0.0.1
- auth_token = ADMIN
- admin_token = ADMIN
-
-3. You can then access directly your Swift via the S3 API, here's an
- example with the `boto` library::
-
- import boto
- import boto.s3.connection
-
- connection = boto.connect_s3(
- aws_access_key_id='<ec2 access key for user>',
- aws_secret_access_key='<ec2 secret access key for user>',
- port=8080,
- host='localhost',
- is_secure=False,
- calling_format=boto.s3.connection.OrdinaryCallingFormat())
-
-
-.. Note::
- With the S3 middleware you are connecting to the `Swift` proxy and
- not to `keystone`.
+rather than its built in 'tempauth'. Refer to the `overview_auth` documentation
+in Swift.
Auth-Token Middleware with Username and Password
------------------------------------------------