Re: [Openstack] adding security groups to running virtual machines

2012-08-08 Thread Rafael Durán Castañeda
On 08/08/2012 11:06 AM, Wolfgang Hennerbichler wrote: hi, is it me or is it openstack who can't modify security groups for running virtual machines? nova help | grep sec doesn't give me a clue. thanks for a hint, Wolfgang I'm getting this: nova help | grep sec secgroup-add-group-rule

Re: [Openstack] No handlers could be found for logger "keystoneclient.v2_0.client" (HTTP 404)???

2012-08-06 Thread Rafael Durán Castañeda
On 08/03/2012 09:37 AM, 王鹏 wrote: Everyone: Hi! When I install keystone alone, find a error, that’s make me crazy !the situation as follow: This is my conf [DEFAULT] bind_host = 0.0.0.0 public_port = 5000 admin_port = 35357 admin_token = admin compute_port = 8774 verbose = True debu

Re: [Openstack] [keystone] Rate limit middleware

2012-07-12 Thread Rafael Durán Castañeda
El 12/07/12 18:59, Jay Pipes escribió: On 07/12/2012 12:26 PM, Rafael Durán Castañeda wrote: Unless I'm missing something, nova_limits is not applicable to Keystone since it takes the tenant_id from 'nova.context', which obiously is not available for Keystone; thought ada

Re: [Openstack] [keystone] Rate limit middleware

2012-07-12 Thread Rafael Durán Castañeda
On 07/12/2012 04:48 PM, Jay Pipes wrote: On 07/11/2012 07:28 PM, Rafael Durán Castañeda wrote: Thank you guys for the info, I didn't know about some of the projects. However writing my "on-house" own stuff is not what I was considering but adding a middleware into Keystone, no

Re: [Openstack] [keystone] Rate limit middleware

2012-07-11 Thread Rafael Durán Castañeda
g): https://github.com/rackspace/repose http://openrepose.org/documentation.html -Dolph On Wed, Jul 11, 2012 at 9:19 AM, Kevin L. Mitchell mailto:kevin.mitch...@rackspace.com>> wrote: On Wed, 2012-07-11 at 01:50 +0200, Rafael Durán Castañeda wrote: > I'm working on a blueprint

[Openstack] [keystone] Rate limit middleware

2012-07-10 Thread Rafael Durán Castañeda
Hi, I'm working on a blueprint [1] and implementation [2] doing rate limit middleware for Keystone; after discussing it at keystone's meeting today I was suggested to ask for some feedback from the community. I think the most important thing is how to track the keystone usage and thus it should b

Re: [Openstack] Jenkins vs SmokeStack tests & Gerrit merge blockers

2012-06-29 Thread Rafael Durán Castañeda
On 06/28/2012 11:58 PM, Monty Taylor wrote: On 06/28/2012 01:49 PM, Dan Prince wrote: - Original Message - From: "Monty Taylor" To: openstack@lists.launchpad.net Sent: Thursday, June 28, 2012 11:13:28 AM Subject: Re: [Openstack] Jenkins vs SmokeStack tests & Gerrit merge blockers

Re: [Openstack] Change user password (not admin)

2012-06-07 Thread Rafael Durán Castañeda
On 06/07/2012 01:24 AM, Sam Morrison wrote: Hi, There has been a first attempt at this in keystone. See https://review.openstack.org/#/c/7437/ And bug: https://bugs.launchpad.net/keystone/+bug/996922 It needs more work to make it secure though. Cheers, Sam On Thu, Jun 7, 2012 at 7:13 AM, K

Re: [Openstack] 401 Not Authorized from glance - How to fix ?

2012-06-01 Thread Rafael Durán Castañeda
El 01/06/12 19:43, Anne Gentle escribió: Several thoughts to ponder. One is, the nova image-list command is using the Compute API, not the Image API. You can turn on --debug to see the curl statement issued from the nova client (very handy, that). Do: nova --debug image-list to see what I mean.

Re: [Openstack] nova user management without the dashboard

2012-05-24 Thread Rafael Durán Castañeda
El 24/05/12 20:36, Sharif Islam escribió: Is anyone using nova without utilizing the dashboard? Most of our users are used to ec2 api from the command line so we are thinking about generating the credential files and placing them in user's home directory. The idea is to avoid the extra step of l

Re: [Openstack] [OpenStack][Keystone]Does legacy_auth v1.0 exist in Keystone Essex ?

2012-05-24 Thread Rafael Durán Castañeda
Re-sending to list, since I think I've got this by mistake: On 05/24/2012 12:42 PM, Kuo Hugo wrote: *Thanks for all . * * * *I checked several parts of legacy_auth. * * * *There're some requirements of legacy_auth. We do not want to hack exist essex code though. * * * *We're considering to add

Re: [Openstack] [OpenStack][Keystone]Does legacy_auth v1.0 exist in Keystone Essex ?

2012-05-23 Thread Rafael Durán Castañeda
El 23/05/12 17:42, Dolph Mathews escribió: I haven't tested it myself, but I imagine you *could* deploy legacy_token_auth (which rewrites from keystone stable/diablo or essex-3 with stable/essex or folsom; however, there are a couple of issues that need to be resolved first. https://github.co

[Openstack] [keystone]Bug 963098 and related blueprint (meeting continuation)

2012-05-15 Thread Rafael Durán Castañeda
Hi, I would like continue discussion started at Keystone meeting from today (http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-15-18.02.html), about bug 963098 (Keystone isn't acting on consecutive failed logins) and related blueprint (Improve keystone secur

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Rafael Durán Castañeda
On 05/03/2012 06:38 AM, Nick Lothian wrote: I'm having some trouble using the Keystone API. When I run keystone --os_username=admin --os_password=password --os_auth_url=http://192.168.1.50:5000/v2.0/ service-list I get the following: No handlers could be found for logger "keystoneclient.v2_

Re: [Openstack] Keystone API question

2012-05-02 Thread Rafael Durán Castañeda
On 05/03/2012 12:06 AM, Luis Gervaso wrote: This is what i get. 1 > GET http://192.168.1.41:35357/v2.0/users/ef1e63df85b641d7bf3c575bb8670cef/roles 1 > X-Auth-Token: secret0 2012-05-03 00:03:55,337 [http-bio-8080-exec-10] INFO api.identity - 2 * LoggingFilter - Response received on thread

Re: [Openstack] Keystone get user-by-name

2012-04-10 Thread Rafael Durán Castañeda
Hi, There isn't https://bugs.launchpad.net/keystone/+bug/972800, however I'm planning adding it as extension to keystone contrib, I think I will send a patch tomorrow. Bye El 10 de abril de 2012 19:34, Tomasz Paszkowski escribió: > Hi, > > I'am trying to write code responsible for password res

Re: [Openstack] [CHEF] How to structure upstream OpenStack cookbooks?

2012-03-09 Thread Rafael Durán Castañeda
Hi, Bearing in mind I'm no really a Chef expert: On 03/09/2012 04:58 AM, Jay Pipes wrote: Hi Stackers, Specifically, these are the questions I'd like to discuss and get consensus on: 1) Do resources that set up non-production environments such as Swift All-in-One belong in the OpenStack Ch

Re: [Openstack] can't access keystone endpoint http://localhost:5000/v2.0

2012-03-07 Thread Rafael Durán Castañeda
On 03/07/2012 01:27 PM, Deepak Garg wrote: @ Rafael Can you post more details about the configurations and cmds you are using ? It will be helpful if you also paste the keystone.conf file. commands: $ cd path/to/keystone $ bin/keystone-all $ curl http://localhost:35357/v2.0 (or cur

Re: [Openstack] can't access keystone endpoint http://localhost:5000/v2.0

2012-03-06 Thread Rafael Durán Castañeda
El 06/03/12 18:40, Deepak Garg escribió: This seems to be solved after this was committed: https://bugs.launchpad.net/keystone/+bug/942485 It was working for me after this. Does your code have the changesets from the above commit ? Cheers, Deepak On Tue, Mar 6, 2012 at 10:00 PM, dming wrote

Re: [Openstack] nova service in dashboard cannot work.

2011-11-12 Thread Rafael Durán Castañeda
e you'll need to debug it on your own in order to find what's going on. P.S: Dashboard errors sometimes are not really meaningful, so as I said in my previous post capture input/outputs can be really useful. 2011/11/12 Rafael Durán Castañeda <mailto:rafadurancastan...@gmail.com&

Re: [Openstack] nova service in dashboard cannot work.

2011-11-12 Thread Rafael Durán Castañeda
I think your problems might be related to: 1) wrong paste configuration file (did you check the paste flag is pointing to the right file, keystone location and admin token?) 2) Wrong versions: dashboard install as pips python-novaclient and openstackx (among others), if Dashboard is using any wr

Re: [Openstack] Dashboard problem, bug or wrong version?

2011-10-06 Thread Rafael Durán Castañeda
to reinstall glance with trunk version. I think glance > was wrong maybe. Try reinstall glance latest version. > > > > 2011/10/6 Rafael Durán Castañeda > >> Hi, >> >> I'm trying to get a Keystone/Dashboard/Nova/Glance system (based on >> "Diab

[Openstack] Dashboard problem, bug or wrong version?

2011-10-05 Thread Rafael Durán Castañeda
Hi, I'm trying to get a Keystone/Dashboard/Nova/Glance system (based on "Diablo" releases) without success. Dashboard points to endpoints/openstackx errors: > Unable to get instance list: This error may be caused by a misconfigured nova url in keystone's service catalog, or by missing openstackx

Re: [Openstack] tenants and project

2011-09-30 Thread Rafael Durán Castañeda
From: Jesse Andrews Date: 2011/9/28 Subject: Re: [Openstack] dashaboard+keystone+nova+ glance work well? To: shake chen Cc: openstack@lists.launchpad.net at various points in time they have worked together. We (cloudbuilders) keep a list of repositories that work well together. # compute serv

Re: [Openstack] keystone + dash + diablo user flows

2011-09-26 Thread Rafael Durán Castañeda
Hi, Looking at your posts openstack/keystoneat GitHub seems to be the recommended version for Diablo, however Launchpad points to this version , so I'm a bit confused about which is the Diablo version for Keystone. Any h

[Openstack] keystone-admin-role question

2011-08-23 Thread Rafael Durán Castañeda
Hi, Looking at code from Keystone I found something that doesn't make sense to me. Looking at __validate_service_or_keystone_admin_token method Keystone-admin-role is valid only if it isn't associated to any tenant

Re: [Openstack] [Seeking help] Help needed for solving a problem while starting nova.

2011-08-14 Thread Rafael Durán Castañeda
I think error is explicit enought: GlanceClient = utils.import_class('glance.client.Client') File "/home/paraneetharanc/fun/openstack/nova/contrib/nova/nova/utils.py", line 65, in import_class raise exception.ClassNotFound(class_name=class_str) nova.exception.ClassNotFound: Class Client co

Re: [Openstack] Problems connecting Dashboard and Nova

2011-08-09 Thread Rafael Durán Castañeda
I didn't check dashboard since long time ago, so I'm a little bit out of date, later I might try test it myself and help you. However today, in about half an hour, is Openstack IRC meeting. You might want ask there about both keystone and dashboard status, since I think everything points them.

Re: [Openstack] Problems connecting Dashboard and Nova

2011-08-09 Thread Rafael Durán Castañeda
Are you running an all-in-on environment as Mark pointed out? It might be a problem about endpoitnts urls if you are using a distributed system (not really sure). In addition I saw some changes on Keystone Admin roles, maybe Dashboard needs to catch up to keystone changes, but again I'm no real

Re: [Openstack] Dashboard newbie question

2011-08-04 Thread Rafael Durán Castañeda
On dashboard you can get your credentials too clicking a bottom near your project name (I don't use dashboard since long time ago, so it might be changed). About your comment: It seemed to freeze it up (no other requests worked, restarted then its ok). Is that known? Are you running nova

Re: [Openstack] some newbie questions

2011-08-03 Thread Rafael Durán Castañeda
Sending back to Openstack list since other people might help you better than me, anyway: Can you post result from: $ virsh net-dumpxml default I'm not sure about this, but It seems host is trying wrong bridge when connecting your vms, I had similar problem installing from source, since I was

Re: [Openstack] some newbie questions

2011-08-03 Thread Rafael Durán Castañeda
I'm not an Openstack expert, but this might help you: A1. What's your network config? Whitout any useful information it's very difficult helping you. It would be useful both ifconfig and nova-manage network output, virsh output would help too. A2. You can start looking at http://wiki.openstac

Re: [Openstack] Java application over Openstack

2011-06-06 Thread Rafael Durán Castañeda
On 06/06/11 02:30, Rajesh Mohan wrote: Hi, Not sure whether this is the right place to post this question. I'm new to Openstack and trying to write a java application by using Openstack API. I read admin manual on the openstack site. It talks about using "nova-manage" to create the project, us