“I’ll gladly pay you Tuesday for a Hamburger Today” –Wimpy, from the Popeye Cartoon.
Sometimes you need to authorize a service to perform an action on your behalf. Often, that action takes place long after any authentication token you can provide would have expired. Currently, the only mechanism in Keystone that people can use is to share credentials. We can do better.
The Live CD shipped with Fedora 18 is a perfectly serviceable virtual machine image, provided you give it some writeable disk space. It even ships with a tool to make this happen. All it needs is a block device. Continue reading
Once you have a Directory server installed, you are going to want to query against it from throughout the Network. For many reasons, you will want traffic to the server encrypted. Here are the steps to quest against a server using LDAPS from a remote machine.
There have been a few questions regarding PKI tokens and their testing in the Openstack code base. Here are the steps:
Once again it is time to brain dump the things I want to make happen in the next release of Open Stack.
I’ve put a fair amount of time into the Signed Tokens implementation. Now that they have been merged into the master branch of Keystone, I’d like to get some more people playing around with the feature, and see how it impacts things. Continue reading
With Openstack, I find I often have a patch up for review that I want to use as the basis for future work. When a review comes in, I have to make the changes for the review and update the commit. There are a couple ways to go about doing it, but here is one that has worked for me. Continue reading
If you ever want to build and RPM, you need to make sure that the things it requires are installed. These are listed in the SPEC file on lines that begin with BuildRequires. Installing these by hand is time consuming enough that it should be automated. Here’s a first hack in Python.
#!/usr/bin/python
import sys
import re
build_re = re.compile('BuildRequires:.*')
compare_re = re.compile('.*=.*')
def main():
if (len(sys.argv) > 1):
spec = open(sys.argv[1])
for line in spec:
if build_re.match(line):
for token in line.rsplit(" "):
if build_re.match(token):
continue
if compare_re.match(token):
break
token = token.rstrip(" ,\n\r")
if len(token) > 0:
print token
if __name__ == "__main__":
main()
To use it, save in a file called buildreqs.py and run:
sudo yum install `./buidreqs.py ~/rpmbuild/SPECS/krb5.spec`
If you write database driven applications, you probably have used SQLite at some point. Since it is a simple embedded database, it is a logical choice to use for unit tests that go to the database. However, SQLite performance on Ext4 (default Fedora File system) is lack-luster.
A cheap way to speed things up is to use a ramdisk as the backing store for the database.
Continue reading
I’ve been trying to find a way to algorithmically generate sheet music. In looking into both Lilypond and ABC one thing is apparent: they are both based on the Major scale, which make s the notation weird. If you are only concerned about major scales.
Continue reading