griddynamics/openstack — Issue #13: Deprecated auth does not seem to working in diablo release.
Author: sstent
Created: 2012-02-23 22:44:55+00:00
State: open

Deprecated auth does not seem to working in diablo release.

Users were created using nova-manage. Even a default user can see all other project's instances and terminate them.

Tested using both eucatools and hybridfox

-------------------------------
#Packages

openstack-nova.noarch	1:2011.3-b2083
openstack-nova-api.noarch	1:2011.3-b2083
openstack-nova-objectstore.noarch	1:2011.3-b2083
openstack-nova-scheduler.noarch	1:2011.3-b2083
openstack-nova-vncproxy.noarch	1:2011.3-b2083

--------------------

#nova.conf

--verbose=true
--ec2_url=http://10.5.115.31:8773/services/Cloud
--s3_host=10.5.115.31
--rabbit_host=10.5.115.31
--sql_connection=mysql://XXXX:XXXX@10.5.115.33/nova
--use_s3=true
--libvirt_type=kvm
--use_syslog=false
--node_availability_zone=nova
--logdir=/var/log/nova
--logging_context_format_string=%(asctime)s %(name)s: %(levelname)s [%(request_id)s %(user_id)s %(project_id)s] %(message)s
--logging_default_format_string=%(asctime)s %(name)s: %(message)s
--logging_debug_format_suffix=from (pid=%(process)d) %(funcName)s %(pathname)s:%(lineno)d
--use_cow_images=true
--auth_driver=nova.auth.dbdriver.DbDriver
--compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
--volume_scheduler_driver=nova.scheduler.simple.SimpleScheduler
--glance_api_servers=10.5.115.43:9292
--image_service=nova.image.glance.GlanceImageService
--use_ipv6=false
--ca_path=/var/lib/nova/CA
--keys_path=/var/lib/nova/keys
--images_path=/var/lib/nova/images
--buckets_path=/var/lib/nova/buckets
--instances_path=/var/lib/nova/instances
--networks_path=/var/lib/nova/networks
--injected_network_template_dir=/usr/share/nova/interfaces/
--libvirt_xml_template=/usr/share/nova/libvirt.xml.template
--vpn_client_template=/usr/share/nova/client.ovpn.template
--credentials_template=/usr/share/nova/novarc.template
--state_path=/var/lib/nova
--lock_path=/var/lib/nova/tmp
--vnc_enabled=true
--vncproxy_url=http://10.5.96.31:6080
--vncserver_host=10.5.96.31
--vnc_token_ttl=300
--dhcpbridge_flagfile=/etc/nova/nova.conf
--dhcpbridge=/usr/bin/nova-dhcpbridge
--public_interface=br96
--network_manager=nova.network.manager.FlatDHCPManager
--flat_network_bridge=br100
--volume_manager=nova.volume.manager.VolumeManager
--multi_host=T
--fixed_range=10.100.0.0/20
--network_size=4094
--my_ip=10.5.115.31
--multi_host=T
--floating_range=10.5.96.0/20
--iscsi_ip_prefix=10.100.16
--routing_source_ip=10.5.96.31
--noallow_same_net_traffic
--send_arp_for_ha
--use_deprecated_auth=true