lp:~blamar/nova/lp732866

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~hudson-openstack/nova/trunk at revision 807

Rick Harris (community): Approve on 2011-03-15

Jay Pipes (community): Approve on 2011-03-15

justinsb (community): Approve on 2011-03-15

Brian Waldon (community): Approve on 2011-03-15

Diff: 168 lines (+44/-25)

3 files modified

nova/api/openstack/auth.py (+5/-1)
nova/tests/api/openstack/fakes.py (+4/-1)
nova/tests/api/openstack/test_auth.py (+35/-23)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #732866: OpenStack API authentication information leakage

High

Fix Released

Link a bug report

Related blueprints

792. By Brian Lamar on 2011-03-11

Removed EOL whitespace in accordance with PEP-8.

791. By Brian Lamar on 2011-03-11

Fixed lp732866 by catching relevant `exception.NotFound` exception. Tests did not uncover this vulnerability due to "incorrect" FakeAuthManager. I say "incorrect" because potentially different implementations (LDAP or Database driven) of AuthManager might return different errors from `get_user_from_access_key`.

Also, removed all references to 'bacon', 'ham', 'herp', and 'derp' and replaced them with hopefully more helpful terms.

790. By Erica Windisch on 2011-03-11

Passes net variable as value of keyword argument process_input. Prior to the execvp patch, this was passed positionally.

789. By Ryan Lane on 2011-03-11

Changes the output of status in describe_volumes from showing the user as the owner of the volume to showing the project as the owner.

788. By Monsyne Dragon on 2011-03-11

Adds in multi-tenant support to openstack api.
Allows for multiple accounts (projects) with admin api for creating accounts & users.

787. By Dan Prince on 2011-03-11

Make linux_net ensure_bridge commands that add and remove ip addr's from
devices/bridges work with with the latest utils.execute method (execvp).

786. By Soren Hansen on 2011-03-10

Add a new IptablesManager that takes care of all uses of iptables.

Port all uses of iptables (in linux_net and libvirt_conn) over to use this new manager.

It wraps all uses of iptables so that each component can maintain its own set of rules without interfering with other components and/or existing system rules.

iptables-restore is an atomic interface to netfilter in the kernel. This means we can make a bunch of changes at a time, minimising the number of calls to iptables.

785. By Ken Pepple on 2011-03-10

initializing instance power state on launch to 0 (fixes EC2 API bug)

784. By Soren Hansen on 2011-03-10

Another little bit of fallout from the execvp branch.

783. By Soren Hansen on 2011-03-10

Fix a few things that were either missed in the execvp conversion or stuff that was merged after it, but wasn't updated accordingly.