Project

General

Profile

Actions

Support #6784

closed

integration of radosgw and keystone

Added by welmess gao over 10 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
High
Assignee:
-
Target version:
-
% Done:

0%

Tags:
Reviewed:
Affected Versions:
Pull request ID:

Description

hi, I tried to integrate radosgw and keystone according to the guide here(http://ceph.com/docs/master/radosgw/config/#integrating-with-openstack-keystone). My ceph version is v0.67.4.
I was able to run: swift -V 1.0 -A http://radosgw-node:8000/auth -U test:swift -K 4aecSYlU+Eipkn8MSXYdBjybSFRMsF3ZkeaKFYE6 stat
But when I tried to run: swift -V 1.0 -A http://keystone-node:5000/v2.0 -U test:integration -K integrationkey stat, it said access denied.
The difference is that test:swift was created through radosgw-admin command, while test:integration was a user “integration” with tenant ‘test’ which was created in keystone…
The following is my configuration:
host = testhost
keyring = /etc/ceph/keyring.radosgw.gateway
rgw socket path = /tmp/radosgw.sock
log file = /var/log/ceph/radosgw.log
rgw print continue = false
rgw enable usage log = true
rgw enable ops log = true
rgw enable log rados = true
debug rgw = 20
debug ms = 1
#configurations for integration with keystone
rgw keystone url = http://keystone-node:35357
rgw keystone admin token = 5c1e02653fc121c5ad82
rgw keystone accepted roles = ceph_admin, ceph_user
rgw keystone token cache size = 100
rgw keystone revocation interval = 600
rgw s3 auth use keystone = true
nss db path = /var/ceph/nss

anyone can help me regarding this?? Much appreciation! Thanks in advance!

Actions #1

Updated by Yehuda Sadeh about 10 years ago

  • Status changed from New to Closed
Actions

Also available in: Atom PDF