Re: [Netstack] Enabling Quantum AuthN

2012-04-01 Thread Salvatore Orlando
essage- > From: Deepak Garg > [mailto:deepakgarg.i...@gmail.com<mailto:deepakgarg.i...@gmail.com>] > Sent: 22 March 2012 10:43 > To: Salvatore Orlando > Cc: Jason Kölker; > netstack@lists.launchpad.net<mailto:netstack@lists.launchpad.net> > Subject: Re: [N

Re: [Netstack] Enabling Quantum AuthN

2012-04-01 Thread Dan Wendlandt
012 10:43 > > To: Salvatore Orlando > > Cc: Jason Kölker; netstack@lists.launchpad.net > > Subject: Re: [Netstack] Enabling Quantum AuthN > > > > Thanks Salvatore, > > Please find my answers inline. > > > > > > > > However, unfortunately, due

Re: [Netstack] Enabling Quantum AuthN

2012-03-22 Thread Salvatore Orlando
Replies inline Cheers, Salvatore > -Original Message- > From: Deepak Garg [mailto:deepakgarg.i...@gmail.com] > Sent: 22 March 2012 10:43 > To: Salvatore Orlando > Cc: Jason Kölker; netstack@lists.launchpad.net > Subject: Re: [Netstack] Enabling Quantum AuthN >

Re: [Netstack] Enabling Quantum AuthN

2012-03-22 Thread Deepak Garg
netstack- >> bounces+salvatore.orlando=eu.citrix@lists.launchpad.net] On Behalf Of >> Deepak Garg >> Sent: 22 March 2012 01:23 >> To: Jason Kölker >> Cc: netstack@lists.launchpad.net >> Subject: Re: [Netstack] Enabling Quantum AuthN >> >> I now think t

Re: [Netstack] Enabling Quantum AuthN

2012-03-22 Thread Salvatore Orlando
g > Sent: 22 March 2012 01:23 > To: Jason Kölker > Cc: netstack@lists.launchpad.net > Subject: Re: [Netstack] Enabling Quantum AuthN > > I now think the right approach is to move to shift the implementation of > network operations to 'nova' cli and giving up '

Re: [Netstack] Enabling Quantum AuthN

2012-03-21 Thread Deepak Garg
I now think the right approach is to move to shift the implementation of network operations to 'nova' cli and giving up 'nova-manage' cli for a permanent solution because: a. use of nova-manage sub-cmds seems to be deprecated. b. nova cli accepts tokens and have caching options c. other projects s

Re: [Netstack] Enabling Quantum AuthN

2012-03-21 Thread Deepak Garg
Thanks Jason for the idea. I am not sure how good is an idea of running two endpoints for quantum - one with 'noauth' and one with 'keystone'. If you have seen any such use case with other services please let me know. Nova defines two piplines: 'noauth' and 'keystone' and it chooses between them

Re: [Netstack] Enabling Quantum AuthN

2012-03-19 Thread Jason Kölker
On Mon, 2012-03-19 at 22:41 +0530, Deepak Garg wrote: > HI All, > > Basic AuthZ + AuthN was implemented at > https://review.openstack.org/#change,1322 but was lost in the Keystone > redux baseline. > However most of the work is included in the generic auth_token.py in > the keystone tree which is