yahoo-eng-team team mailing list archive

[Colleen Murphy <colleen@xxxxxxxxxxx>]

The default configuration provided by Ubuntu is correct. We are
discouraging creating a vhost on port 35357 because it is not needed as
of the Queens release. This is also not a documentation bug, if there is
a problem with Ubuntu's packaging it should be addressed with the Ubuntu
cloud team. In this case I do not believe there is a problem with the
default Apache file they've provided.

** Changed in: keystone
       Status: Triaged => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1754359

Title:
  Apache configuration missing

Status in OpenStack Identity (keystone):
  Invalid

Bug description:
  - [ ] This doc is inaccurate in this way: ______
  - [X] This is a doc addition request.
  - [ ] I have a fix to the document that I can paste below including example: input and output.

  Bellow the good apache2 configuration for keystone :

  File : /etc/apache2/sites-available/keystone.conf

  Listen 5000
  Listen 35357

  <VirtualHost *:5000>
      WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
      WSGIProcessGroup keystone-public
      WSGIScriptAlias / /usr/bin/keystone-wsgi-public
      WSGIApplicationGroup %{GLOBAL}
      WSGIPassAuthorization On
      ErrorLogFormat "%{cu}t %M"
      ErrorLog /var/log/apache2/keystone.log
      CustomLog /var/log/apache2/keystone_access.log combined

      <Directory /usr/bin>
          Require all granted
      </Directory>
  </VirtualHost>

  <VirtualHost *:35357>
      WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
      WSGIProcessGroup keystone-admin
      WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
      WSGIApplicationGroup %{GLOBAL}
      WSGIPassAuthorization On
      ErrorLogFormat "%{cu}t %M"
      ErrorLog /var/log/apache2/keystone.log
      CustomLog /var/log/apache2/keystone_access.log combined

      <Directory /usr/bin>
          Require all granted
      </Directory>
  </VirtualHost>

  Default configuration but wrong :

  Listen 5000

  <VirtualHost *:5000>
      WSGIScriptAlias / /usr/bin/keystone-wsgi-public
      WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
      WSGIProcessGroup keystone-public
      WSGIApplicationGroup %{GLOBAL}
      WSGIPassAuthorization On
      LimitRequestBody 114688

      <IfVersion >= 2.4>
        ErrorLogFormat "%{cu}t %M"
      </IfVersion>

      ErrorLog /var/log/apache2/keystone.log
      CustomLog /var/log/apache2/keystone_access.log combined

      <Directory /usr/bin>
          <IfVersion >= 2.4>
              Require all granted
          </IfVersion>
          <IfVersion < 2.4>
              Order allow,deny
              Allow from all
          </IfVersion>
      </Directory>
  </VirtualHost>

  Alias /identity /usr/bin/keystone-wsgi-public
  <Location /identity>
      SetHandler wsgi-script
      Options +ExecCGI

      WSGIProcessGroup keystone-public
      WSGIApplicationGroup %{GLOBAL}
      WSGIPassAuthorization On
  </Location>

  DISTRIB_DESCRIPTION="Ubuntu 16.04.4 LTS"
  OpenStack Version : Queens

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1754359/+subscriptions