swift tempauth is undocumented

[Tom Fifield]

http://docs.openstack.org/trunk/openstack-object-storage/admin/content/before-you-begin-swift-install.html makes reference to 'tempauth', but there is no further information about this filter in the manual.

The following options are missing from the docs for filter:tempauth:

Variable Service module Default
allow_overrides proxy_server filter:tempauth 't'
auth_prefix proxy_server filter:tempauth '/auth/'
reseller_prefixes proxy_server filter:tempauth 'AUTH'
token_life proxy_server filter:tempauth 86400
log_facility proxy_server filter:tempauth 'LOG_LOCAL0'
log_level proxy_server filter:tempauth 'INFO'
log_name proxy_server filter:tempauth 'tempauth'
log_headers proxy_server filter:tempauth 'f'
allowed_sync_hosts proxy_server filter:tempauth '127.0.0.1'
user_<account>_<user> proxy_server filter:tempauth
(more readable view at https://docs.google.com/spreadsheet/ccc?key=0ArysOOuLgF_PdFV0cFV2VkE2WkZUY1RNYjZBd204a0E )

[Anne Gentle (annegentle)]

While I marked this Triaged, as there is enough info to document, I wonder if we should only document Keystone in the "official" docs since Keystone is the official Identity service for OpenStack projects.

[Tom Fifield (fifieldt)]

While I agree, my impression is that there are still a tonne of Swift deployments out there which do not use keystone.

Similarly, if you look at Swift All in One(http://swift.openstack.org/development_saio.html), which is where many people start with Swift, it actually uses tempauth.

Perhaps a nice little note that people should consider using keystone instead, it could be OK?

[Tom Fifield (fifieldt)]

Going to mark as WONTFIX, as noone should be using this in production. If they are working with it they are most likely using it for development and as such they can look at the developer reference: http://docs.openstack.org/developer/swift/misc.html?highlight=tempauth#module-swift.common.middleware.tempauth