c2491bac9d
Keystone no longer has any special functionality hidden behind the admin site. KEYSTONE_AUTH_URI which used to point to the admin site has long ago been changed to be a copy of KEYSTONE_SERVICE_URI, which points to the public site. Drop all KEYSTONE_AUTH_* variables except KEYSTONE_AUTH_URI which may still be in use in some plugins. This also allows to finally drop the fixup_keystone() function. Change-Id: I549f3cadc27d137e014241cdd47e90267859c848
37 lines
1.0 KiB
Plaintext
37 lines
1.0 KiB
Plaintext
Listen %PUBLICPORT%
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" keystone_combined
|
|
|
|
<Directory %KEYSTONE_BIN%>
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<VirtualHost *:%PUBLICPORT%>
|
|
WSGIDaemonProcess keystone-public processes=3 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV%
|
|
WSGIProcessGroup keystone-public
|
|
WSGIScriptAlias / %KEYSTONE_BIN%/keystone-wsgi-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
ErrorLogFormat "%M"
|
|
ErrorLog /var/log/%APACHE_NAME%/keystone.log
|
|
CustomLog /var/log/%APACHE_NAME%/keystone_access.log keystone_combined
|
|
%SSLENGINE%
|
|
%SSLCERTFILE%
|
|
%SSLKEYFILE%
|
|
</VirtualHost>
|
|
|
|
%SSLLISTEN%<VirtualHost *:443>
|
|
%SSLLISTEN% %SSLENGINE%
|
|
%SSLLISTEN% %SSLCERTFILE%
|
|
%SSLLISTEN% %SSLKEYFILE%
|
|
%SSLLISTEN%</VirtualHost>
|
|
|
|
Alias /identity %KEYSTONE_BIN%/keystone-wsgi-public
|
|
<Location /identity>
|
|
SetHandler wsgi-script
|
|
Options +ExecCGI
|
|
|
|
WSGIProcessGroup keystone-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
</Location>
|