>
>
>>
>> I'm surprised any AD administrator let Keystone write to it. I've always
>> hear the inverse that AD admins never would allow keystone to write to it,
>> therefore it was never used for Projects or Assignments. Users were
>> likewise read-only when AD was involved.
>>
>> I have seen
>
>
>
> I'm surprised any AD administrator let Keystone write to it. I've always
> hear the inverse that AD admins never would allow keystone to write to it,
> therefore it was never used for Projects or Assignments. Users were
> likewise read-only when AD was involved.
>
> I have seen normal LDAP
m: Andrey Grebennikov <agrebenni...@mirantis.com>
>>>> Reply: OpenStack Development Mailing List (not for usage questions)
>>>> <openstack-dev@lists.openstack.org>
>>>> Date: December 5, 2016 at 12:22:09
>>>> To: openstack-dev@lists.openstac
On 06/12/16 12:15, Andrey Grebennikov wrote:
>
> Just to clarify, the reason you want custom project IDs is so that
> when you create a project in one region, you can create it again
> with the same ID in another? Isn't that just manual replication
> though?
>
> What happens
sage questions)
>>> <openstack-dev@lists.openstack.org>
>>> Date: December 5, 2016 at 12:22:09
>>> To: openstack-dev@lists.openstack.org <openstack-dev@lists.openstack.org
>>> >
>>> Subject: [openstack-dev] [keystone] Custom Proje
On 12/06/2016 01:46 AM, Andrey Grebennikov wrote:
> Hi,
>
> On 12/05/2016 09:20 PM, Andrey Grebennikov wrote:
> > Hi keystoners,
> > I'd like to open the discussion about the little feature which I'm
> > trying to push forward for a while but I need some
> >
>
> Just to clarify, the reason you want custom project IDs is so that when
> you create a project in one region, you can create it again with the same
> ID in another? Isn't that just manual replication though?
>
> What happens when there are projects in only one region? Or if that isn't
> meant
Just to clarify, the reason you want custom project IDs is so that when
you create a project in one region, you can create it again with the
same ID in another? Isn't that just manual replication though?
What happens when there are projects in only one region? Or if that
isn't meant to happen,
ack-dev@lists.openstack.org>
>> Date: December 5, 2016 at 12:22:09
>> To: openstack-dev@lists.openstack.org <openstack-dev@lists.openstack.org>
>> Subject: [openstack-dev] [keystone] Custom ProjectID upon creation
>>
>> > Hi keystoners,
>>
>&
>
> Hi,
>
> On 12/05/2016 09:20 PM, Andrey Grebennikov wrote:
> > Hi keystoners,
> > I'd like to open the discussion about the little feature which I'm
> > trying to push forward for a while but I need some
> > feedbacks/opinions/concerns regarding this.
> > Here is the review I'm talking
> >
ists.openstack.org <openstack-dev@lists.openstack.org>
> Subject: [openstack-dev] [keystone] Custom ProjectID upon creation
>
> > Hi keystoners,
>
> I'm not a keystoner, but I hope youu don't mind my replying.
> > I'd like to open the discussion about the little feature w
On 05-Dec 15:14, Lance Bragstad wrote:
> I put myself in Boris' camp on this one. This can open up the opportunity
> for negative user-experience, purely based on where I authenticate and
> which token I happen to authenticate with. A token would no longer be
> something I can assume to be
tack-dev@lists.openstack.org>
> Subject: [openstack-dev] [keystone] Custom ProjectID upon creation
>
> > Hi keystoners,
>
> I'm not a keystoner, but I hope youu don't mind my replying.
>
> > I'd like to open the discussion about the little feature which I'm trying
> &
s.openstack.org>
Subject: [openstack-dev] [keystone] Custom ProjectID upon creation
> Hi keystoners,
I'm not a keystoner, but I hope youu don't mind my replying.
> I'd like to open the discussion about the little feature which I'm trying
> to push forward for a while but I need some
Hi,
On 12/05/2016 09:20 PM, Andrey Grebennikov wrote:
> Hi keystoners,
> I'd like to open the discussion about the little feature which I'm
> trying to push forward for a while but I need some
> feedbacks/opinions/concerns regarding this.
> Here is the review I'm talking
> about
The ability to specify IDs at project creation time was proposed as a
specification last summer [0]. The common theme from the discussion in that
thread was to use shadow mapping [1] to solve that problem.
[0] https://review.openstack.org/#/c/323499/
[1]
I'm OK with the agreed approach in the patch, we restrict the ID being
specified to 32 character UUID4 string. And it only works on project
create, not update.
On Mon, Dec 5, 2016 at 1:20 PM, Andrey Grebennikov <
agrebenni...@mirantis.com> wrote:
> Hi keystoners,
> I'd like to open the
Hi keystoners,
I'd like to open the discussion about the little feature which I'm trying
to push forward for a while but I need some feedbacks/opinions/concerns
regarding this.
Here is the review I'm talking about https://review.
openstack.org/#/c/403866/
What I'm trying to cover is multi-region
18 matches
Mail list logo
