OpenStack Object Storage (swift)

Creating Multiple Users in Proxy-server.conf using Tempauth

Asked by Enteng Bisana

Good day, I have installed openstack swift successfully (using Tempauth), following http://swift.openstack.org/howto_installmultinode.html.

I was just thinking, what if I create more or less 500 users/accounts.. Should I put all these users/accounts to proxy-server.conf?

Can anyone please give me an advice what's the best thing to do? Can the users/accounts be placed in a separate file/s?

Thanks in advance!

Question information

Language:
English Edit question
Status:
Solved
For:
OpenStack Object Storage (swift) Edit question
Assignee:
No assignee Edit question
Solved by:
Marcelo Martins
Solved:
Last query:
Last reply:
Revision history for this message
Marcelo Martins (btorch) said : 		#1

Don't use Tempauth for that. Tempauth is supposed to be used only for dev testing. If you need that many users I suggest you use swift-swauth. https://github.com/gholt/swauth

Revision history for this message
Enteng Bisana (lvsbisana) said : 		#2

Thank you Marcelo for your advice, I will use swauth instead. But can I go back to my concern that the users/accounts are placed in the config file proxy-server.conf? Is there a way to use the /etc/passwd for the users/accounts? Or just wondering if I could make a separate file for this users/accounts.. If there is, can anyone please help.. Thanks a lot!

Revision history for this message
Best Marcelo Martins (btorch) said : 		#3

if you use swauth, you won't be setting any users/accounts in the proxy config. Now if you are talking about making a change to tempauth so that there is a new param option to specify a file for users/accounts, then I believe you would have to submit that as an issue on github where the code is maintained.

Revision history for this message
Enteng Bisana (lvsbisana) said : 		#4

Thank you again Marcelo. I successfully implemented swauth .. Please correct me if I'm wrong.. In swauth, you do not need to put the account/user etc. values in the proxy-server.conf because it automatically place in a binary file under the account directory.. while in the tempauth, the account/user etc details must be inputted first in the config file before creating the accounts/users.. I was just confuse when I saw some of the samples using swauth as show below:

[filter:swauth]
use = egg:swift#swauth
default_swift_cluster = local#https://192.168.0.20:443//v1#https://127.0.0.1:443/v1
user_admin_admin = admin .admin .reseller_admin
user_test_tester = testing .admin
user_test2_tester2 = testing2 .admin
user_test7_tester7 = testing7. admin
user_test3_tester3 = testing3 .admin

Revision history for this message
Marcelo Martins (btorch) said : 		#5

You are correct, swauth basically uses swift for the storing the account/user information. Tempauth on the other hand needs the account/user information to be placed on the proxy-server.conf under it's middleware section. The "[filter:swauth]" you posted there is incorrect.

Revision history for this message
Enteng Bisana (lvsbisana) said : 		#6

Thanks Marcelo Martins, that solved my question.