841fdafa0b
When running in httpd, keystone accepts requests on /identity and /identity_v2_admin. The path endpoints should be preferred over the ports so keystone is configured to point applications to the path endpoints by setting admin_endpoint and public_endpoint. Change-Id: I34569b9e03c3f36748c92d803349e22a7ee1a633
56 lines
1.7 KiB
Plaintext
56 lines
1.7 KiB
Plaintext
Listen %PUBLICPORT%
|
|
Listen %ADMINPORT%
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" keystone_combined
|
|
|
|
<Directory %KEYSTONE_BIN%>
|
|
Require all granted
|
|
</Directory>
|
|
|
|
<VirtualHost *:%PUBLICPORT%>
|
|
WSGIDaemonProcess keystone-public processes=5 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV%
|
|
WSGIProcessGroup keystone-public
|
|
WSGIScriptAlias / %KEYSTONE_BIN%/keystone-wsgi-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
ErrorLogFormat "%M"
|
|
ErrorLog /var/log/%APACHE_NAME%/keystone.log
|
|
CustomLog /var/log/%APACHE_NAME%/keystone_access.log keystone_combined
|
|
%SSLENGINE%
|
|
%SSLCERTFILE%
|
|
%SSLKEYFILE%
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:%ADMINPORT%>
|
|
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV%
|
|
WSGIProcessGroup keystone-admin
|
|
WSGIScriptAlias / %KEYSTONE_BIN%/keystone-wsgi-admin
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
ErrorLogFormat "%M"
|
|
ErrorLog /var/log/%APACHE_NAME%/keystone.log
|
|
CustomLog /var/log/%APACHE_NAME%/keystone_access.log keystone_combined
|
|
%SSLENGINE%
|
|
%SSLCERTFILE%
|
|
%SSLKEYFILE%
|
|
</VirtualHost>
|
|
|
|
Alias /identity %KEYSTONE_BIN%/keystone-wsgi-public
|
|
<Location /identity>
|
|
SetHandler wsgi-script
|
|
Options +ExecCGI
|
|
|
|
WSGIProcessGroup keystone-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
</Location>
|
|
|
|
Alias /identity_v2_admin %KEYSTONE_BIN%/keystone-wsgi-admin
|
|
<Location /identity_v2_admin>
|
|
SetHandler wsgi-script
|
|
Options +ExecCGI
|
|
|
|
WSGIProcessGroup keystone-admin
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
</Location>
|