openstack/swift
Code Issues Proposed changes

Correct the config default for delay_auth_decision

Browse Source 
Updated proxy-server.conf-sample with the correct default. Also
updated the note on the overview-auth doc page.

Change-Id: I5cd62a7a118a28f7b58f47b8d8d4d963f6bc7347
This commit is contained in:
John Dickinson 2015-02-05 11:01:02 -08:00
parent e7ef1dd5a8
commit b45b83fb00
2 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/source/overview_auth.rst
View File

@ -161,6 +161,7 @@ add the configuration for the authtoken middleware::
auth_uri = http://keystonehost:5000/ auth_uri = http://keystonehost:5000/
cache = swift.cache cache = swift.cache
include_service_catalog = False include_service_catalog = False
delay_auth_decision = True
The actual values for these variables will need to be set depending on The actual values for these variables will need to be set depending on
your situation, but in short: your situation, but in short:
@ -187,10 +188,10 @@ your situation, but in short:
.. note:: .. note::
If support is required for unvalidated users (as with anonymous The authtoken config variable ``delay_auth_decision`` must be set to
access or making capabilities requests using :ref:`discoverability`) or ``True``. The default is ``False``, but that breaks public access,
for tempurl/formpost middleware, authtoken will need :ref:`staticweb`, :ref:`formpost`, :ref:`tempurl`, and authenticated
to be configured with delay_auth_decision set to 1. capabilities requests (using :ref:`discoverability`).
and you can finally add the keystoneauth configuration:: and you can finally add the keystoneauth configuration::

7
etc/proxy-server.conf-sample
View File

@ -272,7 +272,12 @@ user_test_tester3 = testing3
# admin_tenant_name = service # admin_tenant_name = service
# admin_user = swift # admin_user = swift
# admin_password = password # admin_password = password
# delay_auth_decision = 1 #
# delay_auth_decision defaults to False, but leaving it as false will
# prevent other auth systems, staticweb, tempurl, formpost, and ACLs from
# working. This value must be explicitly set to True.
# delay_auth_decision = False
#
# cache = swift.cache # cache = swift.cache
# include_service_catalog = False # include_service_catalog = False
# #