ECS 3.6.2 Data Access Guide

OpenStack Swift authentication

ECS provides support for different versions of the OpenStack Swift Authentication protocol.

v1

ECS enables object users to authenticate with the ECS Swift service and obtain an authentication token that can be used when making subsequent API calls to the ECS Swift service. See OpenStack Version 1 authentication.

v2

ECS enables object users to authenticate with the ECS Swift service to obtain a scoped token, that is, a token associated with a tenant (equivalent to a project), that can be used when making subsequent API calls to the ECS Swift service. See OpenStack Version 2 authentication

v3

ECS validates Keystone V3 users that present tokens scoped to a Keystone project. See Authentication using ECS Keystone V3 integration.

For v1 and v2 protocols, access to the ECS object store using the OpenStack Swift protocol requires an ECS object user account and a Swift password.

For v3, users are created, and assigned to projects and roles, outside of ECS using a Keystone V3 service. ECS does not perform authentication, but validates the authentication token with the Keystone V3 service.

Assigning Swift credentials to ECS object users is described in Create Swift users in the ECS Portal.