Keystone

It is easy to launch the swift functional tests with v2 auth (Keystone). Assuming you have a recent version of python-swiftclient, python-keystoneclient and swift you need to first add a few users which is easily done with this script : Assuming you have already your OS_* variables configured with an admin, you can just launch it and it will : add a tenant/user named test/tester. add a tenant/user name test2/tester2. add a user tester3 belonging to test2 but not operator on that tenant....

PKI tokens has been implemented in keystone by [Adam Young][1] and others and was shipped for the OpenStack grizlly release. It is available since the version 2.0 API of keystone. PKI is a beautiful acronym to [Public-key infrastructure][2] which according to wikipedia defines it like this : Public-key cryptography is a cryptographic technique that enables users to securely communicate on an insecure public network, and reliably verify the identity of a user via digital signatures....

[NB: Much things has changed since I have written this article but keeping it here for info] It seems that integrating Swift and Keystone together present some challenges to people and this is absolutely normal as there is a lot of changes going on. This is my attempt to document how everything is plugged together. I am not going to explain how a middleware is supposed to work as this is nicely documented on Wikipedia :...