)]}'
{"security-guide/source/introduction/introduction-to-openstack.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"a8f2b232d7021f9dac16d65cebefb3a942c16f25","unresolved":false,"context_lines":[{"line_number":154,"context_line":"Shared File Systems"},{"line_number":155,"context_line":"-------------------"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"The Shared File Systems (manila) service provides a set of services for"},{"line_number":158,"context_line":"management of shared file systems in a multi-tenant cloud environment, similar"},{"line_number":159,"context_line":"to how OpenStack provides for block-based storage management through the"},{"line_number":160,"context_line":"OpenStack Block Storage service project. With the Shared File Systems service,"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_120a3dd3","line":157,"updated":"2015-10-27 13:25:11.000000000","message":"Shared File Systems service (manila)","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"01938befc49bde5836672353be2738126d58c070","unresolved":false,"context_lines":[{"line_number":154,"context_line":"Shared File Systems"},{"line_number":155,"context_line":"-------------------"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"The Shared File Systems (manila) service provides a set of services for"},{"line_number":158,"context_line":"management of shared file systems in a multi-tenant cloud environment, similar"},{"line_number":159,"context_line":"to how OpenStack provides for block-based storage management through the"},{"line_number":160,"context_line":"OpenStack Block Storage service project. With the Shared File Systems service,"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_529c3569","line":157,"in_reply_to":"1a26ad4f_120a3dd3","updated":"2015-10-27 13:28:56.000000000","message":"Done","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"}],"security-guide/source/shared-file-systems.rst":[{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"0de04eb31262050d9598085118cc2f70bf94f54a","unresolved":false,"context_lines":[{"line_number":10,"context_line":"read and write data from your instances to and from your file system."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"It is valuable, because for certain applications, file-based storage"},{"line_number":13,"context_line":"has significant advantages over block storage and object storage. Also,"},{"line_number":14,"context_line":"a large amount of existing software is designed around file-based"},{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_36e4b439","line":13,"updated":"2015-10-07 13:14:00.000000000","message":"It is just used in different cases. It can not cover all use cases for Block and Object storages. So, I think, statement \"... has significant advantages over ...\" should be rewritten/removed.","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":10,"context_line":"read and write data from your instances to and from your file system."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"It is valuable, because for certain applications, file-based storage"},{"line_number":13,"context_line":"has significant advantages over block storage and object storage. Also,"},{"line_number":14,"context_line":"a large amount of existing software is designed around file-based"},{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_37b24707","line":13,"in_reply_to":"7a2fa921_36e4b439","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"0de04eb31262050d9598085118cc2f70bf94f54a","unresolved":false,"context_lines":[{"line_number":14,"context_line":"a large amount of existing software is designed around file-based"},{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"In some sense, Manila is similar to the Amazon Elastic File System (EFS)"},{"line_number":18,"context_line":"offering."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":".. toctree::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_f6307ca0","line":17,"updated":"2015-10-07 13:14:00.000000000","message":"Better to say that Manila serves same purpose as Amazon Elastic File System (EFS) does.","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":14,"context_line":"a large amount of existing software is designed around file-based"},{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"In some sense, Manila is similar to the Amazon Elastic File System (EFS)"},{"line_number":18,"context_line":"offering."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":".. toctree::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_3c1d75bd","line":17,"in_reply_to":"7a2fa921_f6307ca0","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"47aa6dcdb1ec6050806941cf4b9c3196cdc630ff","unresolved":false,"context_lines":[{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"In some sense, Manila is similar to the Amazon Elastic File System (EFS)"},{"line_number":18,"context_line":"offering."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":".. toctree::"},{"line_number":21,"context_line":"   :maxdepth: 2"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_3655941c","line":18,"updated":"2015-10-07 13:20:53.000000000","message":"Don\u0027t use Manila this way. We speak always about the Service name.","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":15,"context_line":"storage."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"In some sense, Manila is similar to the Amazon Elastic File System (EFS)"},{"line_number":18,"context_line":"offering."},{"line_number":19,"context_line":""},{"line_number":20,"context_line":".. toctree::"},{"line_number":21,"context_line":"   :maxdepth: 2"}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_f7d04f21","line":18,"in_reply_to":"7a2fa921_3655941c","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Shared File Systems"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"The Shared File Systems Storage service provides a set of services for"},{"line_number":6,"context_line":"management of shared file systems in a multi-tenant cloud environment, similar"},{"line_number":7,"context_line":"to how OpenStack provides for block-based storage management through the"},{"line_number":8,"context_line":"OpenStack Block Storage service project. With the Shared File Systems service,"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_a993bef9","line":5,"updated":"2015-10-19 14:35:26.000000000","message":"Shared File Systems service as defined in governance repository.","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Shared File Systems"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"The Shared File Systems Storage service provides a set of services for"},{"line_number":6,"context_line":"management of shared file systems in a multi-tenant cloud environment, similar"},{"line_number":7,"context_line":"to how OpenStack provides for block-based storage management through the"},{"line_number":8,"context_line":"OpenStack Block Storage service project. With the Shared File Systems service,"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_10f3ee9f","line":5,"in_reply_to":"3a29b11f_a993bef9","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"The Shared File Systems Storage serves the same purpose as the Amazon"},{"line_number":19,"context_line":"Elastic File System (EFS) offering does."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":".. toctree::"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_49722ae7","line":18,"updated":"2015-10-19 14:35:26.000000000","message":"Shared File System service serves...","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"The Shared File Systems Storage serves the same purpose as the Amazon"},{"line_number":19,"context_line":"Elastic File System (EFS) offering does."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":".. toctree::"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_30470abd","line":18,"in_reply_to":"3a29b11f_49722ae7","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"A large amount of existing software is designed around file-based storage. The"},{"line_number":13,"context_line":"Shared File Systems service provides the management of file shares for example,"},{"line_number":14,"context_line":"NFS and CIFS as a core service to OpenStack and currently works with NetApp,"},{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_d87f42de","line":14,"updated":"2015-10-22 12:47:05.000000000","message":"This is not full list of supported storage providers. Not fair to mention only part of them.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"A large amount of existing software is designed around file-based storage. The"},{"line_number":13,"context_line":"Shared File Systems service provides the management of file shares for example,"},{"line_number":14,"context_line":"NFS and CIFS as a core service to OpenStack and currently works with NetApp,"},{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_6528bf33","line":14,"in_reply_to":"3a29b11f_015d4646","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"3b81e63ae1eb5aa4a3922ed532ffafd1c76f3b54","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"A large amount of existing software is designed around file-based storage. The"},{"line_number":13,"context_line":"Shared File Systems service provides the management of file shares for example,"},{"line_number":14,"context_line":"NFS and CIFS as a core service to OpenStack and currently works with NetApp,"},{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_015d4646","line":14,"in_reply_to":"3a29b11f_d87f42de","updated":"2015-10-22 12:56:34.000000000","message":"And I argue that this should not be a list at all - security guide is slownly changing, we cannot have a complete list here.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"A large amount of existing software is designed around file-based storage. The"},{"line_number":13,"context_line":"Shared File Systems service provides the management of file shares for example,"},{"line_number":14,"context_line":"NFS and CIFS as a core service to OpenStack and currently works with NetApp,"},{"line_number":15,"context_line":"Red Hat storage (GlusterFS) and EMC VNX, as well as on a base Linux NFS or"},{"line_number":16,"context_line":"Samba server."},{"line_number":17,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_45258359","line":14,"in_reply_to":"3a29b11f_d87f42de","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Shared File Systems"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"The Shared File Systems service provides a set of services for management of"},{"line_number":6,"context_line":"shared file systems in a multi-tenant cloud environment, similar to how"},{"line_number":7,"context_line":"OpenStack provides for block-based storage management through the OpenStack"},{"line_number":8,"context_line":"Block Storage service project. With the Shared File Systems service, you can"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_7edc9e74","line":5,"updated":"2015-10-23 18:42:30.000000000","message":"The Shared File Systems (manila)","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Shared File Systems"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"The Shared File Systems service provides a set of services for management of"},{"line_number":6,"context_line":"shared file systems in a multi-tenant cloud environment, similar to how"},{"line_number":7,"context_line":"OpenStack provides for block-based storage management through the OpenStack"},{"line_number":8,"context_line":"Block Storage service project. With the Shared File Systems service, you can"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_42af6794","line":5,"in_reply_to":"3a29b11f_7edc9e74","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"}],"security-guide/source/shared-file-systems/checklist.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":".. _check_shared_fs_03:"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"Check-Shared-FS-03: Is Keystone used for authentication?"},{"line_number":75,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"OpenStack supports various authentication strategies like noauth, keystone etc."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_1b78e6c3","line":74,"updated":"2015-10-19 19:03:45.000000000","message":"Keystone -\u003e OpenStack Identity.","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":71,"context_line":""},{"line_number":72,"context_line":".. _check_shared_fs_03:"},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"Check-Shared-FS-03: Is Keystone used for authentication?"},{"line_number":75,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"OpenStack supports various authentication strategies like noauth, keystone etc."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_189c50bf","line":74,"in_reply_to":"3a29b11f_1b78e6c3","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":74,"context_line":"Check-Shared-FS-03: Is Keystone used for authentication?"},{"line_number":75,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"OpenStack supports various authentication strategies like noauth, keystone etc."},{"line_number":78,"context_line":"If the \u0027``noauth``\u0027 strategy is used then the users could interact with"},{"line_number":79,"context_line":"OpenStack services without any authentication. This could be a potential risk"},{"line_number":80,"context_line":"since an attacker might gain unauthorized access to the OpenStack components."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_9b4ab682","line":77,"updated":"2015-10-19 19:03:45.000000000","message":"Don\u0027t use etc., see conventions page for details.","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":74,"context_line":"Check-Shared-FS-03: Is Keystone used for authentication?"},{"line_number":75,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"OpenStack supports various authentication strategies like noauth, keystone etc."},{"line_number":78,"context_line":"If the \u0027``noauth``\u0027 strategy is used then the users could interact with"},{"line_number":79,"context_line":"OpenStack services without any authentication. This could be a potential risk"},{"line_number":80,"context_line":"since an attacker might gain unauthorized access to the OpenStack components."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_f87f1464","line":77,"in_reply_to":"3a29b11f_9b4ab682","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":93,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"OpenStack components communicate with each other using various protocols and"},{"line_number":96,"context_line":"the communication might involve sensitive / confidential data. An attacker may"},{"line_number":97,"context_line":"try to eavesdrop on the channel in order to get access to sensitive"},{"line_number":98,"context_line":"information. Thus all the components must communicate with each other using a"},{"line_number":99,"context_line":"secured communication protocol."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_3b5cc24a","line":96,"updated":"2015-10-19 19:03:45.000000000","message":"replace \"/\" with \"or\"","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":93,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":94,"context_line":""},{"line_number":95,"context_line":"OpenStack components communicate with each other using various protocols and"},{"line_number":96,"context_line":"the communication might involve sensitive / confidential data. An attacker may"},{"line_number":97,"context_line":"try to eavesdrop on the channel in order to get access to sensitive"},{"line_number":98,"context_line":"information. Thus all the components must communicate with each other using a"},{"line_number":99,"context_line":"secured communication protocol."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_b8c0bc7d","line":96,"in_reply_to":"3a29b11f_3b5cc24a","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":116,"context_line":""},{"line_number":117,"context_line":".. _check_shared_fs_05:"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"Check-Shared-FS-05: Does Manila communicates with Nova over TLS?"},{"line_number":120,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"OpenStack components communicate with each other using various protocols and"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_bb369201","line":119,"updated":"2015-10-19 19:03:45.000000000","message":"Manila -\u003e Shared ..., Nova -\u003e Compute","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":116,"context_line":""},{"line_number":117,"context_line":".. _check_shared_fs_05:"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":"Check-Shared-FS-05: Does Manila communicates with Nova over TLS?"},{"line_number":120,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"OpenStack components communicate with each other using various protocols and"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_f8e074fc","line":119,"in_reply_to":"3a29b11f_bb369201","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":".. _check_shared_fs_06:"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Check-Shared-FS-06: Does Manila communicates with Neutron over TLS?"},{"line_number":137,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"Similar to previous check (:ref:`check_shared_fs_05`), it is recommended"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_1b26a6ce","line":136,"updated":"2015-10-19 19:03:45.000000000","message":"Manila -\u003e Shared..., Neutron -\u003e Networking","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":133,"context_line":""},{"line_number":134,"context_line":".. _check_shared_fs_06:"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"Check-Shared-FS-06: Does Manila communicates with Neutron over TLS?"},{"line_number":137,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":138,"context_line":""},{"line_number":139,"context_line":"Similar to previous check (:ref:`check_shared_fs_05`), it is recommended"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_f8ae3497","line":136,"in_reply_to":"3a29b11f_1b26a6ce","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":".. _check_shared_fs_07:"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Check-Shared-FS-07: Does Manila communicates with Cinder over TLS?"},{"line_number":152,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"Similar to previous check (:ref:`check_shared_fs_05`), it is recommended"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_db2fce9f","line":151,"updated":"2015-10-19 19:03:45.000000000","message":"Likewise","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":148,"context_line":""},{"line_number":149,"context_line":".. _check_shared_fs_07:"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":"Check-Shared-FS-07: Does Manila communicates with Cinder over TLS?"},{"line_number":152,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":153,"context_line":""},{"line_number":154,"context_line":"Similar to previous check (:ref:`check_shared_fs_05`), it is recommended"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_b8cd1c5f","line":151,"in_reply_to":"3a29b11f_db2fce9f","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":52,"context_line":""},{"line_number":53,"context_line":"**Pass:** If permissions are set to 640 or stricter. The permissions of 640"},{"line_number":54,"context_line":"translates into owner r/w, group r, and no rights to others i.e. \"u\u003drw,g\u003dr,o\u003d\"."},{"line_number":55,"context_line":"Note that with :ref:`check_shared_fs_01` and permissions set to 640, root has"},{"line_number":56,"context_line":"read/write access and manila has read access to these configuration files. The"},{"line_number":57,"context_line":"access rights can also be validated using the following command. This command"},{"line_number":58,"context_line":"will only be available on your system if it supports ACLs."}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_81887672","line":55,"updated":"2015-10-22 12:47:05.000000000","message":"Why root? user that is used for start of manila services should own config files.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":52,"context_line":""},{"line_number":53,"context_line":"**Pass:** If permissions are set to 640 or stricter. The permissions of 640"},{"line_number":54,"context_line":"translates into owner r/w, group r, and no rights to others i.e. \"u\u003drw,g\u003dr,o\u003d\"."},{"line_number":55,"context_line":"Note that with :ref:`check_shared_fs_01` and permissions set to 640, root has"},{"line_number":56,"context_line":"read/write access and manila has read access to these configuration files. The"},{"line_number":57,"context_line":"access rights can also be validated using the following command. This command"},{"line_number":58,"context_line":"will only be available on your system if it supports ACLs."}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_3ba42606","line":55,"in_reply_to":"3a29b11f_81887672","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":82,"context_line":"keystone using their service accounts."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"**Pass:** If value of parameter ``auth_strategy`` under ``[DEFAULT]`` section"},{"line_number":85,"context_line":"in :file:`/etc/manila/manila.conf` is set to ``keystone``."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"**Fail:** If value of parameter ``auth_strategy`` under ``[DEFAULT]`` section"},{"line_number":88,"context_line":"is set to ``noauth``."}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_01aea6e5","line":85,"updated":"2015-10-22 12:47:05.000000000","message":"This is not the only possible file location. Same below.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":82,"context_line":"keystone using their service accounts."},{"line_number":83,"context_line":""},{"line_number":84,"context_line":"**Pass:** If value of parameter ``auth_strategy`` under ``[DEFAULT]`` section"},{"line_number":85,"context_line":"in :file:`/etc/manila/manila.conf` is set to ``keystone``."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"**Fail:** If value of parameter ``auth_strategy`` under ``[DEFAULT]`` section"},{"line_number":88,"context_line":"is set to ``noauth``."}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_1bdcca71","line":85,"in_reply_to":"3a29b11f_01aea6e5","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":26,"context_line":"    $ stat -L -c \"%U %G\" /etc/manila/rootwrap.conf | egrep \"root root\""},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"**Pass:** If user and group ownership of all these config files is set"},{"line_number":29,"context_line":"to root. The above commands show output of the root ownership."},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"**Fail:** If the above commands does not return any output as the user"},{"line_number":32,"context_line":"and group ownership might have set to any user other than root."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_1ed48a45","line":29,"updated":"2015-10-23 18:42:30.000000000","message":"So manila runs as root? Or is there a manila service account that will need to read these?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":26,"context_line":"    $ stat -L -c \"%U %G\" /etc/manila/rootwrap.conf | egrep \"root root\""},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"**Pass:** If user and group ownership of all these config files is set"},{"line_number":29,"context_line":"to root. The above commands show output of the root ownership."},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"**Fail:** If the above commands does not return any output as the user"},{"line_number":32,"context_line":"and group ownership might have set to any user other than root."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_29aa4e86","line":29,"in_reply_to":"3a29b11f_1ed48a45","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":48,"context_line":"    $ stat -L -c \"%a\" /etc/manila/policy.json"},{"line_number":49,"context_line":"    $ stat -L -c \"%a\" /etc/manila/rootwrap.conf"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"**Pass:** If permissions are set to 644. The permissions of 644 translates into"},{"line_number":52,"context_line":"owner r/w, group r, and others r i.e. \"u\u003drw,g\u003dr,o\u003dr\". Note that with"},{"line_number":53,"context_line":":ref:`check_shared_fs_01` and permissions set to 644, root has read/write"},{"line_number":54,"context_line":"access, root group and others have read access to these configuration files."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_5eba020c","line":51,"updated":"2015-10-23 18:42:30.000000000","message":"644 indicates world readable - are there any sensitive fields in these files?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":48,"context_line":"    $ stat -L -c \"%a\" /etc/manila/policy.json"},{"line_number":49,"context_line":"    $ stat -L -c \"%a\" /etc/manila/rootwrap.conf"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"**Pass:** If permissions are set to 644. The permissions of 644 translates into"},{"line_number":52,"context_line":"owner r/w, group r, and others r i.e. \"u\u003drw,g\u003dr,o\u003dr\". Note that with"},{"line_number":53,"context_line":":ref:`check_shared_fs_01` and permissions set to 644, root has read/write"},{"line_number":54,"context_line":"access, root group and others have read access to these configuration files."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_e9c9b65b","line":51,"in_reply_to":"3a29b11f_5eba020c","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":65,"context_line":"    mask         r--"},{"line_number":66,"context_line":"    other        r--"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"**Fail:** If permissions are not set to 644."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":".. _check_shared_fs_03:"},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_3e6b8687","line":68,"updated":"2015-10-23 18:42:30.000000000","message":"Is 644 the ONLY value acceptable? Or should this be \"at most 644\" (or something else allowing for configuration-dependent flexibility)?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":65,"context_line":"    mask         r--"},{"line_number":66,"context_line":"    other        r--"},{"line_number":67,"context_line":""},{"line_number":68,"context_line":"**Fail:** If permissions are not set to 644."},{"line_number":69,"context_line":""},{"line_number":70,"context_line":".. _check_shared_fs_03:"},{"line_number":71,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_4986aa14","line":68,"in_reply_to":"3a29b11f_3e6b8687","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":165,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":166,"context_line":""},{"line_number":167,"context_line":"If the maximum body size per request is not defined, the attacker can craft an"},{"line_number":168,"context_line":"arbitrary osapi request of large size causing the service to crash and finally"},{"line_number":169,"context_line":"resulting in Denial Of Service attack. Assigning the maximum value ensures that"},{"line_number":170,"context_line":"any malicious oversized request gets blocked ensuring continued availability of"},{"line_number":171,"context_line":"the service."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_deae1298","line":168,"updated":"2015-10-23 18:42:30.000000000","message":"OSAPI","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":165,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":166,"context_line":""},{"line_number":167,"context_line":"If the maximum body size per request is not defined, the attacker can craft an"},{"line_number":168,"context_line":"arbitrary osapi request of large size causing the service to crash and finally"},{"line_number":169,"context_line":"resulting in Denial Of Service attack. Assigning the maximum value ensures that"},{"line_number":170,"context_line":"any malicious oversized request gets blocked ensuring continued availability of"},{"line_number":171,"context_line":"the service."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_a2751b33","line":168,"in_reply_to":"3a29b11f_deae1298","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"}],"security-guide/source/shared-file-systems/intro.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"Introduction"},{"line_number":4,"context_line":"------------"},{"line_number":5,"context_line":"The Shared File Systems Storage service (manila) is intended to be ran on a"},{"line_number":6,"context_line":"single-node or across multiple nodes. The Shared File Systems service consists"},{"line_number":7,"context_line":"of three main services, which are similar to those of the Block Storage"},{"line_number":8,"context_line":"service:"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_095c324a","line":5,"updated":"2015-10-19 14:35:26.000000000","message":"Without Storage - please check all occurences","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"Introduction"},{"line_number":4,"context_line":"------------"},{"line_number":5,"context_line":"The Shared File Systems Storage service (manila) is intended to be ran on a"},{"line_number":6,"context_line":"single-node or across multiple nodes. The Shared File Systems service consists"},{"line_number":7,"context_line":"of three main services, which are similar to those of the Block Storage"},{"line_number":8,"context_line":"service:"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_13dc5811","line":5,"in_reply_to":"3a29b11f_095c324a","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":124,"context_line":""},{"line_number":125,"context_line":"General security information"},{"line_number":126,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":127,"context_line":"Since like all other OpenStack projects, the Shared File Systems is registered"},{"line_number":128,"context_line":"with the Identity service, you can find the API endpoints of the share service"},{"line_number":129,"context_line":"v1 and v2 using **manila endpoints** command:"},{"line_number":130,"context_line":""}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_64ff0b02","line":127,"updated":"2015-10-19 14:35:26.000000000","message":"Shared File Systems service is...","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":124,"context_line":""},{"line_number":125,"context_line":"General security information"},{"line_number":126,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":127,"context_line":"Since like all other OpenStack projects, the Shared File Systems is registered"},{"line_number":128,"context_line":"with the Identity service, you can find the API endpoints of the share service"},{"line_number":129,"context_line":"v1 and v2 using **manila endpoints** command:"},{"line_number":130,"context_line":""}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_7324ac0c","line":127,"in_reply_to":"3a29b11f_64ff0b02","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the Manilaclient."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_3b0a8227","line":34,"updated":"2015-10-19 19:03:45.000000000","message":"lowercase manilaclient","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the Manilaclient."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_182c5001","line":34,"in_reply_to":"3a29b11f_3b0a8227","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":38,"context_line":"        authenticates and routes requests throughout the Shared Filesystem"},{"line_number":39,"context_line":"        service. There is python-manilaclient to interact with the API."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"    Python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"},{"line_number":43,"context_line":"        via ``manila-api`` and also a Python module to interact"},{"line_number":44,"context_line":"        programmatically with Manila."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_d61d6367","line":41,"updated":"2015-10-19 19:03:45.000000000","message":"lowercase since that\u0027s the reponame","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":38,"context_line":"        authenticates and routes requests throughout the Shared Filesystem"},{"line_number":39,"context_line":"        service. There is python-manilaclient to interact with the API."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"    Python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"},{"line_number":43,"context_line":"        via ``manila-api`` and also a Python module to interact"},{"line_number":44,"context_line":"        programmatically with Manila."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_3864ac47","line":41,"in_reply_to":"3a29b11f_d61d6367","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":41,"context_line":"    Python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"},{"line_number":43,"context_line":"        via ``manila-api`` and also a Python module to interact"},{"line_number":44,"context_line":"        programmatically with Manila."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_76256fa9","line":44,"updated":"2015-10-19 19:03:45.000000000","message":"Manila -\u003e Shared...","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":41,"context_line":"    Python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"},{"line_number":43,"context_line":"        via ``manila-api`` and also a Python module to interact"},{"line_number":44,"context_line":"        programmatically with Manila."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_f85dd479","line":44,"in_reply_to":"3a29b11f_76256fa9","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":44,"context_line":"        programmatically with Manila."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_d63483df","line":47,"updated":"2015-10-19 19:03:45.000000000","message":"replace / with proper words","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":44,"context_line":"        programmatically with Manila."},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_d8125862","line":47,"in_reply_to":"3a29b11f_d63483df","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"    ``manila-scheduler``"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_b6522712","line":48,"updated":"2015-10-19 19:03:45.000000000","message":"Python","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users/projects/and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"    ``manila-scheduler``"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_18c8d021","line":48,"in_reply_to":"3a29b11f_b6522712","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"Introduction"},{"line_number":4,"context_line":"------------"},{"line_number":5,"context_line":"The Shared File Systems service (manila) is intended to be ran on a single-node"},{"line_number":6,"context_line":"or across multiple nodes. The Shared File Systems service consists of three"},{"line_number":7,"context_line":"main services, which are similar to those of the Block Storage service:"},{"line_number":8,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_01954685","line":5,"updated":"2015-10-22 12:47:05.000000000","message":"s/manila/Manila/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"3b81e63ae1eb5aa4a3922ed532ffafd1c76f3b54","unresolved":false,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"Introduction"},{"line_number":4,"context_line":"------------"},{"line_number":5,"context_line":"The Shared File Systems service (manila) is intended to be ran on a single-node"},{"line_number":6,"context_line":"or across multiple nodes. The Shared File Systems service consists of three"},{"line_number":7,"context_line":"main services, which are similar to those of the Block Storage service:"},{"line_number":8,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_413d7edb","line":5,"in_reply_to":"3a29b11f_01954685","updated":"2015-10-22 12:56:34.000000000","message":"Documentation conventions say \"manila\"","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"},{"line_number":38,"context_line":"        authenticates and routes requests throughout the Shared Filesystem"},{"line_number":39,"context_line":"        service. There is python-manilaclient to interact with the API."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"    python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_61d3da60","line":39,"updated":"2015-10-22 12:47:05.000000000","message":"Maybe better add links? Where one can take it?","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"},{"line_number":38,"context_line":"        authenticates and routes requests throughout the Shared Filesystem"},{"line_number":39,"context_line":"        service. There is python-manilaclient to interact with the API."},{"line_number":40,"context_line":""},{"line_number":41,"context_line":"    python-manilaclient"},{"line_number":42,"context_line":"        Command line interface to interact with the Shared File Systems service"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_7bb93ecb","line":39,"in_reply_to":"3a29b11f_61d3da60","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users, projects and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a Python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"    ``manila-scheduler``"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_01c3068a","line":48,"updated":"2015-10-22 12:47:05.000000000","message":"Manila doc should not describe what can do Auth Manager. It is up to doc of Auth manager. Better toadd link here.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    Auth manager"},{"line_number":47,"context_line":"        The component responsible for users, projects and roles. Can backend to"},{"line_number":48,"context_line":"        DB or LDAP. This is not a separate binary, but rather a Python class"},{"line_number":49,"context_line":"        that is used by most components in the system."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"    ``manila-scheduler``"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_5bd322d5","line":48,"in_reply_to":"3a29b11f_01c3068a","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":74,"context_line":"a variety of integration approaches with the network services that are"},{"line_number":75,"context_line":"available with OpenStack."},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"There are big number of the share drives created by different vendors. Each"},{"line_number":78,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":79,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":80,"context_line":"Here the back end is an instance of the manila-share service. For example, the"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_41281e33","line":77,"updated":"2015-10-22 12:47:05.000000000","message":"s/drives/drivers/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":74,"context_line":"a variety of integration approaches with the network services that are"},{"line_number":75,"context_line":"available with OpenStack."},{"line_number":76,"context_line":""},{"line_number":77,"context_line":"There are big number of the share drives created by different vendors. Each"},{"line_number":78,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":79,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":80,"context_line":"Here the back end is an instance of the manila-share service. For example, the"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_7bf13e6a","line":77,"in_reply_to":"3a29b11f_41281e33","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"5463e3b72aa00ea2229e2b270c8f53e34eba7694","unresolved":false,"context_lines":[{"line_number":103,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."},{"line_number":104,"context_line":"    html\u003e`_."},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"As administrator, you can create the share types that enables the scheduler to"},{"line_number":107,"context_line":"filter the back ends before you create a share. The share types have the extra"},{"line_number":108,"context_line":"specifications you can set in the type for scheduler to filter and weigh back"},{"line_number":109,"context_line":"ends and select an appropriate one for the user that requests the share"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_01946640","line":106,"updated":"2015-10-22 12:47:05.000000000","message":"s/enables/enable/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":103,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."},{"line_number":104,"context_line":"    html\u003e`_."},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"As administrator, you can create the share types that enables the scheduler to"},{"line_number":107,"context_line":"filter the back ends before you create a share. The share types have the extra"},{"line_number":108,"context_line":"specifications you can set in the type for scheduler to filter and weigh back"},{"line_number":109,"context_line":"ends and select an appropriate one for the user that requests the share"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_bbfb5646","line":106,"in_reply_to":"3a29b11f_01946640","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_3e9e2664","line":13,"updated":"2015-10-23 18:42:30.000000000","message":"Is this a MySQL db? PostGRE? Custom? The specific back-end should be called out.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f573cbe5","line":13,"in_reply_to":"3a29b11f_3e9e2664","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"},{"line_number":17,"context_line":"security is a concern, The Shared File Systems service will be moving towards"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_7167efea","line":14,"updated":"2015-10-23 18:42:30.000000000","message":"So manila is currently \u0027single tenant\u0027?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"},{"line_number":17,"context_line":"security is a concern, The Shared File Systems service will be moving towards"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b816aaef","line":14,"in_reply_to":"3a29b11f_7167efea","updated":"2015-10-26 14:24:21.000000000","message":"Manila is not \u0027single tenant\u0027. That depends on the driver, but manila interface allows to use multi tenant.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"},{"line_number":17,"context_line":"security is a concern, The Shared File Systems service will be moving towards"},{"line_number":18,"context_line":"multiple data stores with some kind of aggregation system. For more details on"},{"line_number":19,"context_line":"the API, see the `OpenStack Shared File Systems API \u003chttp://developer."},{"line_number":20,"context_line":"openstack.org/api-ref-share-v2.html\u003e`_ description. For mode details of the CLI"},{"line_number":21,"context_line":"using and configuring, see `Shared File Systems Cloud Administrative Guide"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b11ee75d","line":18,"updated":"2015-10-23 18:42:30.000000000","message":"These 5 sentences are very awkward. What is the threshold between a small and large deployment? I\u0027d like to see something more along the lines of:\n\n\"The Shared File Systems service uses a \u003cinsert_specific_db\u003e database by default, which is utilized by all of the Shared File Systems services in the deployment. For deployments over \u003cinsert_scale_metric_here\u003e, as well as deployments looking for additional security assurance, the Shared File Systems service is currently working towards a multi-tenant API and CLI.\"\n\nI\u0027m not too happy with that as the API/CLI shouldn\u0027t be featured, the back-end should be, but until we figure out what that is this will be sufficient.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":15,"context_line":"of the data fits into a sql database quite well. For small deployments this"},{"line_number":16,"context_line":"seems like an optimal solution. For larger deployments, and especially if"},{"line_number":17,"context_line":"security is a concern, The Shared File Systems service will be moving towards"},{"line_number":18,"context_line":"multiple data stores with some kind of aggregation system. For more details on"},{"line_number":19,"context_line":"the API, see the `OpenStack Shared File Systems API \u003chttp://developer."},{"line_number":20,"context_line":"openstack.org/api-ref-share-v2.html\u003e`_ description. For mode details of the CLI"},{"line_number":21,"context_line":"using and configuring, see `Shared File Systems Cloud Administrative Guide"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_33407b07","line":18,"in_reply_to":"3a29b11f_b11ee75d","updated":"2015-10-26 14:24:21.000000000","message":"By the large deployment, I meant the OpenStack deployment on a big number of nodes, when the services can run across multiple nodes and manila can use multiple data stores.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":19,"context_line":"the API, see the `OpenStack Shared File Systems API \u003chttp://developer."},{"line_number":20,"context_line":"openstack.org/api-ref-share-v2.html\u003e`_ description. For mode details of the CLI"},{"line_number":21,"context_line":"using and configuring, see `Shared File Systems Cloud Administrative Guide"},{"line_number":22,"context_line":"\u003chttp://docs.openstack.org/admin-guide-cloud/shared_file_systems.html\u003e`_."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Below is an explanation of the different components."},{"line_number":25,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_51b5132f","line":22,"updated":"2015-10-23 18:42:30.000000000","message":"Again, if possible, please highlight the back-end here.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"02390e5e237f7c359fc023158f2198c4ee89f69a","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":".. image:: ../figures/manila-intro.png"},{"line_number":27,"context_line":""},{"line_number":28,"context_line":".. glossary::"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"    DB"},{"line_number":31,"context_line":"        SQL database for data storage."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_3475e531","line":28,"updated":"2015-10-23 18:45:37.000000000","message":"Indeed - all manuals share the glossary in openstack-manuals and it\u0027s included here. No need for your own glossary here.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":".. image:: ../figures/manila-intro.png"},{"line_number":27,"context_line":""},{"line_number":28,"context_line":".. glossary::"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"    DB"},{"line_number":31,"context_line":"        SQL database for data storage."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_51e3d333","line":28,"updated":"2015-10-23 18:42:30.000000000","message":"Should these be added to the overall glossary instead of being here?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":".. image:: ../figures/manila-intro.png"},{"line_number":27,"context_line":""},{"line_number":28,"context_line":".. glossary::"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"    DB"},{"line_number":31,"context_line":"        SQL database for data storage."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_13921f58","line":28,"in_reply_to":"3a29b11f_3475e531","updated":"2015-10-26 14:24:21.000000000","message":"I had added the glossary of Manila service here: https://review.openstack.org/#/c/235834/.\nBut then I removed manilaclient, manila-scheduler, manila-share terms because of the comments. Instead of the glossary in the introduction I can provide a link to the terms and definitions in the developer documentation of Manila.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":28,"context_line":".. glossary::"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"    DB"},{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the manilaclient."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_d17fe364","line":31,"updated":"2015-10-23 18:42:30.000000000","message":"What kind of SQL?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":28,"context_line":".. glossary::"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"    DB"},{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the manilaclient."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b8730a15","line":31,"in_reply_to":"3a29b11f_d17fe364","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the manilaclient."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_9192cb9e","line":34,"updated":"2015-10-23 18:42:30.000000000","message":"API and is this the python-manilaclient? Or is another glossary entry needed here?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":31,"context_line":"        SQL database for data storage."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"    Web dashboard"},{"line_number":34,"context_line":"        External component that talks to the api through the manilaclient."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"    ``manila-api``"},{"line_number":37,"context_line":"        The service that provides a stable RESTful API. The service"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_29afae7e","line":34,"in_reply_to":"3a29b11f_9192cb9e","updated":"2015-10-26 14:24:21.000000000","message":"Removed a glossary.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":61,"context_line":"        back-end devices."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"    Storage controller"},{"line_number":64,"context_line":"        Typically a metal box with spinning disks, ethernet ports, and some"},{"line_number":65,"context_line":"        kind of software that allows network clients to read and write files on"},{"line_number":66,"context_line":"        the disks. There are also software-only storage controllers that run on"},{"line_number":67,"context_line":"        arbitrary hardware, clustered controllers which may run allow a"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f1ce9fb6","line":64,"updated":"2015-10-23 18:42:30.000000000","message":"So this does not include SSDs?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"d59620a9533de0c0cc8f7a62da6a3704733ca50b","unresolved":false,"context_lines":[{"line_number":61,"context_line":"        back-end devices."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"    Storage controller"},{"line_number":64,"context_line":"        Typically a metal box with spinning disks, ethernet ports, and some"},{"line_number":65,"context_line":"        kind of software that allows network clients to read and write files on"},{"line_number":66,"context_line":"        the disks. There are also software-only storage controllers that run on"},{"line_number":67,"context_line":"        arbitrary hardware, clustered controllers which may run allow a"}],"source_content_type":"text/x-rst","patch_set":17,"id":"1a26ad4f_88f623d6","line":64,"in_reply_to":"3a29b11f_f1ce9fb6","updated":"2015-10-27 11:32:33.000000000","message":"No, Storage controller does not include SSDs. Storage controller is just a logical node.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":61,"context_line":"        back-end devices."},{"line_number":62,"context_line":""},{"line_number":63,"context_line":"    Storage controller"},{"line_number":64,"context_line":"        Typically a metal box with spinning disks, ethernet ports, and some"},{"line_number":65,"context_line":"        kind of software that allows network clients to read and write files on"},{"line_number":66,"context_line":"        the disks. There are also software-only storage controllers that run on"},{"line_number":67,"context_line":"        arbitrary hardware, clustered controllers which may run allow a"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_49b46ad0","line":64,"in_reply_to":"3a29b11f_f1ce9fb6","updated":"2015-10-26 14:24:21.000000000","message":"Removed a glossary.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":77,"context_line":"a variety of integration approaches with the network services that are"},{"line_number":78,"context_line":"available with OpenStack."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"There are big number of the share drivers created by different vendors. Each"},{"line_number":81,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":82,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":83,"context_line":"Here the back end is an instance of the manila-share service. For example, the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f1353fa8","line":80,"updated":"2015-10-23 18:42:30.000000000","message":"There are a large number of share drivers....","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":77,"context_line":"a variety of integration approaches with the network services that are"},{"line_number":78,"context_line":"available with OpenStack."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"There are big number of the share drivers created by different vendors. Each"},{"line_number":81,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":82,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":83,"context_line":"Here the back end is an instance of the manila-share service. For example, the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_13d8dfee","line":80,"in_reply_to":"3a29b11f_f1353fa8","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":80,"context_line":"There are big number of the share drivers created by different vendors. Each"},{"line_number":81,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":82,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":83,"context_line":"Here the back end is an instance of the manila-share service. For example, the"},{"line_number":84,"context_line":"service can be configured to use NetApp Clustered Data ONTAP (cDOT), Huawei NAS"},{"line_number":85,"context_line":"Driver, GlusterFS Native driver, and so on."},{"line_number":86,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f15c5ff2","line":83,"updated":"2015-10-23 18:42:30.000000000","message":"Here .. hwere? By default? Is there an example that should bo with this? Or can we just remove this sentence and lead with the next which is the example?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":80,"context_line":"There are big number of the share drivers created by different vendors. Each"},{"line_number":81,"context_line":"share driver is a Python class that can be set for the back end and run in the"},{"line_number":82,"context_line":"back end to manage the share operations, some of which are vendor-specific."},{"line_number":83,"context_line":"Here the back end is an instance of the manila-share service. For example, the"},{"line_number":84,"context_line":"service can be configured to use NetApp Clustered Data ONTAP (cDOT), Huawei NAS"},{"line_number":85,"context_line":"Driver, GlusterFS Native driver, and so on."},{"line_number":86,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_33e71bae","line":83,"in_reply_to":"3a29b11f_f15c5ff2","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":86,"context_line":""},{"line_number":87,"context_line":"The configuration information for clients for authentication and authorization"},{"line_number":88,"context_line":"can be stored by :ref:`security services \u003cshared_fs_security_services\u003e`."},{"line_number":89,"context_line":"This means that such protocols as LDAP and Kerberos, or with Microsoft Active"},{"line_number":90,"context_line":"directory authentication service can be configured and used."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_d1384340","line":89,"updated":"2015-10-23 18:42:30.000000000","message":"protocols as LDAP, Kerberos, or Microsoft Active Directory...","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":86,"context_line":""},{"line_number":87,"context_line":"The configuration information for clients for authentication and authorization"},{"line_number":88,"context_line":"can be stored by :ref:`security services \u003cshared_fs_security_services\u003e`."},{"line_number":89,"context_line":"This means that such protocols as LDAP and Kerberos, or with Microsoft Active"},{"line_number":90,"context_line":"directory authentication service can be configured and used."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_13ad3f31","line":89,"in_reply_to":"3a29b11f_d1384340","updated":"2015-10-26 14:24:21.000000000","message":"I wrote such way because LDAP and Kerberos are the protocols and Microsoft Active directory is not a protocol, but it is an authentication service.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":89,"context_line":"This means that such protocols as LDAP and Kerberos, or with Microsoft Active"},{"line_number":90,"context_line":"directory authentication service can be configured and used."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"},{"line_number":93,"context_line":":ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating access"},{"line_number":94,"context_line":"rules with authentication though ip address, user or group, or TLS"},{"line_number":95,"context_line":"certificates. The authentication methods depend on which share driver and"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f1777f06","line":92,"updated":"2015-10-23 18:42:30.000000000","message":"\"An administrator and the users as share owners can manage\" needs to be reworked. Do you mean \"Administrators can share ownership with users so that they can manage....\"?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":89,"context_line":"This means that such protocols as LDAP and Kerberos, or with Microsoft Active"},{"line_number":90,"context_line":"directory authentication service can be configured and used."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"},{"line_number":93,"context_line":":ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating access"},{"line_number":94,"context_line":"rules with authentication though ip address, user or group, or TLS"},{"line_number":95,"context_line":"certificates. The authentication methods depend on which share driver and"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_ee677ce8","line":92,"in_reply_to":"3a29b11f_f1777f06","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"},{"line_number":93,"context_line":":ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating access"},{"line_number":94,"context_line":"rules with authentication though ip address, user or group, or TLS"},{"line_number":95,"context_line":"certificates. The authentication methods depend on which share driver and"},{"line_number":96,"context_line":"security service you configure and use."},{"line_number":97,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b1e6e7ae","line":94,"updated":"2015-10-23 18:42:30.000000000","message":"IP address, user, group, or","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":91,"context_line":""},{"line_number":92,"context_line":"An administrator and the users as share owners can manage the"},{"line_number":93,"context_line":":ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating access"},{"line_number":94,"context_line":"rules with authentication though ip address, user or group, or TLS"},{"line_number":95,"context_line":"certificates. The authentication methods depend on which share driver and"},{"line_number":96,"context_line":"security service you configure and use."},{"line_number":97,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_8e9fe8b3","line":94,"in_reply_to":"3a29b11f_b1e6e7ae","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":99,"context_line":"    Different access features are supported by different share drivers with"},{"line_number":100,"context_line":"    taking into consideration the shared file system protocol. The supported"},{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_74959d86","line":102,"updated":"2015-10-23 18:42:30.000000000","message":"back end","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":99,"context_line":"    Different access features are supported by different share drivers with"},{"line_number":100,"context_line":"    taking into consideration the shared file system protocol. The supported"},{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_4ea9d0de","line":102,"in_reply_to":"3a29b11f_74959d86","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    taking into consideration the shared file system protocol. The supported"},{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."},{"line_number":106,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b4f1f503","line":103,"updated":"2015-10-23 18:42:30.000000000","message":"methods. It also does not support any of the security services","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    taking into consideration the shared file system protocol. The supported"},{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."},{"line_number":106,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_ce8c0082","line":103,"in_reply_to":"3a29b11f_b4f1f503","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."},{"line_number":106,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."},{"line_number":107,"context_line":"    html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_94d95986","line":104,"updated":"2015-10-23 18:42:30.000000000","message":"What are the security services it does not support? (maybe \"such as ....\")","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    shared file system protocols are NFS, CIFS, GlusterFS, or HDFS. As the"},{"line_number":102,"context_line":"    example, the Generic (Block Storage as a back-end) driver does not support"},{"line_number":103,"context_line":"    user and certificate authentication methods and doesn\u0027t support any of the"},{"line_number":104,"context_line":"    security services. For details of supporting of features by different"},{"line_number":105,"context_line":"    drivers, see `Manila share features support mapping \u003chttp://docs.openstack."},{"line_number":106,"context_line":"    org/developer/manila/devref/share_back_ends_feature_support_mapping."},{"line_number":107,"context_line":"    html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_2ec9f4ac","line":104,"in_reply_to":"3a29b11f_94d95986","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":109,"context_line":"As administrator, you can create the share types that enable the scheduler to"},{"line_number":110,"context_line":"filter the back ends before you create a share. The share types have the extra"},{"line_number":111,"context_line":"specifications you can set in the type for scheduler to filter and weigh back"},{"line_number":112,"context_line":"ends and select an appropriate one for the user that requests the share"},{"line_number":113,"context_line":"creation. An administrator can add"},{"line_number":114,"context_line":":ref:`access to the private share types \u003cshared_fs_share_types_acl\u003e` for"},{"line_number":115,"context_line":"definite users or tenants in the Identity service. Thus the users which you"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_34bde502","line":112,"updated":"2015-10-23 18:42:30.000000000","message":"ends so that an appropriate one is selected","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":109,"context_line":"As administrator, you can create the share types that enable the scheduler to"},{"line_number":110,"context_line":"filter the back ends before you create a share. The share types have the extra"},{"line_number":111,"context_line":"specifications you can set in the type for scheduler to filter and weigh back"},{"line_number":112,"context_line":"ends and select an appropriate one for the user that requests the share"},{"line_number":113,"context_line":"creation. An administrator can add"},{"line_number":114,"context_line":":ref:`access to the private share types \u003cshared_fs_share_types_acl\u003e` for"},{"line_number":115,"context_line":"definite users or tenants in the Identity service. Thus the users which you"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_ceff20a9","line":112,"in_reply_to":"3a29b11f_34bde502","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":113,"context_line":"creation. An administrator can add"},{"line_number":114,"context_line":":ref:`access to the private share types \u003cshared_fs_share_types_acl\u003e` for"},{"line_number":115,"context_line":"definite users or tenants in the Identity service. Thus the users which you"},{"line_number":116,"context_line":"granted access to can see some share types and create shares using them."},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":119,"context_line":"visibility defines whether other tenants are able to see these objects or not."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_b43fb586","line":116,"updated":"2015-10-23 18:42:30.000000000","message":"They can only see some share types? Or \"can see available types and...\"","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":113,"context_line":"creation. An administrator can add"},{"line_number":114,"context_line":":ref:`access to the private share types \u003cshared_fs_share_types_acl\u003e` for"},{"line_number":115,"context_line":"definite users or tenants in the Identity service. Thus the users which you"},{"line_number":116,"context_line":"granted access to can see some share types and create shares using them."},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":119,"context_line":"visibility defines whether other tenants are able to see these objects or not."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_ee1f7c07","line":116,"in_reply_to":"3a29b11f_b43fb586","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":116,"context_line":"granted access to can see some share types and create shares using them."},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":119,"context_line":"visibility defines whether other tenants are able to see these objects or not."},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"The permissions of API calls for different users and their roles are determined"},{"line_number":122,"context_line":"by :ref:`policies \u003cshared_fs_policies\u003e` as well as other OpenStack services."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_345405c9","line":119,"updated":"2015-10-23 18:42:30.000000000","message":"Even if they cannot see it, can they interact with it? Or is that determined by the next section?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":116,"context_line":"granted access to can see some share types and create shares using them."},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":119,"context_line":"visibility defines whether other tenants are able to see these objects or not."},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"The permissions of API calls for different users and their roles are determined"},{"line_number":122,"context_line":"by :ref:`policies \u003cshared_fs_policies\u003e` as well as other OpenStack services."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_cec40061","line":119,"in_reply_to":"3a29b11f_345405c9","updated":"2015-10-26 14:24:21.000000000","message":"If the share is private, other tenants cannot see it and operate with it.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":127,"context_line":""},{"line_number":128,"context_line":"General security information"},{"line_number":129,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":130,"context_line":"Since like all other OpenStack projects, the Shared File Systems service is"},{"line_number":131,"context_line":"registered with the Identity service, you can find the API endpoints of the"},{"line_number":132,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":133,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_346ba587","line":130,"updated":"2015-10-23 18:42:30.000000000","message":"Similar to other OpenStack projects....","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":127,"context_line":""},{"line_number":128,"context_line":"General security information"},{"line_number":129,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":130,"context_line":"Since like all other OpenStack projects, the Shared File Systems service is"},{"line_number":131,"context_line":"registered with the Identity service, you can find the API endpoints of the"},{"line_number":132,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":133,"context_line":""}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_6e8e0c29","line":130,"in_reply_to":"3a29b11f_346ba587","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":128,"context_line":"General security information"},{"line_number":129,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":130,"context_line":"Since like all other OpenStack projects, the Shared File Systems service is"},{"line_number":131,"context_line":"registered with the Identity service, you can find the API endpoints of the"},{"line_number":132,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":".. code:: console"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_1409c9dd","line":131,"updated":"2015-10-23 18:42:30.000000000","message":"so you can find...","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":128,"context_line":"General security information"},{"line_number":129,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":130,"context_line":"Since like all other OpenStack projects, the Shared File Systems service is"},{"line_number":131,"context_line":"registered with the Identity service, you can find the API endpoints of the"},{"line_number":132,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":133,"context_line":""},{"line_number":134,"context_line":".. code:: console"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_eea21c9a","line":131,"in_reply_to":"3a29b11f_1409c9dd","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":153,"context_line":" | id          | 2e8591bfcac4405fa7e5dc3fd61a2b85        |"},{"line_number":154,"context_line":" +-------------+-----------------------------------------+"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"By default, the Shared File Systems API service listens on the only one"},{"line_number":157,"context_line":"``8786`` port with ``tcp6`` type that supports both IPv4 and IPv6."},{"line_number":158,"context_line":""},{"line_number":159,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_3402c5b5","line":156,"updated":"2015-10-23 18:42:30.000000000","message":"listens only on the port ``8786``","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":153,"context_line":" | id          | 2e8591bfcac4405fa7e5dc3fd61a2b85        |"},{"line_number":154,"context_line":" +-------------+-----------------------------------------+"},{"line_number":155,"context_line":""},{"line_number":156,"context_line":"By default, the Shared File Systems API service listens on the only one"},{"line_number":157,"context_line":"``8786`` port with ``tcp6`` type that supports both IPv4 and IPv6."},{"line_number":158,"context_line":""},{"line_number":159,"context_line":".. note::"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_4eb470d0","line":156,"in_reply_to":"3a29b11f_3402c5b5","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":176,"context_line":" share.filters"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"It is recommended to change file permissions for only root to be able to modify"},{"line_number":179,"context_line":"the configuration files and allow the services to read them."},{"line_number":180,"context_line":""},{"line_number":181,"context_line":".. note::"},{"line_number":182,"context_line":"    The configuration for manila-rootwrap in file ``rootwrap.conf`` and the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_f42a0d2f","line":179,"updated":"2015-10-23 18:42:30.000000000","message":"What permissions are required for the services to read them? Is there a service user?","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":176,"context_line":" share.filters"},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"It is recommended to change file permissions for only root to be able to modify"},{"line_number":179,"context_line":"the configuration files and allow the services to read them."},{"line_number":180,"context_line":""},{"line_number":181,"context_line":".. note::"},{"line_number":182,"context_line":"    The configuration for manila-rootwrap in file ``rootwrap.conf`` and the"}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_69b926ec","line":179,"in_reply_to":"3a29b11f_f42a0d2f","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"ba16ea22a55fd734d7df1d1d6f85bd072c6e940c","unresolved":false,"context_lines":[{"line_number":189,"context_line":"    The path ``/etc/manila/manila.conf`` is one of expected paths by default."},{"line_number":190,"context_line":""},{"line_number":191,"context_line":"It is also better to configure the service to run under a non-root service"},{"line_number":192,"context_line":"account."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_d4291139","line":192,"updated":"2015-10-23 18:42:30.000000000","message":"The default configuration should be called out here, and if it is not root, the checklist needs to be updated.","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"853e47b11244323694453ce797ba4fa703d05b05","unresolved":false,"context_lines":[{"line_number":189,"context_line":"    The path ``/etc/manila/manila.conf`` is one of expected paths by default."},{"line_number":190,"context_line":""},{"line_number":191,"context_line":"It is also better to configure the service to run under a non-root service"},{"line_number":192,"context_line":"account."}],"source_content_type":"text/x-rst","patch_set":17,"id":"3a29b11f_89be02d3","line":192,"in_reply_to":"3a29b11f_d4291139","updated":"2015-10-26 14:24:21.000000000","message":"Done","commit_id":"221ac014e68222a110ca7ba7232d10f14bb3b881"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"7c419ccb40cb90cec5b4b511372471c27ff2a08f","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":".. image:: ../figures/manila-intro.png"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. glossary::"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"For details of the terms and definitions used in schema, see `glossary \u003chttp://"},{"line_number":40,"context_line":"docs.openstack.org/developer/manila/glossary.html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_cd0d0d39","line":37,"updated":"2015-10-27 10:30:11.000000000","message":"REmove the line above","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"ede0b767497f371142776e4e7436728c4628863e","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":".. image:: ../figures/manila-intro.png"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. glossary::"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"For details of the terms and definitions used in schema, see `glossary \u003chttp://"},{"line_number":40,"context_line":"docs.openstack.org/developer/manila/glossary.html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_48eecbed","line":37,"in_reply_to":"1a26ad4f_cd0d0d39","updated":"2015-10-27 11:32:40.000000000","message":"Done","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"7c419ccb40cb90cec5b4b511372471c27ff2a08f","unresolved":false,"context_lines":[{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. glossary::"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"For details of the terms and definitions used in schema, see `glossary \u003chttp://"},{"line_number":40,"context_line":"docs.openstack.org/developer/manila/glossary.html\u003e`_."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"A share is a remote, mountable file system. You can mount a share to and access"}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_2d34c1dc","line":39,"updated":"2015-10-27 10:30:11.000000000","message":"Which terms are missing? Explain those that you need and let\u0027s discuss what to add to our global glossary. But referencing another glossary is bad, this chapter should be self sufficient.\n\nCheck also how the other chapters do this...","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"ede0b767497f371142776e4e7436728c4628863e","unresolved":false,"context_lines":[{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. glossary::"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"For details of the terms and definitions used in schema, see `glossary \u003chttp://"},{"line_number":40,"context_line":"docs.openstack.org/developer/manila/glossary.html\u003e`_."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"A share is a remote, mountable file system. You can mount a share to and access"}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_88cb8372","line":39,"in_reply_to":"1a26ad4f_2d34c1dc","updated":"2015-10-27 11:32:40.000000000","message":"Done with the definition list formatting. Removed such general terms as Web dashboard, DB and Auth manager. Left only manila-specific terms.","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"7c419ccb40cb90cec5b4b511372471c27ff2a08f","unresolved":false,"context_lines":[{"line_number":100,"context_line":""},{"line_number":101,"context_line":"General security information"},{"line_number":102,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":103,"context_line":"Similar to other OpenStack projects, the Shared File Systems service is"},{"line_number":104,"context_line":"registered with the Identity service, so you can find the API endpoints of the"},{"line_number":105,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":106,"context_line":""}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_0da0e5f3","line":103,"updated":"2015-10-27 10:30:11.000000000","message":"Add an empty line after the title","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"ede0b767497f371142776e4e7436728c4628863e","unresolved":false,"context_lines":[{"line_number":100,"context_line":""},{"line_number":101,"context_line":"General security information"},{"line_number":102,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":103,"context_line":"Similar to other OpenStack projects, the Shared File Systems service is"},{"line_number":104,"context_line":"registered with the Identity service, so you can find the API endpoints of the"},{"line_number":105,"context_line":"share service v1 and v2 using **manila endpoints** command:"},{"line_number":106,"context_line":""}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_48c56b59","line":103,"in_reply_to":"1a26ad4f_0da0e5f3","updated":"2015-10-27 11:32:40.000000000","message":"Done","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"7c419ccb40cb90cec5b4b511372471c27ff2a08f","unresolved":false,"context_lines":[{"line_number":151,"context_line":"It is recommended that you configure the Shared File Systems service to run"},{"line_number":152,"context_line":"under a non-root service account, for example, ``manila`` and change file"},{"line_number":153,"context_line":"permissions for only ``root`` to be able to modify the configuration files. The"},{"line_number":154,"context_line":"Shared File Systems expects that only the administrator can write to the"},{"line_number":155,"context_line":"configuration files and the services can only read them through their group"},{"line_number":156,"context_line":"membership in the ``manila`` group. Others must not read these files because"},{"line_number":157,"context_line":"the files contain admin passwords of different services."}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_8dacf5ee","line":154,"updated":"2015-10-27 10:30:11.000000000","message":"Shared File Systems service ...","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"ede0b767497f371142776e4e7436728c4628863e","unresolved":false,"context_lines":[{"line_number":151,"context_line":"It is recommended that you configure the Shared File Systems service to run"},{"line_number":152,"context_line":"under a non-root service account, for example, ``manila`` and change file"},{"line_number":153,"context_line":"permissions for only ``root`` to be able to modify the configuration files. The"},{"line_number":154,"context_line":"Shared File Systems expects that only the administrator can write to the"},{"line_number":155,"context_line":"configuration files and the services can only read them through their group"},{"line_number":156,"context_line":"membership in the ``manila`` group. Others must not read these files because"},{"line_number":157,"context_line":"the files contain admin passwords of different services."}],"source_content_type":"text/x-rst","patch_set":19,"id":"1a26ad4f_e8a0f7a7","line":154,"in_reply_to":"1a26ad4f_8dacf5ee","updated":"2015-10-27 11:32:40.000000000","message":"Done","commit_id":"c95e119f0269009e76990bfa8f182ab3495b3cfe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"866028506363fad938cb0c5ec76e1d9134992de8","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_12d8fd52","line":13,"updated":"2015-10-27 13:32:16.000000000","message":"SQL","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"b19f8cab1a38a62b242a80790035aa7e068372c9","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_d21045ab","line":13,"in_reply_to":"1a26ad4f_12d8fd52","updated":"2015-10-27 14:14:22.000000000","message":"Done","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"866028506363fad938cb0c5ec76e1d9134992de8","unresolved":false,"context_lines":[{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":"   The Shared File Systems service is tested with MySQL and PostgreSQL data"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_72e7f112","line":15,"updated":"2015-10-27 13:32:16.000000000","message":"SQL","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"b19f8cab1a38a62b242a80790035aa7e068372c9","unresolved":false,"context_lines":[{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a sql-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a sql database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":"   The Shared File Systems service is tested with MySQL and PostgreSQL data"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_9223ad05","line":15,"in_reply_to":"1a26ad4f_72e7f112","updated":"2015-10-27 14:14:22.000000000","message":"Done","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"866028506363fad938cb0c5ec76e1d9134992de8","unresolved":false,"context_lines":[{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":"   The Shared File Systems service is tested with MySQL and PostgreSQL data"},{"line_number":19,"context_line":"   bases, but it supports different SQL dialects. The potential support is"},{"line_number":20,"context_line":"   limited by SQL dialects of ORM SQLALchemy."},{"line_number":21,"context_line":""},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_72ce1185","line":20,"updated":"2015-10-27 13:32:16.000000000","message":"This note is out of scope for the Security Guide IMHO, it belongs into an admin guide if at all. REmove it","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"b19f8cab1a38a62b242a80790035aa7e068372c9","unresolved":false,"context_lines":[{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":"   The Shared File Systems service is tested with MySQL and PostgreSQL data"},{"line_number":19,"context_line":"   bases, but it supports different SQL dialects. The potential support is"},{"line_number":20,"context_line":"   limited by SQL dialects of ORM SQLALchemy."},{"line_number":21,"context_line":""},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"}],"source_content_type":"text/x-rst","patch_set":21,"id":"1a26ad4f_127ebde4","line":20,"in_reply_to":"1a26ad4f_72ce1185","updated":"2015-10-27 14:14:22.000000000","message":"Done","commit_id":"19b53e903fcf276ea543eb19eee3a17b1974beb9"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a SQL-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_34f90a4e","line":13,"updated":"2015-10-30 06:08:21.000000000","message":"Adding a note here if I don\u0027t see it later, the specific SQL db should be called out.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":10,"context_line":"- ``manila-scheduler``"},{"line_number":11,"context_line":"- ``manila-share``"},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a SQL-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_f2595d5b","line":13,"in_reply_to":"1a26ad4f_34f90a4e","updated":"2015-10-30 11:59:47.000000000","message":"I added the SQL specification in the 22 patch set, but then I removed because this information is too deep for the security guide.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a SQL-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_548b66c3","line":15,"updated":"2015-10-30 06:08:21.000000000","message":"Is there a specific architectural or implementation reason SQL works the best? If not, or if we don\u0027t want to call it out here, we should remove this sentence.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":12,"context_line":""},{"line_number":13,"context_line":"The Shared File Systems service uses a SQL-based central database that is"},{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_6d0a5023","line":15,"in_reply_to":"1a26ad4f_548b66c3","updated":"2015-10-30 11:59:47.000000000","message":"Done. Added the specification of SQL again","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"},{"line_number":19,"context_line":"with a big number of nodes, and especially if security is a concern, The Shared"},{"line_number":20,"context_line":"File Systems service will be moving towards multiple data stores with some kind"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_f4c072e2","line":17,"updated":"2015-10-30 06:08:21.000000000","message":"Systems service","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":14,"context_line":"shared by all Shared File Systems services in the system. The amount and depth"},{"line_number":15,"context_line":"of the data fits into a SQL database quite well."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"},{"line_number":19,"context_line":"with a big number of nodes, and especially if security is a concern, The Shared"},{"line_number":20,"context_line":"File Systems service will be moving towards multiple data stores with some kind"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_4d10b44e","line":17,"in_reply_to":"1a26ad4f_f4c072e2","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"},{"line_number":19,"context_line":"with a big number of nodes, and especially if security is a concern, The Shared"},{"line_number":20,"context_line":"File Systems service will be moving towards multiple data stores with some kind"},{"line_number":21,"context_line":"of aggregation system. For more details on the API, see the `OpenStack Shared"},{"line_number":22,"context_line":"File Systems API \u003chttp://developer.openstack.org/api-ref-share-v2.html\u003e`_"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_28c68e9a","line":19,"updated":"2015-10-30 06:08:21.000000000","message":"1) What threshold is \"a big number of nodes\"? 100? 1,000? 1,000,000+? When system load is at a specific %? \n2) This is the Security Guide, I think it\u0027s safe to assume security is a concern - are there specific concerns about the datastores?\n3) concern, The -\u003e concern, the","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Using SQL, the Shared File Systems is similar to other OpenStack services and"},{"line_number":18,"context_line":"can be used with any OpenStack deployment. For larger OpenStack deployments"},{"line_number":19,"context_line":"with a big number of nodes, and especially if security is a concern, The Shared"},{"line_number":20,"context_line":"File Systems service will be moving towards multiple data stores with some kind"},{"line_number":21,"context_line":"of aggregation system. For more details on the API, see the `OpenStack Shared"},{"line_number":22,"context_line":"File Systems API \u003chttp://developer.openstack.org/api-ref-share-v2.html\u003e`_"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_ad894828","line":19,"in_reply_to":"1a26ad4f_28c68e9a","updated":"2015-10-30 11:59:47.000000000","message":"This sentence was not clear and actually there are no specific concerns. The Shared File Systems will work after the deployment as other OpenStack services, in the same way. So I removed unclear sentence.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":76,"context_line":"directory authentication service can be configured and used."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"Unless it is not modified in the ``policy.json``, either an administrator or"},{"line_number":79,"context_line":"the tenant that owns a share, can share ownership and always is able to manage"},{"line_number":80,"context_line":"the :ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating"},{"line_number":81,"context_line":"access rules with authentication though IP address, user, group, or TLS"},{"line_number":82,"context_line":"certificates. The authentication methods depend on which share driver and"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_14088e2b","line":79,"updated":"2015-10-30 06:08:21.000000000","message":"\"share, can share\" is awkward. Maybe instead of \u0027can share ownership\u0027 replace it with \u0027can grant permissions\u0027","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":76,"context_line":"directory authentication service can be configured and used."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"Unless it is not modified in the ``policy.json``, either an administrator or"},{"line_number":79,"context_line":"the tenant that owns a share, can share ownership and always is able to manage"},{"line_number":80,"context_line":"the :ref:`access to the shares \u003cshared_fs_share_acl\u003e` by means of creating"},{"line_number":81,"context_line":"access rules with authentication though IP address, user, group, or TLS"},{"line_number":82,"context_line":"certificates. The authentication methods depend on which share driver and"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_d28c6137","line":79,"in_reply_to":"1a26ad4f_14088e2b","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":102,"context_line":"definite users or tenants in the Identity service. Thus the users which you"},{"line_number":103,"context_line":"granted access can see available share types and create shares using them."},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":106,"context_line":"visibility defines whether other tenants are able to see these objects and"},{"line_number":107,"context_line":"operate with them, or not."},{"line_number":108,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_08bb920f","line":105,"updated":"2015-10-30 06:08:21.000000000","message":"I think this sentence should be before the sentence before it.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":102,"context_line":"definite users or tenants in the Identity service. Thus the users which you"},{"line_number":103,"context_line":"granted access can see available share types and create shares using them."},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"The shares and share types can be created as public or private. This level of"},{"line_number":106,"context_line":"visibility defines whether other tenants are able to see these objects and"},{"line_number":107,"context_line":"operate with them, or not."},{"line_number":108,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_b261a53b","line":105,"in_reply_to":"1a26ad4f_08bb920f","updated":"2015-10-30 11:59:47.000000000","message":"I cannot put it before, because in previous paragraph I say what are the share types and their purpose. I should explain it first.\n\nAnd in this paragraph I say not only about the share types but also about the shares, so I cannot put this sentence in previous paragraph that is only about share types. Also this paragraph is about other thing in security - public or private entities.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":169,"context_line":"permissions for only ``root`` to be able to modify the configuration files. The"},{"line_number":170,"context_line":"Shared File Systems service expects that only the administrator can write to"},{"line_number":171,"context_line":"the configuration files and the services can only read them through their group"},{"line_number":172,"context_line":"membership in the ``manila`` group. Others must not read these files because"},{"line_number":173,"context_line":"the files contain admin passwords of different services."},{"line_number":174,"context_line":""},{"line_number":175,"context_line":"Thus, for the configuration files it is recommended to set ownership to"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_284d2e3e","line":172,"updated":"2015-10-30 06:08:21.000000000","message":"must not be able to","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":169,"context_line":"permissions for only ``root`` to be able to modify the configuration files. The"},{"line_number":170,"context_line":"Shared File Systems service expects that only the administrator can write to"},{"line_number":171,"context_line":"the configuration files and the services can only read them through their group"},{"line_number":172,"context_line":"membership in the ``manila`` group. Others must not read these files because"},{"line_number":173,"context_line":"the files contain admin passwords of different services."},{"line_number":174,"context_line":""},{"line_number":175,"context_line":"Thus, for the configuration files it is recommended to set ownership to"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_f24f1dbb","line":172,"in_reply_to":"1a26ad4f_284d2e3e","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f3dcf19f4737f5ec95bfc129cdad5a90590daaf4","unresolved":false,"context_lines":[{"line_number":15,"context_line":"of the data fits into a SQL database quite well. The Shared File Systems"},{"line_number":16,"context_line":"service can use all SQL dialects supported by ORM SQLALchemy, but is tested"},{"line_number":17,"context_line":"only with MySQL and PostgreSQL data bases."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Using SQL, the Shared File Systems service is similar to other OpenStack"},{"line_number":20,"context_line":"services and can be used with any OpenStack deployment. For more details on"},{"line_number":21,"context_line":"the API, see the `OpenStack Shared File Systems API \u003chttp://developer."}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_ffda414a","line":18,"updated":"2015-11-02 22:53:05.000000000","message":"And what is the default? Or is that an additional configuration step that is required upon installation?","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"74bee690fc9fc53ccc08e15b0c3785395acf187a","unresolved":false,"context_lines":[{"line_number":15,"context_line":"of the data fits into a SQL database quite well. The Shared File Systems"},{"line_number":16,"context_line":"service can use all SQL dialects supported by ORM SQLALchemy, but is tested"},{"line_number":17,"context_line":"only with MySQL and PostgreSQL data bases."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"Using SQL, the Shared File Systems service is similar to other OpenStack"},{"line_number":20,"context_line":"services and can be used with any OpenStack deployment. For more details on"},{"line_number":21,"context_line":"the API, see the `OpenStack Shared File Systems API \u003chttp://developer."}],"source_content_type":"text/x-rst","patch_set":26,"id":"fa80f949_d22a84e7","line":18,"in_reply_to":"1a26ad4f_ffda414a","updated":"2015-11-03 09:51:44.000000000","message":"There is no default DB. The data base is set up by admin during installation. Then admin adds the connection link to the \u0027connection\u0027 option in [DATABASE] group in manila.conf. But before this, admin should create a DB, and create a link to connect with user and password.","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":13962,"name":"Victor Ryzhenkin","email":"vryzhenkin@mirantis.com","username":"vryzhenkin"},"change_message_id":"e401aa6b8a1a181c6208bf6faf4c2b41b5ca376c","unresolved":false,"context_lines":[{"line_number":34,"context_line":"   For more details on the Shared File Systems API, see the `OpenStack"},{"line_number":35,"context_line":"   Shared File Systems API \u003chttp://developer.openstack.org/api-ref-share-"},{"line_number":36,"context_line":"   v2.html\u003e`_."},{"line_number":37,"context_line":"python-manilaclient"},{"line_number":38,"context_line":"   Command line interface to interact with the Shared File Systems service"},{"line_number":39,"context_line":"   via ``manila-api`` and also a Python module to interact"},{"line_number":40,"context_line":"   programmatically with the Shared File Systems service."}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_3cd5271b","line":37,"updated":"2015-11-02 23:03:54.000000000","message":"I suggest to move python-manilaclient under manila-scheduler.\nThis is logic. The first - services, after - other stuff.","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"74bee690fc9fc53ccc08e15b0c3785395acf187a","unresolved":false,"context_lines":[{"line_number":34,"context_line":"   For more details on the Shared File Systems API, see the `OpenStack"},{"line_number":35,"context_line":"   Shared File Systems API \u003chttp://developer.openstack.org/api-ref-share-"},{"line_number":36,"context_line":"   v2.html\u003e`_."},{"line_number":37,"context_line":"python-manilaclient"},{"line_number":38,"context_line":"   Command line interface to interact with the Shared File Systems service"},{"line_number":39,"context_line":"   via ``manila-api`` and also a Python module to interact"},{"line_number":40,"context_line":"   programmatically with the Shared File Systems service."}],"source_content_type":"text/x-rst","patch_set":26,"id":"fa80f949_b20d8039","line":37,"in_reply_to":"1a26ad4f_3cd5271b","updated":"2015-11-03 09:51:44.000000000","message":"Done","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"}],"security-guide/source/shared-file-systems/network-and-security-models.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"23cfb2b880ce88da7c6c0b42ba3041af7491b94e","unresolved":false,"context_lines":[{"line_number":1,"context_line":".. _shared_fs_network\u0026security_models:"},{"line_number":2,"context_line":""},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Network and Security Models"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"TBD."},{"line_number":7,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_96134866","line":4,"updated":"2015-10-07 13:22:12.000000000","message":"Sentence style capitalization","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":1,"context_line":".. _shared_fs_network\u0026security_models:"},{"line_number":2,"context_line":""},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Network and Security Models"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"TBD."},{"line_number":7,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_d7bf53a8","line":4,"in_reply_to":"7a2fa921_96134866","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"23cfb2b880ce88da7c6c0b42ba3041af7491b94e","unresolved":false,"context_lines":[{"line_number":13,"context_line":"---------------------------------"},{"line_number":14,"context_line":"TBD."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Network plugins"},{"line_number":17,"context_line":"---------------"},{"line_number":18,"context_line":"TBD."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_f103a60b","line":16,"updated":"2015-10-07 13:22:12.000000000","message":"plug-in - see conventions page","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":13,"context_line":"---------------------------------"},{"line_number":14,"context_line":"TBD."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Network plugins"},{"line_number":17,"context_line":"---------------"},{"line_number":18,"context_line":"TBD."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_37e567db","line":16,"in_reply_to":"7a2fa921_f103a60b","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"0de04eb31262050d9598085118cc2f70bf94f54a","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Network plugins"},{"line_number":17,"context_line":"---------------"},{"line_number":18,"context_line":"TBD."}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_36eef4ec","line":18,"updated":"2015-10-07 13:14:00.000000000","message":"Why section \"Security Services\" not here?","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":201,"context_line":"of integration approaches with the network services that are available with"},{"line_number":202,"context_line":"OpenStack."},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"The network plug-ins allow to use any Nova or Neutron functions and"},{"line_number":205,"context_line":"configurations, for example, you can use any network segmentation that Neutron"},{"line_number":206,"context_line":"supports, or you can use flat Nova networks or VLAN-segmented Nova networks, or"},{"line_number":207,"context_line":"you can use the plugin for specifying networks independently from OpenStack"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_84a027f6","line":204,"updated":"2015-10-19 14:35:26.000000000","message":"Don\u0027t use Nova or Neutron, use the service name. If you really need to use these, they are lowercase.","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":201,"context_line":"of integration approaches with the network services that are available with"},{"line_number":202,"context_line":"OpenStack."},{"line_number":203,"context_line":""},{"line_number":204,"context_line":"The network plug-ins allow to use any Nova or Neutron functions and"},{"line_number":205,"context_line":"configurations, for example, you can use any network segmentation that Neutron"},{"line_number":206,"context_line":"supports, or you can use flat Nova networks or VLAN-segmented Nova networks, or"},{"line_number":207,"context_line":"you can use the plugin for specifying networks independently from OpenStack"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_93d148d0","line":204,"in_reply_to":"3a29b11f_84a027f6","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":143,"context_line":""},{"line_number":144,"context_line":"After the share network is created, the Shared File Systems service retrieves"},{"line_number":145,"context_line":"the network information determined by the network provider: the segmentation"},{"line_number":146,"context_line":"identifier if the network uses segmentation (for VLAN, this is a value from 1"},{"line_number":147,"context_line":"to 4094; for VXLAN, this is a value from 1 to 16777215; for GRE, this is a"},{"line_number":148,"context_line":"value from 1 to 4294967295), the network type (which can be VLAN, VXLAN, GRE,"},{"line_number":149,"context_line":"or flat), the IP version of the network, and the IP block in Classless"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_d6e7a33e","line":146,"updated":"2015-10-19 19:03:45.000000000","message":"Don\u0027t use brackets unless for an appreviation.","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":143,"context_line":""},{"line_number":144,"context_line":"After the share network is created, the Shared File Systems service retrieves"},{"line_number":145,"context_line":"the network information determined by the network provider: the segmentation"},{"line_number":146,"context_line":"identifier if the network uses segmentation (for VLAN, this is a value from 1"},{"line_number":147,"context_line":"to 4094; for VXLAN, this is a value from 1 to 16777215; for GRE, this is a"},{"line_number":148,"context_line":"value from 1 to 4294967295), the network type (which can be VLAN, VXLAN, GRE,"},{"line_number":149,"context_line":"or flat), the IP version of the network, and the IP block in Classless"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_8bfa4cbc","line":146,"in_reply_to":"3a29b11f_d6e7a33e","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":155,"context_line":"**Flat network in share servers back-end mode**"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"This mode, some storage controllers can create share servers but due to various"},{"line_number":158,"context_line":"limitations of the physical/logical network all of the share servers have to be"},{"line_number":159,"context_line":"on a flat network. In this mode, the share driver needs something to provision"},{"line_number":160,"context_line":"IP addresses for the share servers, but the IPs all come out of the same subnet"},{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_16c51b8d","line":158,"updated":"2015-10-19 19:03:45.000000000","message":"replace \"/\" with or","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":155,"context_line":"**Flat network in share servers back-end mode**"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"This mode, some storage controllers can create share servers but due to various"},{"line_number":158,"context_line":"limitations of the physical/logical network all of the share servers have to be"},{"line_number":159,"context_line":"on a flat network. In this mode, the share driver needs something to provision"},{"line_number":160,"context_line":"IP addresses for the share servers, but the IPs all come out of the same subnet"},{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_ab694827","line":158,"in_reply_to":"3a29b11f_16c51b8d","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":160,"context_line":"IP addresses for the share servers, but the IPs all come out of the same subnet"},{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The share drivers in the mode can expect Manila to provide a subnet definition"},{"line_number":164,"context_line":"(network address, mask, broadcast, and gateway addresses) and the specific IP"},{"line_number":165,"context_line":"address(es) for each share server during creation."},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_7681ef49","line":163,"updated":"2015-10-19 19:03:45.000000000","message":"Manila -\u003e","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":160,"context_line":"IP addresses for the share servers, but the IPs all come out of the same subnet"},{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The share drivers in the mode can expect Manila to provide a subnet definition"},{"line_number":164,"context_line":"(network address, mask, broadcast, and gateway addresses) and the specific IP"},{"line_number":165,"context_line":"address(es) for each share server during creation."},{"line_number":166,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_6bf8104a","line":163,"in_reply_to":"3a29b11f_7681ef49","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The share drivers in the mode can expect Manila to provide a subnet definition"},{"line_number":164,"context_line":"(network address, mask, broadcast, and gateway addresses) and the specific IP"},{"line_number":165,"context_line":"address(es) for each share server during creation."},{"line_number":166,"context_line":""},{"line_number":167,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_76b00ff5","line":164,"updated":"2015-10-19 19:03:45.000000000","message":"remove brackets","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":161,"context_line":"and that subnet itself it assumed to be reachable by all tenants."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"The share drivers in the mode can expect Manila to provide a subnet definition"},{"line_number":164,"context_line":"(network address, mask, broadcast, and gateway addresses) and the specific IP"},{"line_number":165,"context_line":"address(es) for each share server during creation."},{"line_number":166,"context_line":""},{"line_number":167,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_8bb1ec91","line":164,"in_reply_to":"3a29b11f_76b00ff5","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":166,"context_line":""},{"line_number":167,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":168,"context_line":"the share networks is important because it allows tenants to specify security"},{"line_number":169,"context_line":"requirements such as AD/LDAP domains or a Kerberos realm. The subnet part of"},{"line_number":170,"context_line":"the share network is not really that useful. The Shared File Systems service"},{"line_number":171,"context_line":"assumes that any hosts referred to in the security service are reachable from"},{"line_number":172,"context_line":"the subnet where the share server is created, which limits the situations where"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_5641530a","line":169,"updated":"2015-10-19 19:03:45.000000000","message":"replace \"/\"","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":166,"context_line":""},{"line_number":167,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":168,"context_line":"the share networks is important because it allows tenants to specify security"},{"line_number":169,"context_line":"requirements such as AD/LDAP domains or a Kerberos realm. The subnet part of"},{"line_number":170,"context_line":"the share network is not really that useful. The Shared File Systems service"},{"line_number":171,"context_line":"assumes that any hosts referred to in the security service are reachable from"},{"line_number":172,"context_line":"the subnet where the share server is created, which limits the situations where"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_eb70a0de","line":169,"in_reply_to":"3a29b11f_5641530a","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":179,"context_line":""},{"line_number":180,"context_line":"At a minimum, the share drivers expect the Shared File systems to provide for"},{"line_number":181,"context_line":"every new share server: a subnet definition (network address, mask, broadcast,"},{"line_number":182,"context_line":"and gateway) and list of IP addresses; a segmentation type (VLAN, VXLAN, GRE,"},{"line_number":183,"context_line":"etc); and a segmentation ID and any other info relevant to the segmentation"},{"line_number":184,"context_line":"type."},{"line_number":185,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_965e0be8","line":182,"updated":"2015-10-19 19:03:45.000000000","message":"replace brackets","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":179,"context_line":""},{"line_number":180,"context_line":"At a minimum, the share drivers expect the Shared File systems to provide for"},{"line_number":181,"context_line":"every new share server: a subnet definition (network address, mask, broadcast,"},{"line_number":182,"context_line":"and gateway) and list of IP addresses; a segmentation type (VLAN, VXLAN, GRE,"},{"line_number":183,"context_line":"etc); and a segmentation ID and any other info relevant to the segmentation"},{"line_number":184,"context_line":"type."},{"line_number":185,"context_line":""}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_eb150049","line":182,"in_reply_to":"3a29b11f_965e0be8","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"369dd82cdeb3c9cf396a51c070cd3e4fd34e7864","unresolved":false,"context_lines":[{"line_number":205,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":206,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":207,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":208,"context_line":"networks of the Compute service, or you can use the plugin for specifying"},{"line_number":209,"context_line":"networks independently from OpenStack networking services. For more information"},{"line_number":210,"context_line":"of how to use different network plug-ins, see `Shared File Systems service"},{"line_number":211,"context_line":"Network plug-ins \u003chttp://docs.openstack.org/admin-guide-cloud/shared_file_"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_f69c1f6b","line":208,"updated":"2015-10-19 19:03:45.000000000","message":"plug-in","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"e0af039c2c073b2b65e8f9844cdc92da640150d8","unresolved":false,"context_lines":[{"line_number":205,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":206,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":207,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":208,"context_line":"networks of the Compute service, or you can use the plugin for specifying"},{"line_number":209,"context_line":"networks independently from OpenStack networking services. For more information"},{"line_number":210,"context_line":"of how to use different network plug-ins, see `Shared File Systems service"},{"line_number":211,"context_line":"Network plug-ins \u003chttp://docs.openstack.org/admin-guide-cloud/shared_file_"}],"source_content_type":"text/x-rst","patch_set":12,"id":"3a29b11f_2bcbf81f","line":208,"in_reply_to":"3a29b11f_f69c1f6b","updated":"2015-10-20 10:55:41.000000000","message":"Done","commit_id":"06a9b8c93903561db4f8e787767e1a9320ab6c92"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"f0ad075fa3124f0bcc8c541957bc4f420e1aae96","unresolved":false,"context_lines":[{"line_number":84,"context_line":"    expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":85,"context_line":"    addresses."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"In the **no share servers** mode the share driver does not handles the storage"},{"line_number":88,"context_line":"life cycle. An administrator should care about the storage, network interfaces"},{"line_number":89,"context_line":"and so on. In this mode an administrator can have the storage(s) as a host"},{"line_number":90,"context_line":"which exports the shares. The main characteristic of this mode is that the"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_c100ae04","line":87,"updated":"2015-10-22 13:09:49.000000000","message":"s/handles/handle/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":84,"context_line":"    expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":85,"context_line":"    addresses."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"In the **no share servers** mode the share driver does not handles the storage"},{"line_number":88,"context_line":"life cycle. An administrator should care about the storage, network interfaces"},{"line_number":89,"context_line":"and so on. In this mode an administrator can have the storage(s) as a host"},{"line_number":90,"context_line":"which exports the shares. The main characteristic of this mode is that the"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_5e2230a4","line":87,"in_reply_to":"3a29b11f_c100ae04","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"f0ad075fa3124f0bcc8c541957bc4f420e1aae96","unresolved":false,"context_lines":[{"line_number":120,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":121,"context_line":"    networks, and the real networks are available due to the network provider."},{"line_number":122,"context_line":"    In OpenStack it can be Compute or Networking services, but actually the"},{"line_number":123,"context_line":"    Shared File Systems service can work even out of OpenStack. That is is due"},{"line_number":124,"context_line":"    to the ``StandaloneNetworkPlugin`` that can be used with any network"},{"line_number":125,"context_line":"    platform and does not require some specific network services in OpenStack"},{"line_number":126,"context_line":"    like Compute or Networking service. You can set the network parameters in"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_647768a0","line":123,"updated":"2015-10-22 13:09:49.000000000","message":"is is","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":120,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":121,"context_line":"    networks, and the real networks are available due to the network provider."},{"line_number":122,"context_line":"    In OpenStack it can be Compute or Networking services, but actually the"},{"line_number":123,"context_line":"    Shared File Systems service can work even out of OpenStack. That is is due"},{"line_number":124,"context_line":"    to the ``StandaloneNetworkPlugin`` that can be used with any network"},{"line_number":125,"context_line":"    platform and does not require some specific network services in OpenStack"},{"line_number":126,"context_line":"    like Compute or Networking service. You can set the network parameters in"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_5e59d033","line":123,"in_reply_to":"3a29b11f_647768a0","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"f0ad075fa3124f0bcc8c541957bc4f420e1aae96","unresolved":false,"context_lines":[{"line_number":139,"context_line":"nova network ID to set up for share server. The third approach is to configure"},{"line_number":140,"context_line":"the networking without Compute and Networking services. The"},{"line_number":141,"context_line":"``StandaloneNetworkPlugin`` can be used with any network platform. You can set"},{"line_number":142,"context_line":"the network parameters in its configuration file."},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"After the share network is created, the Shared File Systems service retrieves"},{"line_number":145,"context_line":"the network information determined by the network provider: the segmentation"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_84ef241d","line":142,"updated":"2015-10-22 13:09:49.000000000","message":"Windows and Generic drivers do not use \"network plugins\", they can work only either with Neutron or Nova. Because both use Nova for creation of VMs that serve shares exporting.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":139,"context_line":"nova network ID to set up for share server. The third approach is to configure"},{"line_number":140,"context_line":"the networking without Compute and Networking services. The"},{"line_number":141,"context_line":"``StandaloneNetworkPlugin`` can be used with any network platform. You can set"},{"line_number":142,"context_line":"the network parameters in its configuration file."},{"line_number":143,"context_line":""},{"line_number":144,"context_line":"After the share network is created, the Shared File Systems service retrieves"},{"line_number":145,"context_line":"the network information determined by the network provider: the segmentation"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_1467b7e9","line":142,"in_reply_to":"3a29b11f_84ef241d","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"821b797cc3bea0bd8d3dba55e32e6815c37958ba","unresolved":false,"context_lines":[{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"},{"line_number":12,"context_line":"mode is used by specifying it in the configuration file :file:`manila.conf`."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"The *share servers* mode can be configured with flat network, or with segmented"},{"line_number":15,"context_line":"network. This depends on the network provider."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"It is possible to have separate drivers for different modes on the same"}],"source_content_type":"text/x-rst","patch_set":22,"id":"1a26ad4f_b2e6e9e6","line":14,"updated":"2015-10-27 13:31:41.000000000","message":"You\u0027re explaining here and below how to *setup* the different modes. This does not belong IMHO into this guide in depth. If it\u0027s important, mention it briefly. But in depth treatment belongs elsewhere.","commit_id":"6fa284dde9b54337d97548f482917ddc6ddac256"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"017ed627e3485bf0b252ec3844d214a792d72298","unresolved":false,"context_lines":[{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"},{"line_number":12,"context_line":"mode is used by specifying it in the configuration file :file:`manila.conf`."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"The *share servers* mode can be configured with flat network, or with segmented"},{"line_number":15,"context_line":"network. This depends on the network provider."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"It is possible to have separate drivers for different modes on the same"}],"source_content_type":"text/x-rst","patch_set":22,"id":"1a26ad4f_50b98d2d","line":14,"in_reply_to":"1a26ad4f_b2e6e9e6","updated":"2015-10-27 14:14:30.000000000","message":"Done. Removed some deep information.","commit_id":"6fa284dde9b54337d97548f482917ddc6ddac256"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Network and security models"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"There are big number of the share drivers created by different vendors in the"},{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_28fbeec2","line":6,"updated":"2015-10-30 06:08:21.000000000","message":"This is a bit awkward as an intro. I think you could remove the first sentence and say \"Each share driver in the Shared File Systems service is a Python...\"","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Network and security models"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"There are big number of the share drivers created by different vendors in the"},{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_2d2778cb","line":6,"in_reply_to":"1a26ad4f_28fbeec2","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"There are big number of the share drivers created by different vendors in the"},{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"},{"line_number":10,"context_line":"manila-share service. Each share driver supports one or more back end modes:"},{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_68dec640","line":8,"updated":"2015-10-30 06:08:21.000000000","message":"I would remove the second \u0027back end\u0027","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"There are big number of the share drivers created by different vendors in the"},{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"},{"line_number":10,"context_line":"manila-share service. Each share driver supports one or more back end modes:"},{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_f1515ad9","line":8,"in_reply_to":"1a26ad4f_68dec640","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"},{"line_number":10,"context_line":"manila-share service. Each share driver supports one or more back end modes:"},{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"},{"line_number":12,"context_line":"mode is used by specifying it in the configuration file :file:`manila.conf`."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_a8d4de1f","line":10,"updated":"2015-10-30 06:08:21.000000000","message":"This is the fourth occurrence of \u0027back end\u0027 in the last 3 sentences. It is awkward and something else should be used.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":7,"context_line":"Shared File Systems service. Each share driver is a Python class that can be"},{"line_number":8,"context_line":"set for the back end and run in the back end to manage the share operations,"},{"line_number":9,"context_line":"some of which are vendor-specific. Here the back end is an instance of the"},{"line_number":10,"context_line":"manila-share service. Each share driver supports one or more back end modes:"},{"line_number":11,"context_line":"*share servers* and *no share servers*, but the administrator chooses which"},{"line_number":12,"context_line":"mode is used by specifying it in the configuration file :file:`manila.conf`."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_316fd293","line":10,"in_reply_to":"1a26ad4f_a8d4de1f","updated":"2015-10-30 11:59:47.000000000","message":"Removed previous \u0027back end\u0027","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":15,"context_line":"network. This depends on the network provider."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"It is possible to have separate drivers for different modes on the same"},{"line_number":18,"context_line":"hardware if that makes sense. Depending on which mode is chosen, the"},{"line_number":19,"context_line":"administrator needs to provide additional details in the configuration file as"},{"line_number":20,"context_line":"well."},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_e8f2d6d1","line":18,"updated":"2015-10-30 06:08:21.000000000","message":"What are the circumstances for this making sense? Are there security implications to that decision?","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":15,"context_line":"network. This depends on the network provider."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"It is possible to have separate drivers for different modes on the same"},{"line_number":18,"context_line":"hardware if that makes sense. Depending on which mode is chosen, the"},{"line_number":19,"context_line":"administrator needs to provide additional details in the configuration file as"},{"line_number":20,"context_line":"well."},{"line_number":21,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_f1739a13","line":18,"in_reply_to":"1a26ad4f_e8f2d6d1","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":25,"context_line":"---------------------"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Each share driver supports one or two of possible driver modes to configure the"},{"line_number":28,"context_line":"back ends. Initially there are 2 driver modes for the back ends:"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"* **share servers mode**"},{"line_number":31,"context_line":"* **no share servers mode**"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_68b566ec","line":28,"updated":"2015-10-30 06:08:21.000000000","message":"2 -\u003e two","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":25,"context_line":"---------------------"},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Each share driver supports one or two of possible driver modes to configure the"},{"line_number":28,"context_line":"back ends. Initially there are 2 driver modes for the back ends:"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"* **share servers mode**"},{"line_number":31,"context_line":"* **no share servers mode**"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_b1644249","line":28,"in_reply_to":"1a26ad4f_68b566ec","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":30,"context_line":"* **share servers mode**"},{"line_number":31,"context_line":"* **no share servers mode**"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"The configuration option in :file:`manila.conf` file that set the share servers"},{"line_number":34,"context_line":"mode or no share servers mode is ``driver_handles_share_servers`` option, that"},{"line_number":35,"context_line":"defines the driver mode for share storage life cycle management:"},{"line_number":36,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_28d0ce1e","line":33,"updated":"2015-10-30 06:08:21.000000000","message":"in the :file:","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":30,"context_line":"* **share servers mode**"},{"line_number":31,"context_line":"* **no share servers mode**"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"The configuration option in :file:`manila.conf` file that set the share servers"},{"line_number":34,"context_line":"mode or no share servers mode is ``driver_handles_share_servers`` option, that"},{"line_number":35,"context_line":"defines the driver mode for share storage life cycle management:"},{"line_number":36,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_1156565c","line":33,"in_reply_to":"1a26ad4f_28d0ce1e","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":31,"context_line":"* **no share servers mode**"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"The configuration option in :file:`manila.conf` file that set the share servers"},{"line_number":34,"context_line":"mode or no share servers mode is ``driver_handles_share_servers`` option, that"},{"line_number":35,"context_line":"defines the driver mode for share storage life cycle management:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"+------------------+-------------------------------------+--------------------+"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_e8c97679","line":34,"updated":"2015-10-30 06:08:21.000000000","message":"is the ``driver_handles_share_servers`` option that defines","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":31,"context_line":"* **no share servers mode**"},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"The configuration option in :file:`manila.conf` file that set the share servers"},{"line_number":34,"context_line":"mode or no share servers mode is ``driver_handles_share_servers`` option, that"},{"line_number":35,"context_line":"defines the driver mode for share storage life cycle management:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"+------------------+-------------------------------------+--------------------+"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_31511263","line":34,"in_reply_to":"1a26ad4f_e8c97679","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":52,"context_line":"|                  |                                     | interface instead  |"},{"line_number":53,"context_line":"|                  |                                     | of the presence of |"},{"line_number":54,"context_line":"|                  |                                     | the share servers. |"},{"line_number":55,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":58,"context_line":"to filter back ends and choose the appropriate back end for the user that"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_68ac86a0","line":55,"updated":"2015-10-30 06:08:21.000000000","message":"This should be an RST table","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":52,"context_line":"|                  |                                     | interface instead  |"},{"line_number":53,"context_line":"|                  |                                     | of the presence of |"},{"line_number":54,"context_line":"|                  |                                     | the share servers. |"},{"line_number":55,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":58,"context_line":"to filter back ends and choose the appropriate back end for the user that"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_31ffd235","line":55,"in_reply_to":"1a26ad4f_68ac86a0","updated":"2015-10-30 11:59:47.000000000","message":"There are two syntaxes for tables in RST: grid tables and simple tables. This is a grid table and I think that it is OK to leave it as it is.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":55,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":58,"context_line":"to filter back ends and choose the appropriate back end for the user that"},{"line_number":59,"context_line":"requested to create a share. For details of managing the share types and"},{"line_number":60,"context_line":"configuration the back ends, see `Share types \u003chttp://docs.openstack.org/admin-"},{"line_number":61,"context_line":"guide-cloud/shared_file_systems_share_types.html\u003e`_ and `Multi-storage"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_4892ea58","line":58,"updated":"2015-10-30 06:08:21.000000000","message":"So the scheduler filters can cause a separate back end to be loaded by Manila?","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":55,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":58,"context_line":"to filter back ends and choose the appropriate back end for the user that"},{"line_number":59,"context_line":"requested to create a share. For details of managing the share types and"},{"line_number":60,"context_line":"configuration the back ends, see `Share types \u003chttp://docs.openstack.org/admin-"},{"line_number":61,"context_line":"guide-cloud/shared_file_systems_share_types.html\u003e`_ and `Multi-storage"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_b11c4278","line":58,"in_reply_to":"1a26ad4f_4892ea58","updated":"2015-10-30 11:59:47.000000000","message":"Yes, the scheduler filters can cause a separate back end to be used for new share that is creating by somebody. You specify the share type and the scheduler selects appropriate back end for the share.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":69,"context_line":"   File Systems service will expect the driver to provision shares directly"},{"line_number":70,"context_line":"   without creating any share server beforehand. The Shared File Systems"},{"line_number":71,"context_line":"   service will assume that the network interfaces through which any shares"},{"line_number":72,"context_line":"   are exported are already reachable by all tenants. This mode corresponds to"},{"line_number":73,"context_line":"   what some existing drivers are already doing, but it makes explicit the"},{"line_number":74,"context_line":"   choice for the administrator. In this mode, the share networks are not"},{"line_number":75,"context_line":"   needed at share creation time and must not be provided."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_c8ba7ac0","line":72,"updated":"2015-10-30 06:08:21.000000000","message":"So this is information that would be very important to a security administrator, I think the shared resources accessible by all tenants should be called out a bit more explicitly","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":76,"context_line":""},{"line_number":77,"context_line":"Share servers mode"},{"line_number":78,"context_line":"   In this mode, the driver is able to create share servers and join them to"},{"line_number":79,"context_line":"   an existing network. For providing every new share server, the drivers can"},{"line_number":80,"context_line":"   expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":81,"context_line":"   addresses."},{"line_number":82,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_c8e11ad2","line":79,"updated":"2015-10-30 06:08:21.000000000","message":"When providing a new share, the drivers expect an IP address and subnet from the Shared File Systems service.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":76,"context_line":""},{"line_number":77,"context_line":"Share servers mode"},{"line_number":78,"context_line":"   In this mode, the driver is able to create share servers and join them to"},{"line_number":79,"context_line":"   an existing network. For providing every new share server, the drivers can"},{"line_number":80,"context_line":"   expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":81,"context_line":"   addresses."},{"line_number":82,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_b4519010","line":79,"in_reply_to":"1a26ad4f_c8e11ad2","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":78,"context_line":"   In this mode, the driver is able to create share servers and join them to"},{"line_number":79,"context_line":"   an existing network. For providing every new share server, the drivers can"},{"line_number":80,"context_line":"   expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":81,"context_line":"   addresses."},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the **no share servers** mode the share driver does not handle the storage"},{"line_number":84,"context_line":"life cycle. An administrator should care about the storage, network interfaces"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_e8f3b69c","line":81,"updated":"2015-10-30 06:08:21.000000000","message":"Does this also expect all tenants can reach individual shares?","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":78,"context_line":"   In this mode, the driver is able to create share servers and join them to"},{"line_number":79,"context_line":"   an existing network. For providing every new share server, the drivers can"},{"line_number":80,"context_line":"   expect from the Shared File Systems service a subnet definition and the IP"},{"line_number":81,"context_line":"   addresses."},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the **no share servers** mode the share driver does not handle the storage"},{"line_number":84,"context_line":"life cycle. An administrator should care about the storage, network interfaces"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_94833456","line":81,"in_reply_to":"1a26ad4f_e8f3b69c","updated":"2015-10-30 11:59:47.000000000","message":"Yes, in both modes tenants can reach their shares","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the **no share servers** mode the share driver does not handle the storage"},{"line_number":84,"context_line":"life cycle. An administrator should care about the storage, network interfaces"},{"line_number":85,"context_line":"and so on. In this mode an administrator can have the storage(s) as a host"},{"line_number":86,"context_line":"which exports the shares. The main characteristic of this mode is that the"},{"line_number":87,"context_line":"storage is not handled by the Shared File Systems service. The users in tenants"},{"line_number":88,"context_line":"share one common network, host, processor, and network pipe. The users can"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_4823ca05","line":85,"updated":"2015-10-30 06:08:21.000000000","message":"\"The administrator is expected to handle the storage, network interfaces, and other host configurations.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":82,"context_line":""},{"line_number":83,"context_line":"In the **no share servers** mode the share driver does not handle the storage"},{"line_number":84,"context_line":"life cycle. An administrator should care about the storage, network interfaces"},{"line_number":85,"context_line":"and so on. In this mode an administrator can have the storage(s) as a host"},{"line_number":86,"context_line":"which exports the shares. The main characteristic of this mode is that the"},{"line_number":87,"context_line":"storage is not handled by the Shared File Systems service. The users in tenants"},{"line_number":88,"context_line":"share one common network, host, processor, and network pipe. The users can"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_74f778f5","line":85,"in_reply_to":"1a26ad4f_4823ca05","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":86,"context_line":"which exports the shares. The main characteristic of this mode is that the"},{"line_number":87,"context_line":"storage is not handled by the Shared File Systems service. The users in tenants"},{"line_number":88,"context_line":"share one common network, host, processor, and network pipe. The users can"},{"line_number":89,"context_line":"hinder each other if there is no correct balancing adjustment. In the public"},{"line_number":90,"context_line":"clouds it is possible to use all the network pipe some client."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"Unlike the no share servers mode, in the **share servers** mode the users have"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_c8f27a6f","line":89,"updated":"2015-10-30 06:08:21.000000000","message":"Where is the balancing adjustment? Is this in OpenStack resource controls such as the filter scheduler? Or host controls?","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":86,"context_line":"which exports the shares. The main characteristic of this mode is that the"},{"line_number":87,"context_line":"storage is not handled by the Shared File Systems service. The users in tenants"},{"line_number":88,"context_line":"share one common network, host, processor, and network pipe. The users can"},{"line_number":89,"context_line":"hinder each other if there is no correct balancing adjustment. In the public"},{"line_number":90,"context_line":"clouds it is possible to use all the network pipe some client."},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"Unlike the no share servers mode, in the **share servers** mode the users have"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_da6d5399","line":89,"in_reply_to":"1a26ad4f_c8f27a6f","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. note::"},{"line_number":116,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":117,"context_line":"    networks, and the real networks are available due to the network provider."},{"line_number":118,"context_line":"    In OpenStack it can be Legacy networking (nova-network) or Networking"},{"line_number":119,"context_line":"    (neutron) services, but actually the Shared File Systems service can work"},{"line_number":120,"context_line":"    even out of OpenStack. That is due to the ``StandaloneNetworkPlugin`` that"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_485bca54","line":117,"updated":"2015-10-30 06:08:21.000000000","message":"I\u0027m not sure I understand what this is saying - the Shared File Systems service keeps a cache of the network information due to the network type? Or is there a plugin type (such as outlined below) that do this?","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. note::"},{"line_number":116,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":117,"context_line":"    networks, and the real networks are available due to the network provider."},{"line_number":118,"context_line":"    In OpenStack it can be Legacy networking (nova-network) or Networking"},{"line_number":119,"context_line":"    (neutron) services, but actually the Shared File Systems service can work"},{"line_number":120,"context_line":"    even out of OpenStack. That is due to the ``StandaloneNetworkPlugin`` that"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_5aace39f","line":117,"in_reply_to":"1a26ad4f_485bca54","updated":"2015-10-30 11:59:47.000000000","message":"I meant that a share network is an entity in the Shared File Systems service. It is not a real network in OpenStack networking service. It is an entity that is getting fields from network providers and keeps it in a DB.  When you create a share network, the network provider gives information about it and the share network gets the fields of details. So this info is keeping in the DB of the Shared File Systems service.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":157,"context_line":"various limitations of the physical or logical network all of the share servers"},{"line_number":158,"context_line":"have to be on a flat network. In this mode, the share driver needs something to"},{"line_number":159,"context_line":"provision IP addresses for the share servers, but the IPs all come out of the"},{"line_number":160,"context_line":"same subnet and that subnet itself it assumed to be reachable by all tenants."},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":163,"context_line":"the share networks is important because it allows tenants to specify security"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_4b3e64b9","line":160,"updated":"2015-10-30 06:08:21.000000000","message":"it -\u003e is","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":157,"context_line":"various limitations of the physical or logical network all of the share servers"},{"line_number":158,"context_line":"have to be on a flat network. In this mode, the share driver needs something to"},{"line_number":159,"context_line":"provision IP addresses for the share servers, but the IPs all come out of the"},{"line_number":160,"context_line":"same subnet and that subnet itself it assumed to be reachable by all tenants."},{"line_number":161,"context_line":""},{"line_number":162,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":163,"context_line":"the share networks is important because it allows tenants to specify security"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_fa728f48","line":160,"in_reply_to":"1a26ad4f_4b3e64b9","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":162,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":163,"context_line":"the share networks is important because it allows tenants to specify security"},{"line_number":164,"context_line":"requirements such as AD or LDAP domains or a Kerberos realm. The subnet part of"},{"line_number":165,"context_line":"the share network is not really that useful. The Shared File Systems service"},{"line_number":166,"context_line":"assumes that any hosts referred to in the security service are reachable from"},{"line_number":167,"context_line":"the subnet where the share server is created, which limits the situations where"},{"line_number":168,"context_line":"this mode makes sense."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_cb783492","line":165,"updated":"2015-10-30 06:08:21.000000000","message":"Then we don\u0027t need to mention it here, the subnet part sentence can be removed.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":162,"context_line":"In this mode, the :ref:`security service part \u003cshared_fs_security_services\u003e` of"},{"line_number":163,"context_line":"the share networks is important because it allows tenants to specify security"},{"line_number":164,"context_line":"requirements such as AD or LDAP domains or a Kerberos realm. The subnet part of"},{"line_number":165,"context_line":"the share network is not really that useful. The Shared File Systems service"},{"line_number":166,"context_line":"assumes that any hosts referred to in the security service are reachable from"},{"line_number":167,"context_line":"the subnet where the share server is created, which limits the situations where"},{"line_number":168,"context_line":"this mode makes sense."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_babad7be","line":165,"in_reply_to":"1a26ad4f_cb783492","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":194,"context_line":"of integration approaches with the network services that are available with"},{"line_number":195,"context_line":"OpenStack."},{"line_number":196,"context_line":""},{"line_number":197,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":198,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":199,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":200,"context_line":"networks of the Legacy networking (nova-network) service, or you can use the"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_6ba6c011","line":197,"updated":"2015-10-30 06:08:21.000000000","message":"nova or neutron -\u003e Compute or Network","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":194,"context_line":"of integration approaches with the network services that are available with"},{"line_number":195,"context_line":"OpenStack."},{"line_number":196,"context_line":""},{"line_number":197,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":198,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":199,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":200,"context_line":"networks of the Legacy networking (nova-network) service, or you can use the"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_5a362353","line":197,"in_reply_to":"1a26ad4f_6ba6c011","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":196,"context_line":""},{"line_number":197,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":198,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":199,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":200,"context_line":"networks of the Legacy networking (nova-network) service, or you can use the"},{"line_number":201,"context_line":"plug-in for specifying networks independently from OpenStack networking"},{"line_number":202,"context_line":"services. For more information of how to use different network plug-ins, see"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_0bb62c3d","line":199,"updated":"2015-10-30 06:08:21.000000000","message":"remove the first or here","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":196,"context_line":""},{"line_number":197,"context_line":"The network plug-ins allow to use any nova or neutron functions and"},{"line_number":198,"context_line":"configurations, for example, you can use any network segmentation that the"},{"line_number":199,"context_line":"Networking service supports, or you can use flat networks or VLAN-segmented"},{"line_number":200,"context_line":"networks of the Legacy networking (nova-network) service, or you can use the"},{"line_number":201,"context_line":"plug-in for specifying networks independently from OpenStack networking"},{"line_number":202,"context_line":"services. For more information of how to use different network plug-ins, see"}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_ba1657a5","line":199,"in_reply_to":"1a26ad4f_0bb62c3d","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":203,"context_line":"`Shared File Systems service Network plug-ins \u003chttp://docs.openstack.org/admin-"},{"line_number":204,"context_line":"guide-cloud/shared_file_systems_network_plugins.html#network-plug-ins\u003e`_. The"},{"line_number":205,"context_line":"security in using different network plug-ins depends on the specific network"},{"line_number":206,"context_line":"configuration."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_8b131c0d","line":206,"updated":"2015-10-30 06:08:21.000000000","message":"I like this chapter, but it\u0027s awkward in the way it switches. I think it might flow better if the no shares server mode information was all together, and if the shares info was all together, and if this network plug ins section was above the flat vs segmented networking section. However, I have not moved this myself to take a look, it may not be, I\u0027ll try to take a look tomorrow.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"1cba252807dd3e4a44ba3695ff2102805ec3f2e3","unresolved":false,"context_lines":[{"line_number":141,"context_line":"the network parameters in its configuration file."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":".. tip::"},{"line_number":144,"context_line":"    All the share drivers that use the Legacy networking (nova-network) do not"},{"line_number":145,"context_line":"    use the network plug-ins. In Liberty release it is Windows and Generic"},{"line_number":146,"context_line":"    drivers, so this share drivers can work only either with OpenStack"},{"line_number":147,"context_line":"    Networking (neutron) or Legacy networking (nova-network)."}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_fe1b3e71","line":144,"updated":"2015-11-02 10:34:40.000000000","message":"It is false statement. \"Windows\" and \"Generic\" drivers use \"compute service called Nova\", this is the criterion. And any networking can be used with Nova - either legacy nova-network or Neutron.\n\nSo, should be something like following:\n\n\"\"\"\n\nAll drivers that use OpenStack Nova service do not use Manila network plugins. Some part of networking is performed by Nova service and other part requires different approach than non-Nova-dependent drivers require. It is called there \"network helpers\".\n\n\"\"\"","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":141,"context_line":"the network parameters in its configuration file."},{"line_number":142,"context_line":""},{"line_number":143,"context_line":".. tip::"},{"line_number":144,"context_line":"    All the share drivers that use the Legacy networking (nova-network) do not"},{"line_number":145,"context_line":"    use the network plug-ins. In Liberty release it is Windows and Generic"},{"line_number":146,"context_line":"    drivers, so this share drivers can work only either with OpenStack"},{"line_number":147,"context_line":"    Networking (neutron) or Legacy networking (nova-network)."}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_8da21e4a","line":144,"in_reply_to":"1a26ad4f_fe1b3e71","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f3dcf19f4737f5ec95bfc129cdad5a90590daaf4","unresolved":false,"context_lines":[{"line_number":53,"context_line":"|                  |                                     | interface instead  |"},{"line_number":54,"context_line":"|                  |                                     | of the presence of |"},{"line_number":55,"context_line":"|                  |                                     | the share servers. |"},{"line_number":56,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":59,"context_line":"to filter back ends and choose the appropriate back end for the user that"}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_1f85bd05","line":56,"updated":"2015-11-02 22:53:05.000000000","message":"So we\u0027re going to use automated tooling to convert the RST to PDF (and then to book form with Lulu), and I\u0027m concerned the format changing may not maintain spacing, and would prefer this be moved to the other format.\n\nIf you are certain the format will not change between the two conversions we can leave it for the moment, but for the reason above as well as consistency throughout the Security Guide I\u0027d greatly prefer the other type.","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"74bee690fc9fc53ccc08e15b0c3785395acf187a","unresolved":false,"context_lines":[{"line_number":53,"context_line":"|                  |                                     | interface instead  |"},{"line_number":54,"context_line":"|                  |                                     | of the presence of |"},{"line_number":55,"context_line":"|                  |                                     | the share servers. |"},{"line_number":56,"context_line":"+------------------+-------------------------------------+--------------------+"},{"line_number":57,"context_line":""},{"line_number":58,"context_line":"This is the share types which have the extra specifications that help scheduler"},{"line_number":59,"context_line":"to filter back ends and choose the appropriate back end for the user that"}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_6b5ae9f3","line":56,"in_reply_to":"1a26ad4f_1f85bd05","updated":"2015-11-03 09:51:44.000000000","message":"Done","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f3dcf19f4737f5ec95bfc129cdad5a90590daaf4","unresolved":false,"context_lines":[{"line_number":70,"context_line":"   File Systems service will expect the driver to provision shares directly"},{"line_number":71,"context_line":"   without creating any share server beforehand. The Shared File Systems"},{"line_number":72,"context_line":"   service will assume that the network interfaces through which any shares"},{"line_number":73,"context_line":"   are exported are already reachable by all tenants. This mode corresponds to"},{"line_number":74,"context_line":"   what some existing drivers are already doing, but it makes explicit the"},{"line_number":75,"context_line":"   choice for the administrator. In this mode, the share networks are not"},{"line_number":76,"context_line":"   needed at share creation time and must not be provided."}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_ffad6184","line":73,"updated":"2015-11-02 22:53:05.000000000","message":"Again, I think the sentence from \"The Shared File System service will assume....\" through \"...by all tenants\" should be a note, or explicitly called out due to the security implications.","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"74bee690fc9fc53ccc08e15b0c3785395acf187a","unresolved":false,"context_lines":[{"line_number":70,"context_line":"   File Systems service will expect the driver to provision shares directly"},{"line_number":71,"context_line":"   without creating any share server beforehand. The Shared File Systems"},{"line_number":72,"context_line":"   service will assume that the network interfaces through which any shares"},{"line_number":73,"context_line":"   are exported are already reachable by all tenants. This mode corresponds to"},{"line_number":74,"context_line":"   what some existing drivers are already doing, but it makes explicit the"},{"line_number":75,"context_line":"   choice for the administrator. In this mode, the share networks are not"},{"line_number":76,"context_line":"   needed at share creation time and must not be provided."}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_cb9e9d62","line":73,"in_reply_to":"1a26ad4f_ffad6184","updated":"2015-11-03 09:51:44.000000000","message":"Done","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f3dcf19f4737f5ec95bfc129cdad5a90590daaf4","unresolved":false,"context_lines":[{"line_number":117,"context_line":""},{"line_number":118,"context_line":".. note::"},{"line_number":119,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":120,"context_line":"    networks in the data base, and the real networks are available due to the"},{"line_number":121,"context_line":"    network provider. In OpenStack it can be Legacy networking (nova-network)"},{"line_number":122,"context_line":"    or Networking (neutron) services, but actually the Shared File Systems"},{"line_number":123,"context_line":"    service can work even out of OpenStack. That is due to the"}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_bffa8973","line":120,"updated":"2015-11-02 22:53:05.000000000","message":"data base -\u003e database","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"74bee690fc9fc53ccc08e15b0c3785395acf187a","unresolved":false,"context_lines":[{"line_number":117,"context_line":""},{"line_number":118,"context_line":".. note::"},{"line_number":119,"context_line":"    The Shared File Systems service is just keeping the information about the"},{"line_number":120,"context_line":"    networks in the data base, and the real networks are available due to the"},{"line_number":121,"context_line":"    network provider. In OpenStack it can be Legacy networking (nova-network)"},{"line_number":122,"context_line":"    or Networking (neutron) services, but actually the Shared File Systems"},{"line_number":123,"context_line":"    service can work even out of OpenStack. That is due to the"}],"source_content_type":"text/x-rst","patch_set":26,"id":"1a26ad4f_8b92e54a","line":120,"in_reply_to":"1a26ad4f_bffa8973","updated":"2015-11-03 09:51:44.000000000","message":"Done","commit_id":"ab0fb919437a4069435c9d95fa550f84fcecf8dd"}],"security-guide/source/shared-file-systems/policies.rst":[{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"8c02aa342bf5169345c52425c13a49387c801854","unresolved":false,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"Shared File Systems service as well as other OpenStack services has its own"},{"line_number":7,"context_line":"role-based access policies. They determine which user can access which objects"},{"line_number":8,"context_line":"in which way, and are defined in the service\u0027s :file:`/etc/manila/policy.json`"},{"line_number":9,"context_line":"file."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Whenever an API call to the Shared File Systems service is made, the policy"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_04255407","line":8,"updated":"2015-10-22 13:11:45.000000000","message":"Path to config can be different. Same below.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"Shared File Systems service as well as other OpenStack services has its own"},{"line_number":7,"context_line":"role-based access policies. They determine which user can access which objects"},{"line_number":8,"context_line":"in which way, and are defined in the service\u0027s :file:`/etc/manila/policy.json`"},{"line_number":9,"context_line":"file."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Whenever an API call to the Shared File Systems service is made, the policy"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_34fd136e","line":8,"in_reply_to":"3a29b11f_04255407","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"8c02aa342bf5169345c52425c13a49387c801854","unresolved":false,"context_lines":[{"line_number":21,"context_line":".. code-block:: javascript"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":" {"},{"line_number":24,"context_line":"     \"context_is_admin\": \"role:admin\","},{"line_number":25,"context_line":"     \"admin_or_owner\": \"is_admin:True or project_id:%(project_id)s\","},{"line_number":26,"context_line":"     \"default\": \"rule:admin_or_owner\","},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_e42938e7","line":24,"updated":"2015-10-22 13:11:45.000000000","message":"Not sure it is good idea to specify whole policy file. It changes from time to time.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":21,"context_line":".. code-block:: javascript"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":" {"},{"line_number":24,"context_line":"     \"context_is_admin\": \"role:admin\","},{"line_number":25,"context_line":"     \"admin_or_owner\": \"is_admin:True or project_id:%(project_id)s\","},{"line_number":26,"context_line":"     \"default\": \"rule:admin_or_owner\","},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_940ae788","line":24,"in_reply_to":"3a29b11f_e42938e7","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Policies"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"Shared File Systems service as well as other OpenStack services has its own"},{"line_number":7,"context_line":"role-based access policies. They determine which user can access which objects"},{"line_number":8,"context_line":"in which way, and are defined in the service\u0027s :file:`policy.json` file."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_0b8dcc7a","line":6,"updated":"2015-10-30 06:08:21.000000000","message":"remove \u0027as well as other OpenStack services\u0027","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Policies"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"Shared File Systems service as well as other OpenStack services has its own"},{"line_number":7,"context_line":"role-based access policies. They determine which user can access which objects"},{"line_number":8,"context_line":"in which way, and are defined in the service\u0027s :file:`policy.json` file."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_5a84e3d2","line":6,"in_reply_to":"1a26ad4f_0b8dcc7a","updated":"2015-10-30 11:59:47.000000000","message":"Done","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"03feb8bac85668513083f2d79e718eb91a126fb3","unresolved":false,"context_lines":[{"line_number":76,"context_line":"    which allows new policies to be implemented while the Shared File Systems"},{"line_number":77,"context_line":"    service is running. Modifying the policy can have unexpected side effects"},{"line_number":78,"context_line":"    and is not encouraged. For details, see `The policy.json file \u003chttp://docs."},{"line_number":79,"context_line":"    openstack.org/trunk/config-reference/content/policy-json-file.html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_8be1dc00","line":79,"updated":"2015-10-30 06:08:21.000000000","message":"I really like the inclusion of the policy.json, it would also be nice to get a quick overview of object types as well as what some of the manila-specific items mean. If that\u0027s too big, then please disregard this comment. An alternative that might be good here is a discussion of administrative vs non-adminsitrative privileges and how they impact share visibility and read/write access.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"68cbbc0e352f0994e4af243fba4ccc3bc423caad","unresolved":false,"context_lines":[{"line_number":76,"context_line":"    which allows new policies to be implemented while the Shared File Systems"},{"line_number":77,"context_line":"    service is running. Modifying the policy can have unexpected side effects"},{"line_number":78,"context_line":"    and is not encouraged. For details, see `The policy.json file \u003chttp://docs."},{"line_number":79,"context_line":"    openstack.org/trunk/config-reference/content/policy-json-file.html\u003e`_."}],"source_content_type":"text/x-rst","patch_set":24,"id":"1a26ad4f_0515b03e","line":79,"in_reply_to":"1a26ad4f_8be1dc00","updated":"2015-10-30 11:59:47.000000000","message":"Firstly I included all the policy.json file here even if it was big, but this file can be changed from one release to another that is why the information can not be actual. So I left a snippet only. I think that the guide should give the idea and explain where to see specific info in a project file, so admins can find this and see it and it\u0027ll be up-to-date, without depending on a doc that can be obsolete.","commit_id":"f8b8171784c627c1e76d3a9279ea60c66291cc4e"}],"security-guide/source/shared-file-systems/security-services.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"23cfb2b880ce88da7c6c0b42ba3041af7491b94e","unresolved":false,"context_lines":[{"line_number":1,"context_line":".. _shared_fs_security_services:"},{"line_number":2,"context_line":""},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Security Services"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"TBD."},{"line_number":7,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_5115ba3d","line":4,"updated":"2015-10-07 13:22:12.000000000","message":"sentence style capitalization","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"644c7d79df669cbdf1c2f86ebefae5f0a49aaf21","unresolved":false,"context_lines":[{"line_number":1,"context_line":".. _shared_fs_security_services:"},{"line_number":2,"context_line":""},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":"Security Services"},{"line_number":5,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":6,"context_line":"TBD."},{"line_number":7,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a2fa921_f7a5afa1","line":4,"in_reply_to":"7a2fa921_5115ba3d","updated":"2015-10-08 16:06:40.000000000","message":"Done","commit_id":"60048bf934f044d7999702e4db0e9a6ba2213c61"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"For authentication and authorization of the clients, the Shared File Systems"},{"line_number":8,"context_line":"Storage service can optionally be configured with different network"},{"line_number":9,"context_line":"authentication protocols (supported are LDAP, Kerberos, or Microsoft Active"},{"line_number":10,"context_line":"directory authentication service)."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Introduction to security services"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_6405cbc0","line":9,"updated":"2015-10-19 14:35:26.000000000","message":"Avoid brackets\"(\", use a normal sentece","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"For authentication and authorization of the clients, the Shared File Systems"},{"line_number":8,"context_line":"Storage service can optionally be configured with different network"},{"line_number":9,"context_line":"authentication protocols (supported are LDAP, Kerberos, or Microsoft Active"},{"line_number":10,"context_line":"directory authentication service)."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Introduction to security services"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_530df03c","line":9,"in_reply_to":"3a29b11f_6405cbc0","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":104,"context_line":"    CIFS, GlusterFS, or HDFS). See the driver vendor\u0027s documentation for the"},{"line_number":105,"context_line":"    specific driver and its configuration for the security services."},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"The Generic (Cinder as back-end) driver is not the production solution. It uses"},{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_04f737d4","line":107,"updated":"2015-10-19 14:35:26.000000000","message":"Cinder -\u003e Block Storage","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":104,"context_line":"    CIFS, GlusterFS, or HDFS). See the driver vendor\u0027s documentation for the"},{"line_number":105,"context_line":"    specific driver and its configuration for the security services."},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"The Generic (Cinder as back-end) driver is not the production solution. It uses"},{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_b92b05eb","line":107,"in_reply_to":"3a29b11f_04f737d4","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":105,"context_line":"    specific driver and its configuration for the security services."},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"The Generic (Cinder as back-end) driver is not the production solution. It uses"},{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"},{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_2426f368","line":108,"updated":"2015-10-19 14:35:26.000000000","message":"Don\u0027t use NOva and Cinder this way, see\n\nhttps://wiki.openstack.org/wiki/Documentation/Conventions#Service_and_project_names","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":105,"context_line":"    specific driver and its configuration for the security services."},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"The Generic (Cinder as back-end) driver is not the production solution. It uses"},{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"},{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_991409f6","line":108,"in_reply_to":"3a29b11f_2426f368","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"},{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"},{"line_number":112,"context_line":"services."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic Driver with NFS or CIFS shared file system protocol supports only"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_a4f1a3cf","line":111,"updated":"2015-10-19 14:35:26.000000000","message":"Just say \"Some\" instead of listing all of them. You don\u0027t want to update this too often ;)","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":108,"context_line":"Nova VMs and Cinder volumes, cares about everything (the VMs, networking,"},{"line_number":109,"context_line":"keypairs, security groups) while creating the share servers. The Generic driver"},{"line_number":110,"context_line":"does not support any of the hereinabove security services. The Hitachi HNAS, HP"},{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"},{"line_number":112,"context_line":"services."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic Driver with NFS or CIFS shared file system protocol supports only"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_f9c89d76","line":111,"in_reply_to":"3a29b11f_a4f1a3cf","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"},{"line_number":112,"context_line":"services."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic Driver with NFS or CIFS shared file system protocol supports only"},{"line_number":115,"context_line":"authentication method through the IP address."},{"line_number":116,"context_line":""},{"line_number":117,"context_line":".. tip::"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_24b4b3f0","line":114,"updated":"2015-10-19 14:35:26.000000000","message":"generic driver, no need to upper case","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":111,"context_line":"3PAR, Huawei, Quobyte, EMC Isilon, ZFS also do not support any of the security"},{"line_number":112,"context_line":"services."},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic Driver with NFS or CIFS shared file system protocol supports only"},{"line_number":115,"context_line":"authentication method through the IP address."},{"line_number":116,"context_line":""},{"line_number":117,"context_line":".. tip::"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_b9a1c5ab","line":114,"in_reply_to":"3a29b11f_24b4b3f0","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":129,"context_line":"    The authentication via IP is the most weak."},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"The only driver that supports all three authentication services is NetApp"},{"line_number":132,"context_line":"Clustered Data ONTAP from the OpenStack Juno release."},{"line_number":133,"context_line":""},{"line_number":134,"context_line":"The recommended configuration for the Shared File Systems service real usage"},{"line_number":135,"context_line":"is to create a share with CIFS share protocol and add to it the Microsoft"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_c4c5bf5b","line":132,"updated":"2015-10-19 14:35:26.000000000","message":"That\u0027s information for the Configuration reference but leave it out here.","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":129,"context_line":"    The authentication via IP is the most weak."},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"The only driver that supports all three authentication services is NetApp"},{"line_number":132,"context_line":"Clustered Data ONTAP from the OpenStack Juno release."},{"line_number":133,"context_line":""},{"line_number":134,"context_line":"The recommended configuration for the Shared File Systems service real usage"},{"line_number":135,"context_line":"is to create a share with CIFS share protocol and add to it the Microsoft"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_199d5965","line":132,"in_reply_to":"3a29b11f_c4c5bf5b","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e8b5e46084c849a1f8dd0bf721b429d1ed64eb3c","unresolved":false,"context_lines":[{"line_number":20,"context_line":"protocols as LDAP and Kerberos, or with Microsoft Active directory"},{"line_number":21,"context_line":"authentication service can be used by the Shared File Systems service if they"},{"line_number":22,"context_line":"exist and are supported by the drivers and back ends. These authentication"},{"line_number":23,"context_line":"services also can be configured without the Shared File Systems service."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"Security services management"},{"line_number":26,"context_line":"----------------------------"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_cd70df0d","line":23,"updated":"2015-10-22 14:06:13.000000000","message":"Need to mention that it is required in some cases. For example, NetApp, EMC and Windows drivers require Active Directory for creation of shares with CIFS protocol.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":20,"context_line":"protocols as LDAP and Kerberos, or with Microsoft Active directory"},{"line_number":21,"context_line":"authentication service can be used by the Shared File Systems service if they"},{"line_number":22,"context_line":"exist and are supported by the drivers and back ends. These authentication"},{"line_number":23,"context_line":"services also can be configured without the Shared File Systems service."},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"Security services management"},{"line_number":26,"context_line":"----------------------------"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_3459938e","line":23,"in_reply_to":"3a29b11f_cd70df0d","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e8b5e46084c849a1f8dd0bf721b429d1ed64eb3c","unresolved":false,"context_lines":[{"line_number":35,"context_line":"key concepts:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"* Tenants provide the details for the security service."},{"line_number":38,"context_line":"* Administrators should not care about security services."},{"line_number":39,"context_line":"* Inside The Shared File Systems API, a ``security_service`` is associated with"},{"line_number":40,"context_line":"  the ``share_networks``."},{"line_number":41,"context_line":"* The share drivers use the information in the security service to configure"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_cdde9fdc","line":38,"updated":"2015-10-22 14:06:13.000000000","message":"They configure server side of such security services. They do care.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":35,"context_line":"key concepts:"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":"* Tenants provide the details for the security service."},{"line_number":38,"context_line":"* Administrators should not care about security services."},{"line_number":39,"context_line":"* Inside The Shared File Systems API, a ``security_service`` is associated with"},{"line_number":40,"context_line":"  the ``share_networks``."},{"line_number":41,"context_line":"* The share drivers use the information in the security service to configure"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_7434ebfa","line":38,"in_reply_to":"3a29b11f_cdde9fdc","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e8b5e46084c849a1f8dd0bf721b429d1ed64eb3c","unresolved":false,"context_lines":[{"line_number":71,"context_line":"* A user or group name that is used by the tenant."},{"line_number":72,"context_line":"* The password for the user, if you specify a user name."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"An existing security service entity can be associated with the share network"},{"line_number":75,"context_line":"entity that informs the Shared File Systems service about the security and"},{"line_number":76,"context_line":"network configuration for a group of shares. You can also see the list of all"},{"line_number":77,"context_line":"security services for a specified share network and disassociate them from"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_ed87dbb2","line":74,"updated":"2015-10-22 14:06:13.000000000","message":"It can be associated with more than one share network.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":71,"context_line":"* A user or group name that is used by the tenant."},{"line_number":72,"context_line":"* The password for the user, if you specify a user name."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"An existing security service entity can be associated with the share network"},{"line_number":75,"context_line":"entity that informs the Shared File Systems service about the security and"},{"line_number":76,"context_line":"network configuration for a group of shares. You can also see the list of all"},{"line_number":77,"context_line":"security services for a specified share network and disassociate them from"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_4f227ca4","line":74,"in_reply_to":"3a29b11f_ed87dbb2","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e8b5e46084c849a1f8dd0bf721b429d1ed64eb3c","unresolved":false,"context_lines":[{"line_number":105,"context_line":"    See the driver vendor\u0027s documentation for the specific driver and its"},{"line_number":106,"context_line":"    configuration for the security services."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"The Generic (Block Storage as back-end) driver is not the production solution."},{"line_number":109,"context_line":"It uses the Compute service VMs and the Block Storage service volumes, cares"},{"line_number":110,"context_line":"about everything: the VMs, networking, keypairs, security groups, while"},{"line_number":111,"context_line":"creating the share servers. The Generic driver and some other drivers do not"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_6d50ab32","line":108,"updated":"2015-10-22 14:06:13.000000000","message":"Looks like it is redundant part. It should be described in driver-dedicated doc.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":105,"context_line":"    See the driver vendor\u0027s documentation for the specific driver and its"},{"line_number":106,"context_line":"    configuration for the security services."},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"The Generic (Block Storage as back-end) driver is not the production solution."},{"line_number":109,"context_line":"It uses the Compute service VMs and the Block Storage service volumes, cares"},{"line_number":110,"context_line":"about everything: the VMs, networking, keypairs, security groups, while"},{"line_number":111,"context_line":"creating the share servers. The Generic driver and some other drivers do not"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_8fbc14bc","line":108,"in_reply_to":"3a29b11f_6d50ab32","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"}],"security-guide/source/shared-file-systems/share-acl.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"1d77aed30a091c86478d3cf70be943a3598c60c4","unresolved":false,"context_lines":[{"line_number":142,"context_line":""},{"line_number":143,"context_line":".. code:: console"},{"line_number":144,"context_line":""},{"line_number":145,"context_line":" $ sudo mount.nfs -v 10.254.0.3:/shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de /mnt"},{"line_number":146,"context_line":" $ ls -a /mnt"},{"line_number":147,"context_line":" .  ..  lost+found"},{"line_number":148,"context_line":" $ echo \"Hello!\" \u003e /mnt/1.txt"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_a476833c","line":145,"updated":"2015-10-19 14:35:26.000000000","message":"Don\u0027t use sudo, use # instead, see https://wiki.openstack.org/wiki/Documentation/Markup_conventions#Command_line_prompt","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"82001c90379787b095d7cd01400cf70b35f2f911","unresolved":false,"context_lines":[{"line_number":142,"context_line":""},{"line_number":143,"context_line":".. code:: console"},{"line_number":144,"context_line":""},{"line_number":145,"context_line":" $ sudo mount.nfs -v 10.254.0.3:/shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de /mnt"},{"line_number":146,"context_line":" $ ls -a /mnt"},{"line_number":147,"context_line":" .  ..  lost+found"},{"line_number":148,"context_line":" $ echo \"Hello!\" \u003e /mnt/1.txt"}],"source_content_type":"text/x-rst","patch_set":11,"id":"3a29b11f_d3182087","line":145,"in_reply_to":"3a29b11f_a476833c","updated":"2015-10-19 16:13:35.000000000","message":"Done","commit_id":"038a949c4d36f4cd2baf8ffa269a0be2086ea6a8"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e6d7d2fe098cf0c9f3a2db52e5b32d170bd4f615","unresolved":false,"context_lines":[{"line_number":70,"context_line":"  to 32 characters long."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":".. note::"},{"line_number":73,"context_line":"    The supported authentication methods depend on which share driver, security"},{"line_number":74,"context_line":"    service, which can be LDAP, Kerberos, or Active Directory, you configure"},{"line_number":75,"context_line":"    and use, and which shared file system protocol you use. Supported shared"},{"line_number":76,"context_line":"    file system protocols are NFS, CIFS, GlusterFS, and HDFS. For details of"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_d8997bc5","line":73,"updated":"2015-10-22 14:13:05.000000000","message":"This sentence has lost some parts. It does not look consistent. \n\n... which share driver \"what?\"","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":70,"context_line":"  to 32 characters long."},{"line_number":71,"context_line":""},{"line_number":72,"context_line":".. note::"},{"line_number":73,"context_line":"    The supported authentication methods depend on which share driver, security"},{"line_number":74,"context_line":"    service, which can be LDAP, Kerberos, or Active Directory, you configure"},{"line_number":75,"context_line":"    and use, and which shared file system protocol you use. Supported shared"},{"line_number":76,"context_line":"    file system protocols are NFS, CIFS, GlusterFS, and HDFS. For details of"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_ef28289c","line":73,"in_reply_to":"3a29b11f_d8997bc5","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"e6d7d2fe098cf0c9f3a2db52e5b32d170bd4f615","unresolved":false,"context_lines":[{"line_number":135,"context_line":".. code:: console"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":" # cat /etc/exports"},{"line_number":138,"context_line":" /shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de\t10.254.0.4(rw,sync,wdelay,hide,nocrossmnt,secure,root_squash,no_all_squash,no_subtree_check,secure_locks,acl,anonuid\u003d65534,anongid\u003d65534,sec\u003dsys,rw,root_squash,no_all_squash)"},{"line_number":139,"context_line":" #"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"Now we can mount a share on the host with IP address ``10.254.0.4`` and have"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_58d6cb28","line":138,"updated":"2015-10-22 14:13:05.000000000","message":"It contains special chars. Not sure it is ok.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":135,"context_line":".. code:: console"},{"line_number":136,"context_line":""},{"line_number":137,"context_line":" # cat /etc/exports"},{"line_number":138,"context_line":" /shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de\t10.254.0.4(rw,sync,wdelay,hide,nocrossmnt,secure,root_squash,no_all_squash,no_subtree_check,secure_locks,acl,anonuid\u003d65534,anongid\u003d65534,sec\u003dsys,rw,root_squash,no_all_squash)"},{"line_number":139,"context_line":" #"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"Now we can mount a share on the host with IP address ``10.254.0.4`` and have"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_6a0886da","line":138,"in_reply_to":"3a29b11f_58d6cb28","updated":"2015-10-23 08:31:54.000000000","message":"In the raw code and build version, there are no special chars. This char appears only on the gerrit.","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"0597f283170951e6d2a55fc857b720e3ab2fa3d3","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"The shares can be created as public and private. This is the level of"},{"line_number":13,"context_line":"visibility for the share that defines whether other tenants can or cannot see"},{"line_number":14,"context_line":"the share."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"The share can be *public* and *private*. This is a level of visibility for the"},{"line_number":17,"context_line":"share that defines whether other tenants can or cannot see the share. By"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_1d3e60b8","line":14,"updated":"2015-10-30 18:45:55.000000000","message":"This is also the next two sentences, this occurrence can be deleted.","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"The shares can be created as public and private. This is the level of"},{"line_number":13,"context_line":"visibility for the share that defines whether other tenants can or cannot see"},{"line_number":14,"context_line":"the share."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"The share can be *public* and *private*. This is a level of visibility for the"},{"line_number":17,"context_line":"share that defines whether other tenants can or cannot see the share. By"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_68fc5072","line":14,"in_reply_to":"1a26ad4f_1d3e60b8","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"0597f283170951e6d2a55fc857b720e3ab2fa3d3","unresolved":false,"context_lines":[{"line_number":34,"context_line":"    protocol."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"When the share is just created there are no created access rules and expected"},{"line_number":37,"context_line":"permission to mount a share is for nobody. This is obtained by the mounting"},{"line_number":38,"context_line":"config for the certain export protocol. For example, for the NFS protocol there"},{"line_number":39,"context_line":"is ``exportfs`` command or ``/etc/exports`` file on the storage which controls"},{"line_number":40,"context_line":"each remote share and the hosts that can access it. It is empty if nobody can"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_9d9fd0b3","line":37,"updated":"2015-10-30 18:45:55.000000000","message":"remove \u0027is for nobody\u0027","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":34,"context_line":"    protocol."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"When the share is just created there are no created access rules and expected"},{"line_number":37,"context_line":"permission to mount a share is for nobody. This is obtained by the mounting"},{"line_number":38,"context_line":"config for the certain export protocol. For example, for the NFS protocol there"},{"line_number":39,"context_line":"is ``exportfs`` command or ``/etc/exports`` file on the storage which controls"},{"line_number":40,"context_line":"each remote share and the hosts that can access it. It is empty if nobody can"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_68e690b1","line":37,"in_reply_to":"1a26ad4f_9d9fd0b3","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"0597f283170951e6d2a55fc857b720e3ab2fa3d3","unresolved":false,"context_lines":[{"line_number":97,"context_line":""},{"line_number":98,"context_line":".. code:: console"},{"line_number":99,"context_line":""},{"line_number":100,"context_line":" # mount.nfs -v 10.254.0.3:/shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de /mnt"},{"line_number":101,"context_line":" mount.nfs: timeout set for Mon Oct 12 13:07:47 2015"},{"line_number":102,"context_line":" mount.nfs: trying text-based options \u0027vers\u003d4,addr\u003d10.254.0.3,clientaddr\u003d10.254.0.4\u0027"},{"line_number":103,"context_line":" mount.nfs: mount(2): Permission denied"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_90c017e2","line":100,"updated":"2015-10-30 18:45:55.000000000","message":"Here you use # for the command prompt, below you use $. Per OpenStack documentation conventions, # is used for commands requiring root (admin) privileges, and $ is used elsewhere.","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":97,"context_line":""},{"line_number":98,"context_line":".. code:: console"},{"line_number":99,"context_line":""},{"line_number":100,"context_line":" # mount.nfs -v 10.254.0.3:/shares/share-b2874f8d-d428-4a5c-b056-e6af80a995de /mnt"},{"line_number":101,"context_line":" mount.nfs: timeout set for Mon Oct 12 13:07:47 2015"},{"line_number":102,"context_line":" mount.nfs: trying text-based options \u0027vers\u003d4,addr\u003d10.254.0.3,clientaddr\u003d10.254.0.4\u0027"},{"line_number":103,"context_line":" mount.nfs: mount(2): Permission denied"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_a82ee840","line":100,"in_reply_to":"1a26ad4f_90c017e2","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"0597f283170951e6d2a55fc857b720e3ab2fa3d3","unresolved":false,"context_lines":[{"line_number":109,"context_line":".. code:: console"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":" $ cat /etc/exports"},{"line_number":112,"context_line":" $"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic driver we use in example doesn\u0027t support any of the security"},{"line_number":115,"context_line":"services, thus with NFS shared file system protocol we can grant access only"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_10ade730","line":112,"updated":"2015-10-30 18:45:55.000000000","message":"Prompt should be #","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":109,"context_line":".. code:: console"},{"line_number":110,"context_line":""},{"line_number":111,"context_line":" $ cat /etc/exports"},{"line_number":112,"context_line":" $"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic driver we use in example doesn\u0027t support any of the security"},{"line_number":115,"context_line":"services, thus with NFS shared file system protocol we can grant access only"}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_c83324aa","line":112,"in_reply_to":"1a26ad4f_10ade730","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"0597f283170951e6d2a55fc857b720e3ab2fa3d3","unresolved":false,"context_lines":[{"line_number":111,"context_line":" $ cat /etc/exports"},{"line_number":112,"context_line":" $"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic driver we use in example doesn\u0027t support any of the security"},{"line_number":115,"context_line":"services, thus with NFS shared file system protocol we can grant access only"},{"line_number":116,"context_line":"through the IP address:"},{"line_number":117,"context_line":""}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_d0a68f52","line":114,"updated":"2015-10-30 18:45:55.000000000","message":"doesn\u0027t -\u003e does not","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"767172b9db98cbceeea58782d488e01b7b6a9166","unresolved":false,"context_lines":[{"line_number":111,"context_line":" $ cat /etc/exports"},{"line_number":112,"context_line":" $"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"The Generic driver we use in example doesn\u0027t support any of the security"},{"line_number":115,"context_line":"services, thus with NFS shared file system protocol we can grant access only"},{"line_number":116,"context_line":"through the IP address:"},{"line_number":117,"context_line":""}],"source_content_type":"text/x-rst","patch_set":25,"id":"1a26ad4f_a8b828c9","line":114,"in_reply_to":"1a26ad4f_d0a68f52","updated":"2015-11-02 14:02:57.000000000","message":"Done","commit_id":"30dc16dc5eefb6b7c3ab44a8c592655f87798a34"}],"security-guide/source/shared-file-systems/share-type-acl.rst":[{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"101e2a77d68851ee365160b2e6f47057a63072f3","unresolved":false,"context_lines":[{"line_number":8,"context_line":"extra specifications. The manila-scheduler uses extra specifications to make"},{"line_number":9,"context_line":"scheduling decisions, and drivers control the share creation."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The administrators cat create and delete share types, and manage the extra"},{"line_number":12,"context_line":"specifications that give them meaning inside the Shared File Systems service."},{"line_number":13,"context_line":"Tenants can list the share types and can use them to create new shares. For"},{"line_number":14,"context_line":"details of managing the share types, see `Shared File Systems API"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_d8989b7a","line":11,"updated":"2015-10-22 14:17:12.000000000","message":"s/cat/can/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":8,"context_line":"extra specifications. The manila-scheduler uses extra specifications to make"},{"line_number":9,"context_line":"scheduling decisions, and drivers control the share creation."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"The administrators cat create and delete share types, and manage the extra"},{"line_number":12,"context_line":"specifications that give them meaning inside the Shared File Systems service."},{"line_number":13,"context_line":"Tenants can list the share types and can use them to create new shares. For"},{"line_number":14,"context_line":"details of managing the share types, see `Shared File Systems API"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_8a6402b9","line":11,"in_reply_to":"3a29b11f_d8989b7a","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":8851,"name":"Valeriy Ponomaryov","email":"kiparis.kh@gmail.com","username":"vponomaryov"},"change_message_id":"101e2a77d68851ee365160b2e6f47057a63072f3","unresolved":false,"context_lines":[{"line_number":73,"context_line":" | 5..| default| public    | YES       | driver_handles_share_servers:True| snapshot_support:True|"},{"line_number":74,"context_line":" +----+--------+-----------+-----------+----------------------------------+----------------------+"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The administrator cat grant the access to the private share type for the demo"},{"line_number":77,"context_line":"tenant with the tenant ID equal to df29a37db5ae48d19b349fe947fada46:"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":".. code:: console"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_38850fce","line":76,"updated":"2015-10-22 14:17:12.000000000","message":"s/cat/can/","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"},{"author":{"_account_id":16433,"name":"izadorozhna","email":"izadorozhna@mirantis.com","username":"izadorozhna"},"change_message_id":"bd23e8840c2d24aeaaa957b9322aebc2d27fbd51","unresolved":false,"context_lines":[{"line_number":73,"context_line":" | 5..| default| public    | YES       | driver_handles_share_servers:True| snapshot_support:True|"},{"line_number":74,"context_line":" +----+--------+-----------+-----------+----------------------------------+----------------------+"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"The administrator cat grant the access to the private share type for the demo"},{"line_number":77,"context_line":"tenant with the tenant ID equal to df29a37db5ae48d19b349fe947fada46:"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":".. code:: console"}],"source_content_type":"text/x-rst","patch_set":14,"id":"3a29b11f_ea757663","line":76,"in_reply_to":"3a29b11f_38850fce","updated":"2015-10-23 08:31:54.000000000","message":"Done","commit_id":"e97f05a7fc0b64ba33d71c713680a34d9f2f5db5"}]}