Rails：将雾（回形针）与Bluemix Object Storage v2一起使用

Question

我正在尝试使用Bluemix Object Storage来存储一些用户内容（图像）。 它运行Openstack Swift。

根据bluemix指南，它在未绑定的上下文中支持Keystone V2认证，在绑定的上下文中支持Keystone v3。 由于我的主应用程序不在同一Bluemix环境中，所以我更喜欢使用unbound，但也可以通过虚拟应用程序使用bind。

根据有关Fog gem和fog源代码的一些发行说明，两种auth方法均受支持。 我正在使用Fog 1.31.0。

使用unbound方法，在创建Bluemix服务之后，我获得了以下凭证。 出于隐私原因，所有值均略有更改。

{
  "credentials": {
    "auth_url": "https://identity.open.softlayer.com",
    "project": "object_storage_af31119c",
    "projectId": "82e592b46bb84232370f9657fec2b576",
    "region": "dallas",
    "userId": "02faa40ff3f342faaafdty1a75bd901a",
    "username": "user_28uigjab0a2ef799eb5280c786a2ff503c978aaf",
    "password": "V3i~]oYU8/UMNvVm",
    "domainId": "3f160e53e6114a748a34724005a458ea",
    "domainName": "779543"
  }
} 

fog openstack文档包含以下配置示例：

  service = Fog::Storage.new({
  :provider            => 'OpenStack',   # OpenStack Fog provider
  :openstack_username  => USERNAME,      # Your OpenStack Username
  :openstack_api_key   => PASSWORD,      # Your OpenStack Password
  :openstack_auth_url  => 'http://YOUR_OPENSTACK_ENDPOINT:PORT/v2.0/tokens'
})

我填写了凭据，并使用https://identity.open.softlayer.com/v2.0/tokens作为auth_url。 这是我得到的错误：

Uncaught exception: Expected([200, 204]) <=> Actual(401 Unauthorized)
excon.error.response
:body => "{\"error\": {\"message\": \"The request you have made requires 
authentication.\", \"code\": 401, \"title\": \"Unauthorized \"}}"

:headers => {
"Content-Length" => "114"
"Content-Type"   => "application/json"
"Date"           => "Fri, 06 Nov 2015 15:08:55 GMT"
"Server"         => "Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_wsgi/3.4 Python/2.7.5"
"Vary"           => "X-Auth-Token"
"WWW-Authenticate"       => "Keystone uri=\"https://identity.open.softlayer.com\""
"x-openstack-request-id" => "req-2f68188e-2a9e-45ad-ae18-289ac88b78ae" }
:local_address => "10.0.2.15"
:local_port    => 59407
:reason_phrase => "Unauthorized"
:remote_ip     => "198.23.119.11"
:status        => 401
:status_line   => "HTTP/1.1 401 Unauthorized\r\n"

/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/excon-0.45.3/lib/excon/middlewares/expects.rb:10:in `response_call'
/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/excon-0.45.3/lib/excon/middlewares/response_parser.rb:8:in `response_call'
/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/excon-0.45.3/lib/excon/connection.rb:372:in `response'
/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/excon-0.45.3/lib/excon/connection.rb:236:in `request'
/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/fog-core-1.31.1/lib/fog/core/connection.rb:81:in `request'
/home/startupdeltadev/.rbenv/versions/1.9.3-p551/lib/ruby/gems/1.9.1/gems/fog-1.31.0/lib/fog/openstack/core.rb:331:in `retrieve_tokens_v2'

显然，我的凭据未正确发送。 有什么提示吗？

Answer 1

您的Openstack用户属于“ 779543”域。 身份（Keystone）v3 API支持域。 我找不到任何有关如何将Keystone v3与Fog一起使用的好例子。

Answer 2

根据文档Bluemix OpenStack Swift

OpenStack身份验证（Keystone）v2

v2令牌请求是对https://identity.open.softlayer.com/v2.0/tokens的POST请求，如以下curl命令所示：

curl -i \
-H "Content-Type: application/json" \
-d '
{
    "auth": {
      "tenantId": "0f47b41b06d047f9aae3b33f1db061ed",
      "passwordCredentials": {
        "userId": "ad78b2a3f843466988afd077731c61fc",
        "password": "K/jyIi2jR=1?D.TP "
    }
}
}' \
https://identity.open.softlayer.com/v2.0/tokens ; echo

注意：此请求方法未在OpenStack Identity v2网站上记录。 您不能使用tenantName和username 。

Fog :: OpenStack（和许多其他库）使用用户名而不是userId

您应通过以下方式使用OpenStack身份验证（Keystone）v3 ：

storage = Fog::OpenStack.new({
  :provider                 => 'OpenStack',
  :openstack_auth_url       => credentials['auth_url'],
  :openstack_api_key        => credentials['password'],
  :openstack_project_id     => credentials['projectId'],        
  :openstack_username       => credentials['username'],
  :openstack_domain_name    => credentials['domainName'],#required if you use :openstack_username (otherwise set :openstack_userid)
  :openstack_region         => credentials['region']
})