keystone/httpd/wsgi-keystone.conf
Alan Pevec 0058b6e64f Run WSGI with group=keystone
This matches puppet-keystone[*] and is required for distributions
which properly restricted access to /etc/keystone

[*] https://github.com/stackforge/puppet-keystone/blob/master/manifests/wsgi/apache.pp#L167

Closes-Bug: #1456441

Change-Id: I7a80bdf1c1efaedfeba7d2834a858e3617f6529e
2015-06-03 19:29:08 +00:00

29 lines
981 B
Plaintext

Listen 5000
Listen 35357
<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /var/www/cgi-bin/keystone/main
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{cu}t %M"
</IfVersion>
ErrorLog /var/log/apache2/keystone.log
CustomLog /var/log/apache2/keystone_access.log combined
</VirtualHost>
<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{cu}t %M"
</IfVersion>
ErrorLog /var/log/apache2/keystone.log
CustomLog /var/log/apache2/keystone_access.log combined
</VirtualHost>