You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@libcloud.apache.org by "Simon Delamare (Updated) (JIRA)" <ji...@apache.org> on 2011/11/02 17:09:33 UTC

[dev] [jira] [Updated] (LIBCLOUD-125) Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface

     [ https://issues.apache.org/jira/browse/LIBCLOUD-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Simon Delamare updated LIBCLOUD-125:
------------------------------------

    Attachment: ec2_sig.patch
    
> Eucalyptus node driver fails to authenticate on OpenNebula with EC2-compatible interface
> ----------------------------------------------------------------------------------------
>
>                 Key: LIBCLOUD-125
>                 URL: https://issues.apache.org/jira/browse/LIBCLOUD-125
>             Project: Libcloud
>          Issue Type: Bug
>          Components: Compute
>    Affects Versions: 0.6.0
>            Reporter: Simon Delamare
>              Labels: authentication, ec2
>             Fix For: 0.6.0
>
>         Attachments: ec2_sig.patch
>
>
> When connecting to OpenNebula through its EC2 compatible interface (using libcloud Eucalyptus driver) on a non standard port, the user authentication fails.
> Example, with libcloud trunk from git repository:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48) 
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> Traceback (most recent call last):
>   File "<stdin>", line 1, in <module>
>   File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 470, in list_images
>     self.connection.request(self.path, params=params).object
>   File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 493, in request
>     connection=self)
>   File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/common/base.py", line 59, in __init__
>     raise Exception(self.parse_error())
>   File "/home/sdelamare/.local/lib/python2.6/site-packages/libcloud/compute/drivers/ec2.py", line 183, in parse_error
>     raise InvalidCredsError(err_list[-1])
> libcloud.common.types.InvalidCredsError: 'AuthFailure: User not authorized'
> >>> 
> This is because libcloud never includes the port number after the hostname in the authentication signature added to HTTP header. The port number should be included if it is non default (!= 80 for HTTP and !=443 for HTTPS). This is the standard behavior for HTTP requests (see http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23).
> I am attaching a patch (against git trunk version) that modifies the EC2Connection._get_aws_auth_param() function to address the bug. It solves my problem:
> $ python
> Python 2.6.6 (r266:84292, Dec 26 2010, 22:31:48) 
> [GCC 4.4.5] on linux2
> Type "help", "copyright", "credits" or "license" for more information.
> >>> import libcloud.compute.providers
> >>> import libcloud.compute.types
> >>> Driver=libcloud.compute.providers.get_driver(libcloud.compute.types.Provider.EUCALYPTUS)
> >>> conn = Driver(host="myhost",port=4567,key="oneadmin",secret="mysecret",secure=False,path="/")
> >>> conn.list_images()
> [<NodeImage: id=ami-00000000, name=690c4904283b5120c8b253553543f4c38b21a4a8, driver=Eucalyptus  ...>]
> >>> 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira