auth plugin ignored

[Cory Stone]

Since the keystone discovery integration, the --os-auth-plugin flag is ignored.

In 1.0.9:
$ cinder --debug --os-auth-system rackspace list

REQ: curl -i http://10.127.0.152:5000/v2.0/tokens -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "User-Agent: python-cinderclient" -d '{"auth": {"RAX-KSKEY:apiKeyCredentials": {"username": "demo", "apiKey": "password"}}}'

In master:
$ cinder --debug --os-auth-system rackspace list

DEBUG:keystoneclient.session:REQ: curl -i -X POST http://10.127.0.152:5000/v2.0//tokens -H "Content-Type: application/json" -H "Accept: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"tenantName": "demo", "passwordCredentials": {"username": "demo", "password": "password"}}}'

[Cory Stone (corystone)]

This example is using the simple rackspace auth plugin.

https://github.com/rackerlabs/rackspace-auth-openstack

[Haneef Ali (haneef)]

Keystone has auth plugin support, but for that to work, the plugin should be a subclass of

keystoneclient.auth.identity.base.BaseIdentityPlugin

Basically if Rackspace plugin implements that interface then it can be used with session. Till then I will bypass sessions if auth system is other than "keystone".

Please le me know whether this is acceptable.

[Cory Stone (corystone)]

It would be good for cinderclient to support the keystoneclient auth plugins as well, but the existing auth_plugin/auth_system should continue to work.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/102586

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/102586
Committed: https://git.openstack.org/cgit/openstack/python-cinderclient/commit/?id=b4906c855fe86af6ac8f469ae6e76adddffe6586
Submitter: Jenkins
Branch: master

commit b4906c855fe86af6ac8f469ae6e76adddffe6586
Author: Haneef Ali <email address hidden>
Date: Wed Jun 25 10:04:57 2014 -0700

    Fix version discovery and auth_plugins

    V3Client support added version discovery and session supports. Most
    of the external auth system doesn't support this. This fix bypasses
    version discovery if the idenity service doesn't support that. Session
    is used only if no external auth plugin is used

    Change-Id: Ia84a2ad45940d35c5ef740727f5f7477c72ea9d4
    Closes-Bug: #1333961

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/118931
Committed: https://git.openstack.org/cgit/openstack/python-ceilometerclient/commit/?id=bc71ba32c9e69c2a57f612d752fe1128fccc7d40
Submitter: Jenkins
Branch: master

commit bc71ba32c9e69c2a57f612d752fe1128fccc7d40
Author: gordon chung <email address hidden>
Date: Wed Sep 3 20:22:33 2014 -0400

    keystone discovery fallback support

    version discovery and sessions aren't supported by all external
    auth systems. this patch adds a fallback when discovery does not
    work.

    Closes-Bug: #1333961
    Change-Id: Ib253c736e37f8dbc50881f9fc691bfdb4ab87d71