[one-users] econe-server, ssl_server and User not authorized

[Daniel Molina]

Hi Giovanni,

On 19 February 2012 17:58, Giovanni Toraldo <me at gionn.net> wrote:
> Hi,
>
> I was having authentication problems while trying to use the
> econe-tools and the OpenNebula EC2 public interface.
>
> There is a reason for getting:
> econe-describe-images: User not authorized
>
> even with correct credentials if ssl_server is unset (since I am not
> using an SSL proxy)?
>
> Setting ssl_server to the fqdn, the same used in the EC2_URL on the
> client side, made it works.

In order to authenticate using EC2, a signature must be generated in
both client and server sides. In the process of building this
signature the EC2_URL is used in the client, therefore the same URL
must be used in the server. In the server side, if the :ssl_server
parameter is not defined,  the :server parameter is used to build the
signature. If the :server parameter and the EC2_URL are different the
authentication will fail.

Hope this helps

>
> Thanks.
>
> --
> Giovanni Toraldo
> http://gionn.net/
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org

-- 
Daniel Molina
Project Engineer
OpenNebula - The Open Source Solution for Data Center Virtualization
www.OpenNebula.org | dmolina at opennebula.org | @OpenNebula