ECS 3.6.2 Data Access Guide

OpenStack Version 2 authentication

ECS includes limited support for OpenStack Version 2 (Keystone) authentication.

1. To obtain an unscoped token from ECS you can use the /v2.0/tokens API and supply a username and password for the ECS Swift service.

   curl -v -X POST -H 'ACCEPT: application/json' -H "Content-Type: application/json" -d '{"auth": 
   {"passwordCredentials" : {"username" : "swift_user", "password" : "123"}}}' http://203.0.113.10:9024/v2.0/tokens 
   		  

   The response looks like the following. The unscoped token is preceded by id and tokens generated by ECS are preceded by the "ecs_" prefix.

   {"access": {"token": {"id":"ecs_d668b72a011c4edf960324ab2e87438b","expires":"1376633127950"l},"user": 
                    {"name": "sysadmin", "roles":[ ], "role_links":[ ] },"serviceCatalog":[ ] }} , } 
   		  

2. Retrieve tenant information associated with the unscoped token.

   curl -v http://203.0.113.10:9024/v2.0/tenants -H 'X-Auth-Token: d668b72a011c4edf960324ab2e87438b' 
   		  

   The response looks like the following.

   {"tenants_links":[], "tenants":[{"description":"s3","enabled":true, "name": "s3"}]}
    
   		  

3. Retrieve the scoped token along with the storageUrl.

   curl -v -X POST -H 'ACCEPT: application/json' -H "Content-Type: application/json" -d '{"auth": {"tenantName" : "s3", 
                             "token":{"id" : ecs_d668b72a011c4edf960324ab2e87438b"}}}' http://203.0.113.10:9024/v2.0/tokens 
   		  

   An example response follows. The scoped token is preceded by id.

   {"access":{"token":{"id":"ecs_baf0709e30ed4b138c5db6767ba76a4e
   ","expires":"1376633255485","tenant":{"description":"s3","enabled":true,"name":"s3"}},
   "user":{"name":"swift_admin","roles":[{"name":"member"},{"name":"admin"}],"role_links":[]},
         "serviceCatalog":[{"type":"object-store", "name":"Swift","endpoints_links":[],"endpoint":[{"internalURL":
          "http://203.0.113.10:9024/v1/s3","publicURL":"http://203.0.113.10:9024/v1/s3"}]}]}}

4. Use the scoped token and the service endpoint URL for Swift authentication. This step is the same as in V1 of OpenStack.

   curl -v -H "X-Auth-Token: baf0709e30ed4b138c5db6767ba76a4e" http://203.0.113.10:9024/v1/s3/{container}/{object}