[
https://issues.apache.org/jira/browse/JCLOUDS-1414?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16459940#comment-16459940
]
Alix Lourme commented on JCLOUDS-1414:
--------------------------------------
Hello [~nacx],
{quote}
would you like to try going one step further and open a pull request to improve
this?
{quote}
Yes I can try.
About spec, Are we agree that the most sustainable solution is to introduce
(and support) a new dedicated property in
[KeystoneProperties.java|https://github.com/jclouds/jclouds/blob/master/apis/openstack-keystone/src/main/java/org/jclouds/openstack/keystone/config/KeystoneProperties.java]
?
Like this:
{code}
/**
* Set this property to specify the domain of project (tenant) scope.
* Required property when authentication {@link #SCOPE} is 'project:' and
project (tenant) domain is different than the user domain (Otherwise, the
domain used is the same as the user).
*
* @see <a
href="https://docs.openstack.org/keystone/latest/api_curl_examples.html#project-scoped";>openstack
docs : Identity service (Keystone)</a>
*/
public static final String TENANT_DOMAIN = "jclouds.keystone.tenant-domain";
{code}
> OpenStack Keystone V3: Support different "domain" for "identity/user" and
> "project"
> -----------------------------------------------------------------------------------
>
> Key: JCLOUDS-1414
> URL: https://issues.apache.org/jira/browse/JCLOUDS-1414
> Project: jclouds
> Issue Type: Improvement
> Components: jclouds-core
> Affects Versions: 2.1.0
> Reporter: Alix Lourme
> Priority: Minor
> Labels: keystone, openstack
>
> The [OpenStack KeyStone
> V3|https://jclouds.apache.org/blog/2018/01/16/keystone-v3/] is great, but
> fails when OpenStack platform in endpoint requires a _identify/user_ *domain*
> different than _project_ *domain.*
> Consider this required content for https://[host]/v3/auth/tokens endpoint:
> {code}
> {
> "auth": {
> "identity": {
> "methods": ["password"],
> "password": {
> "user": {
> "name": "foo",
> "domain": {
> "name": "ldap"
> },
> "password": "bar"
> }
> }
> },
> "scope": {
> "project": {
> "name": "myTenantName",
> "domain": {
> "name": "default"
> }
> }
> }
> }
> }
> {code}
> The
> [BaseAuthenticator|https://github.com/jclouds/jclouds/blob/f7b45341328410dea583901a31218a3588cb5aad/apis/openstack-keystone/src/main/java/org/jclouds/openstack/keystone/auth/functions/BaseAuthenticator.java#L84]
> is using always the same domain for the request :(.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
