RETIRED, An alternative authentication system for Swift
Go to file
gholt f6d6dc34a2 Fixed #60 doc bug 2014-01-25 00:49:13 +00:00
bin Allow users to change their own password/key 2014-01-20 10:29:24 +05:30
doc Fixed #60 doc bug 2014-01-25 00:49:13 +00:00
etc Allow user set X-Auth-Token-Lifetime, with limits 2013-03-01 06:35:51 +00:00
locale Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
swauth Merge pull request #61 from prashanthpai/update-password 2014-01-24 13:04:06 -08:00
test_swauth Allow users to change their own password/key 2014-01-20 10:29:24 +05:30
webadmin First edition of the webadmin 2011-06-27 04:47:10 +00:00
.gitignore Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
.unittests Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
AUTHORS Adding Rodney Beede to AUTHORS 2014-01-25 00:25:55 +00:00
CHANGELOG Releasing 1.0.8 2013-04-24 07:47:25 +00:00
LICENSE Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
MANIFEST.in Added README.md to MANIFEST.in 2012-05-26 02:04:49 +00:00
README.md Update README.md with allow_account_management ... 2012-03-27 02:59:01 +00:00
babel.cfg Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
setup.cfg Initial commit of original codebase, altered to work in new codebase. 2011-05-26 10:39:59 +00:00
setup.py Updated setup.py email 2012-06-05 21:21:05 +00:00

README.md

Swauth

An Auth Service for Swift as WSGI Middleware that uses Swift itself as a backing store. Sphinx-built docs at: http://gholt.github.com/swauth/

See also https://github.com/openstack/keystone for the standard OpenStack auth service.

NOTE

Be sure to review the Sphinx-built docs at: http://gholt.github.com/swauth/

Quick Install

  1. Install Swauth with sudo python setup.py install or sudo python setup.py develop or via whatever packaging system you may be using.

  2. Alter your proxy-server.conf pipeline to have swauth instead of tempauth:

    Was:

     [pipeline:main]
     pipeline = catch_errors cache tempauth proxy-server
    

    Change To:

     [pipeline:main]
     pipeline = catch_errors cache swauth proxy-server
    
  3. Add to your proxy-server.conf the section for the Swauth WSGI filter:

    [filter:swauth] use = egg:swauth#swauth set log_name = swauth super_admin_key = swauthkey

  4. Be sure your proxy server allows account management:

    [app:proxy-server] ... allow_account_management = true

  5. Restart your proxy server swift-init proxy reload

  6. Initialize the Swauth backing store in Swift swauth-prep -K swauthkey

  7. Add an account/user swauth-add-user -A http://127.0.0.1:8080/auth/ -K swauthkey -a test tester testing

  8. Ensure it works swift -A http://127.0.0.1:8080/auth/v1.0 -U test:tester -K testing stat -v

Web Admin Install

  1. If you installed from packages, you'll need to cd to the webadmin directory the package installed. This is /usr/share/doc/python-swauth/webadmin with the Lucid packages. If you installed from source, you'll need to cd to the webadmin directory in the source directory.

  2. Upload the Web Admin files with swift -A http://127.0.0.1:8080/auth/v1.0 -U .super_admin:.super_admin -K swauthkey upload .webadmin .

  3. Open http://127.0.0.1:8080/auth/ in your browser.