2ad1a42ca6
Devstack was setting up a separate directory and copying http/keystone.py into it for the admin and public endpoints. Keystone now defines wsgi_scripts entrypoints so that keystone-wsgi-admin and keystone-wsgi-public are created on install so devstack can reference these files instead. See http://httpd.apache.org/docs/2.4/upgrading.html#access for the apache docs with examples for the Allow|Deny/Require directives. Depends-On: Ic9c03e6c00408f3698c10012ca98cfc6ea9b6ace Change-Id: Ided688be62b64066d90776313c963ec5016363f2
76 lines
2.1 KiB
Plaintext
76 lines
2.1 KiB
Plaintext
Listen %PUBLICPORT%
|
|
Listen %ADMINPORT%
|
|
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\" %D(us)" keystone_combined
|
|
|
|
<VirtualHost *:%PUBLICPORT%>
|
|
WSGIDaemonProcess keystone-public processes=5 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV%
|
|
WSGIProcessGroup keystone-public
|
|
WSGIScriptAlias / %KEYSTONE_BIN%/keystone-wsgi-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
<IfVersion >= 2.4>
|
|
ErrorLogFormat "%{cu}t %M"
|
|
</IfVersion>
|
|
ErrorLog /var/log/%APACHE_NAME%/keystone.log
|
|
CustomLog /var/log/%APACHE_NAME%/keystone_access.log keystone_combined
|
|
%SSLENGINE%
|
|
%SSLCERTFILE%
|
|
%SSLKEYFILE%
|
|
|
|
<Directory %KEYSTONE_BIN%>
|
|
<IfVersion >= 2.4>
|
|
Require all granted
|
|
</IfVersion>
|
|
<IfVersion < 2.4>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfVersion>
|
|
</Directory>
|
|
</VirtualHost>
|
|
|
|
<VirtualHost *:%ADMINPORT%>
|
|
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=%USER% display-name=%{GROUP} %VIRTUALENV%
|
|
WSGIProcessGroup keystone-admin
|
|
WSGIScriptAlias / %KEYSTONE_BIN%/keystone-wsgi-admin
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
<IfVersion >= 2.4>
|
|
ErrorLogFormat "%{cu}t %M"
|
|
</IfVersion>
|
|
ErrorLog /var/log/%APACHE_NAME%/keystone.log
|
|
CustomLog /var/log/%APACHE_NAME%/keystone_access.log keystone_combined
|
|
%SSLENGINE%
|
|
%SSLCERTFILE%
|
|
%SSLKEYFILE%
|
|
|
|
<Directory %KEYSTONE_BIN%>
|
|
<IfVersion >= 2.4>
|
|
Require all granted
|
|
</IfVersion>
|
|
<IfVersion < 2.4>
|
|
Order allow,deny
|
|
Allow from all
|
|
</IfVersion>
|
|
</Directory>
|
|
</VirtualHost>
|
|
|
|
Alias /identity %PUBLICWSGI%
|
|
<Location /identity>
|
|
SetHandler wsgi-script
|
|
Options +ExecCGI
|
|
|
|
WSGIProcessGroup keystone-public
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
</Location>
|
|
|
|
Alias /identity_admin %ADMINWSGI%
|
|
<Location /identity_admin>
|
|
SetHandler wsgi-script
|
|
Options +ExecCGI
|
|
|
|
WSGIProcessGroup keystone-admin
|
|
WSGIApplicationGroup %{GLOBAL}
|
|
WSGIPassAuthorization On
|
|
</Location>
|