Keystone: Identity Service

Keystone is a proposed independent authentication service for OpenStack.

This initial proof of concept aims to address the current use cases in Swift and Nova which are:

• REST-based, token auth for Swift
• many-to-many relationship between identity and tenant for Nova.

SERVICES:

• Keystone - authentication service
• Auth_Token - WSGI middleware that can be used to handle token auth protocol (WSGI or remote proxy)
• Echo - A sample service that responds by returning call details

Also included:

• Auth_Basic - Stub for WSGI middleware that will be used to handle basic auth
• Auth_OpenID - Stub for WSGI middleware that will be used to handle openid auth protocol
• RemoteAuth - WSGI middleware that can be used in services (like Swift, Nova, and Glance) when Auth middleware is running remotely

DEPENDENCIES:

• bottle
• eventlet
• lxml
• Paste
• PasteDeploy
• PasteScript
• SQLAlchemy
• SQLite3
• webob

SETUP:

Install http://pypi.python.org/pypi/setuptools sudo easy_install pip sudo pip install -r pip-requires

RUNNING KEYSTONE:

$ cd bin
$ ./keystoned

RUNNING TEST SERVICE:

Standalone stack (with Auth_Token)
$ cd echo/echo
$ python echo.py

Distributed stack (with RemoteAuth local and Auth_Token remote)
$ cd echo/echo
$ python echo.py --remote

in separate session
$ cd keystone/auth_protocols
$ python auth_token.py --remote

DEMO CLIENT:

$ cd echo/echo
$ python echo_client.py

INSTALLING KEYSTONE:

$ python setup.py build
$ sudo python setup.py install

INSTALLING TEST SERVICE:

$ cd echo
$ python setup.py build
$ sudo python setup.py install

TESTING

After starting identity.py a keystone.db sql-lite database should be created.

To test setup the test database:

$ sqlite3 keystone/keystone.db < test/test_setup.sql

To clean the test database

$ sqlite3 keystone/keystone.db < test/kill.sql

To run unit tests:

$ python test/unit/test_identity.py

To run client demo (with all auth middleware running locally on sample service):

$ python echo/echo/echo.py
$ python echo/echo/echo_client.py

To perform contract validation and load testing, use SoapUI (for now).

Using SOAPUI:

Download SOAPUI:

To Test Identity Service:

• File->Import Project
• Select tests/IdentitySOAPUI.xml
• Double click on "Keystone Tests" and press the green play (>) button

Unit Test on Identity Services

In order to run the unit test on identity services, run from the keystone directory

python server.py

cat test_setup.sql |sqlite ../../keystone/keystone.db

Once the Identity service is running, go to unit test/unit directory

python test_identity.py

For more on unit testing please refer

python test_identity --help