)]}'
{"doc/install-guide/section_keystone-install.xml":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"b7164779517982db7ca1f00ed09d04f19aa098e4","unresolved":false,"context_lines":[{"line_number":374,"context_line":"      \u003cscreen os\u003d\"ubuntu\"\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown -R keystone:keystone /var/www/cgi-bin/keystone\u003c/userinput\u003e"},{"line_number":375,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /var/www/cgi-bin/keystone/*\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":376,"context_line":"      \u003cscreen os\u003d\"opensuse;sles\"\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown -R keystone:keystone /srv/www/cgi-bin/keystone\u003c/userinput\u003e"},{"line_number":377,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /etc/keystone/keystone.conf\u003c/userinput\u003e"},{"line_number":378,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /srv/www/cgi-bin/keystone/*\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":379,"context_line":"    \u003c/step\u003e"},{"line_number":380,"context_line":"  \u003c/procedure\u003e"}],"source_content_type":"application/xml","patch_set":2,"id":"3acd31a7_46ffb401","line":377,"updated":"2015-04-29 19:46:17.000000000","message":"644 should be sufficient here. Anyway I think it is better to add the apache user into the keystone group to not make the keystone.conf file world-readable. At least the database secret is stored in the keystone.conf file.","commit_id":"f83d454a72eba11f88ec04a94abf765bb9b46627"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"49498422c28378edd5d236b20ae508f17cdbd13a","unresolved":false,"context_lines":[{"line_number":374,"context_line":"      \u003cscreen os\u003d\"ubuntu\"\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown -R keystone:keystone /var/www/cgi-bin/keystone\u003c/userinput\u003e"},{"line_number":375,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /var/www/cgi-bin/keystone/*\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":376,"context_line":"      \u003cscreen os\u003d\"opensuse;sles\"\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown -R keystone:keystone /srv/www/cgi-bin/keystone\u003c/userinput\u003e"},{"line_number":377,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /etc/keystone/keystone.conf\u003c/userinput\u003e"},{"line_number":378,"context_line":"\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echmod 755 /srv/www/cgi-bin/keystone/*\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":379,"context_line":"    \u003c/step\u003e"},{"line_number":380,"context_line":"  \u003c/procedure\u003e"}],"source_content_type":"application/xml","patch_set":2,"id":"3acd31a7_9c93d0fa","line":377,"in_reply_to":"3acd31a7_46ffb401","updated":"2015-04-30 06:11:38.000000000","message":"Testing this, I noticed that the file had root as owner and wsgi runs as user keystone, so changing ownership to keystone is the better solution here.","commit_id":"f83d454a72eba11f88ec04a94abf765bb9b46627"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"f36f95e7b9932d058787632ebd7e4fd4562eba71","unresolved":false,"context_lines":[{"line_number":408,"context_line":"      \u003cpara\u003e"},{"line_number":409,"context_line":"        Change the ownership of"},{"line_number":410,"context_line":"        \u003cfilename\u003e/etc/keystone/keystone.conf\u003c/filename\u003e to give the"},{"line_number":411,"context_line":"        \u003cliteral\u003ekeystone\u003c/literal\u003e system access to it:"},{"line_number":412,"context_line":"      \u003c/para\u003e"},{"line_number":413,"context_line":"      \u003cscreen\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown keystone /etc/keystone/keystone.conf\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":414,"context_line":"    \u003c/step\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"3acd31a7_bbd8cf1e","line":411,"updated":"2015-04-30 08:26:30.000000000","message":"This does not makes sense to me. It should already be possible for the keystone service to access the keystone.conf configuration file?","commit_id":"16555650374f8e01c26c5fd0f77a511b2c299c2d"},{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"f85115ae6743124ae7f2273f08a09e7edd24fa7f","unresolved":false,"context_lines":[{"line_number":408,"context_line":"      \u003cpara\u003e"},{"line_number":409,"context_line":"        Change the ownership of"},{"line_number":410,"context_line":"        \u003cfilename\u003e/etc/keystone/keystone.conf\u003c/filename\u003e to give the"},{"line_number":411,"context_line":"        \u003cliteral\u003ekeystone\u003c/literal\u003e system access to it:"},{"line_number":412,"context_line":"      \u003c/para\u003e"},{"line_number":413,"context_line":"      \u003cscreen\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown keystone /etc/keystone/keystone.conf\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":414,"context_line":"    \u003c/step\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"3acd31a7_f54beb29","line":411,"in_reply_to":"3acd31a7_b56213d7","updated":"2015-04-30 12:08:04.000000000","message":"I thought that the keystone.conf configuration file is already owned by the user keystone because the keystone process should be started as user keystone. Is this not the case for the SUSE packages?","commit_id":"16555650374f8e01c26c5fd0f77a511b2c299c2d"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"261394279d0b94bfd2b1fde017de28b2b0ce8fd8","unresolved":false,"context_lines":[{"line_number":408,"context_line":"      \u003cpara\u003e"},{"line_number":409,"context_line":"        Change the ownership of"},{"line_number":410,"context_line":"        \u003cfilename\u003e/etc/keystone/keystone.conf\u003c/filename\u003e to give the"},{"line_number":411,"context_line":"        \u003cliteral\u003ekeystone\u003c/literal\u003e system access to it:"},{"line_number":412,"context_line":"      \u003c/para\u003e"},{"line_number":413,"context_line":"      \u003cscreen\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown keystone /etc/keystone/keystone.conf\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":414,"context_line":"    \u003c/step\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"3acd31a7_b56213d7","line":411,"in_reply_to":"3acd31a7_bbd8cf1e","updated":"2015-04-30 12:03:17.000000000","message":"The WSGI process runs with user \"keystone\" and group \"www\". I\u0027m not seeing how we get this together otherwise.","commit_id":"16555650374f8e01c26c5fd0f77a511b2c299c2d"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"24b19ba18e09100b5cc5f476674bf1ddce43989e","unresolved":false,"context_lines":[{"line_number":408,"context_line":"      \u003cpara\u003e"},{"line_number":409,"context_line":"        Change the ownership of"},{"line_number":410,"context_line":"        \u003cfilename\u003e/etc/keystone/keystone.conf\u003c/filename\u003e to give the"},{"line_number":411,"context_line":"        \u003cliteral\u003ekeystone\u003c/literal\u003e system access to it:"},{"line_number":412,"context_line":"      \u003c/para\u003e"},{"line_number":413,"context_line":"      \u003cscreen\u003e\u003cprompt\u003e#\u003c/prompt\u003e \u003cuserinput\u003echown keystone /etc/keystone/keystone.conf\u003c/userinput\u003e\u003c/screen\u003e"},{"line_number":414,"context_line":"    \u003c/step\u003e"}],"source_content_type":"application/xml","patch_set":3,"id":"3acd31a7_151427f3","line":411,"in_reply_to":"3acd31a7_f54beb29","updated":"2015-04-30 12:09:37.000000000","message":"It\u0027s not the case, otherwise I wouldn\u0027t need to change it ;)","commit_id":"16555650374f8e01c26c5fd0f77a511b2c299c2d"}]}