You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@libcloud.apache.org by "Simon Delamare (Created) (JIRA)" <ji...@apache.org> on 2011/11/02 17:09:32 UTC
[dev] [jira] [Created] (LIBCLOUD-125) Eucalyptus node driver fails to
authenticate on OpenNebula with EC2-compatible interface
Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
----------------------------------------------------------------------------------------
Key: LIBCLOUD-125
URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
Project: Libcloud
Issue Type: Bug
Components: Compute
Affects Versions: 0.6.0
Reporter: Simon Delamare
Fix For: 0.6.0
Attachments: ec2_sig.patch
When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
Example, with libcloud trunk from git repository:
$ python
Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
[GCC 4.4.5] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import libcloud.compute.providers
>>> import libcloud.compute.types
>>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
>>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
>>> conn.list_images()
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
self.connection.request(self.path, params=params).object
File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
connection=self)
File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
raise Exception(self.parse_error())
File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
raise InvalidCredsError(err_list[-1])
libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
>>>
This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
$ python
Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
[GCC 4.4.5] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import libcloud.compute.providers
>>> import libcloud.compute.types
>>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
>>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
>>> conn.list_images()
[<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus ...>]
>>>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[dev] [jira] [Resolved] (LIBCLOUD-125) Eucalyptus node driver fails to
authenticate on OpenNebula with EC2-compatible interface
Posted by "Tomaz Muraus (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/LIBCLOUD-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tomaz Muraus resolved LIBCLOUD-125.
-----------------------------------
Resolution: Fixed
> Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
> ----------------------------------------------------------------------------------------
>
> Key: LIBCLOUD-125
> URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
> Project: Libcloud
> Issue Type: Bug
> Components: Compute
> Affects Versions: 0.5.0, 0.5.2
> Reporter: Simon Delamare
> Labels: authentication, ec2
> Fix For: 0.6.0
>
> Attachments: ec2_sig.patch
>
>
> When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
> Example, with libcloud trunk from git repository:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> Traceback (most recent call last):
> File "<stdin>", line 1, in <module>
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
> self.connection.request(self.path, params=params).object
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
> connection=self)
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
> raise Exception(self.parse_error())
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
> raise InvalidCredsError(err_list[-1])
> libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
> >>>
> This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
> I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> [<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus ...>]
> >>>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[dev] [jira] [Closed] (LIBCLOUD-125) Eucalyptus node driver fails to
authenticate on OpenNebula with EC2-compatible interface
Posted by "Tomaz Muraus (Closed) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/LIBCLOUD-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tomaz Muraus closed LIBCLOUD-125.
---------------------------------
> Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
> ----------------------------------------------------------------------------------------
>
> Key: LIBCLOUD-125
> URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
> Project: Libcloud
> Issue Type: Bug
> Components: Compute
> Affects Versions: 0.5.0, 0.5.2
> Reporter: Simon Delamare
> Labels: authentication, ec2
> Fix For: 0.6.0
>
> Attachments: ec2_sig.patch
>
>
> When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
> Example, with libcloud trunk from git repository:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> Traceback (most recent call last):
> File "<stdin>", line 1, in <module>
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
> self.connection.request(self.path, params=params).object
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
> connection=self)
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
> raise Exception(self.parse_error())
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
> raise InvalidCredsError(err_list[-1])
> libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
> >>>
> This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
> I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> [<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus ...>]
> >>>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[dev] [jira] [Updated] (LIBCLOUD-125) Eucalyptus node driver fails to
authenticate on OpenNebula with EC2-compatible interface
Posted by "Simon Delamare (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/LIBCLOUD-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Simon Delamare updated LIBCLOUD-125:
------------------------------------
Attachment: ec2_sig.patch
> Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
> ----------------------------------------------------------------------------------------
>
> Key: LIBCLOUD-125
> URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
> Project: Libcloud
> Issue Type: Bug
> Components: Compute
> Affects Versions: 0.6.0
> Reporter: Simon Delamare
> Labels: authentication, ec2
> Fix For: 0.6.0
>
> Attachments: ec2_sig.patch
>
>
> When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
> Example, with libcloud trunk from git repository:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> Traceback (most recent call last):
> File "<stdin>", line 1, in <module>
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
> self.connection.request(self.path, params=params).object
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
> connection=self)
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
> raise Exception(self.parse_error())
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
> raise InvalidCredsError(err_list[-1])
> libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
> >>>
> This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
> I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> [<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus ...>]
> >>>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[dev] [jira] [Updated] (LIBCLOUD-125) Eucalyptus node driver fails to
authenticate on OpenNebula with EC2-compatible interface
Posted by "Tomaz Muraus (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/LIBCLOUD-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tomaz Muraus updated LIBCLOUD-125:
----------------------------------
Affects Version/s: (was: 0.6.0)
0.5.0
0.5.2
> Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
> ----------------------------------------------------------------------------------------
>
> Key: LIBCLOUD-125
> URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
> Project: Libcloud
> Issue Type: Bug
> Components: Compute
> Affects Versions: 0.5.0, 0.5.2
> Reporter: Simon Delamare
> Labels: authentication, ec2
> Fix For: 0.6.0
>
> Attachments: ec2_sig.patch
>
>
> When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
> Example, with libcloud trunk from git repository:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> Traceback (most recent call last):
> File "<stdin>", line 1, in <module>
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
> self.connection.request(self.path, params=params).object
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
> connection=self)
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
> raise Exception(self.parse_error())
> File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
> raise InvalidCredsError(err_list[-1])
> libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
> >>>
> This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
> I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48)
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> [<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus ...>]
> >>>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira