From 382f982e51d6117cf8d478b94f975455dabe4ce9 Mon Sep 17 00:00:00 2001 From: Julien Danjou <julien@danjou.info> Date: Mon, 21 Sep 2015 14:19:52 +0000 Subject: [PATCH] keystone: fix prefixed URL Commit 2ad1a42ca667ff21e6f7d2ae906be23a20430036 broke entirely the Apache configuration for Keystone when used without a port on the /identity URL. This patch fixes that. Change-Id: I47805138c66456c9c5fa9af1f4ac33b03d0ce5b9 --- files/apache-keystone.template | 34 ++++++++++++---------------------- 1 file changed, 12 insertions(+), 22 deletions(-) diff --git a/files/apache-keystone.template b/files/apache-keystone.template index 4d3d2d6623..f9fa265db5 100644 --- a/files/apache-keystone.template +++ b/files/apache-keystone.template @@ -2,6 +2,16 @@ Listen %PUBLICPORT% Listen %ADMINPORT% LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" keystone_combined +<Directory %KEYSTONE_BIN%> + <IfVersion >= 2.4> + Require all granted + </IfVersion> + <IfVersion < 2.4> + Order allow,deny + Allow from all + </IfVersion> +</Directory> + <VirtualHost *:%PUBLICPORT%> WSGIDaemonProcess keystone-public processes=5 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV% WSGIProcessGroup keystone-public @@ -16,16 +26,6 @@ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" %SSLENGINE% %SSLCERTFILE% %SSLKEYFILE% - - <Directory %KEYSTONE_BIN%> - <IfVersion >= 2.4> - Require all granted - </IfVersion> - <IfVersion < 2.4> - Order allow,deny - Allow from all - </IfVersion> - </Directory> </VirtualHost> <VirtualHost *:%ADMINPORT%> @@ -42,19 +42,9 @@ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" %SSLENGINE% %SSLCERTFILE% %SSLKEYFILE% - - <Directory %KEYSTONE_BIN%> - <IfVersion >= 2.4> - Require all granted - </IfVersion> - <IfVersion < 2.4> - Order allow,deny - Allow from all - </IfVersion> - </Directory> </VirtualHost> -Alias /identity %PUBLICWSGI% +Alias /identity %KEYSTONE_BIN%/keystone-wsgi-public <Location /identity> SetHandler wsgi-script Options +ExecCGI @@ -64,7 +54,7 @@ Alias /identity %PUBLICWSGI% WSGIPassAuthorization On </Location> -Alias /identity_admin %ADMINWSGI% +Alias /identity_admin %KEYSTONE_BIN%/keystone-wsgi-admin <Location /identity_admin> SetHandler wsgi-script Options +ExecCGI