Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-08 Thread Steve Martinelli 
Not sure if this helps, but at one point we had someone propose install
instructions for moonshot and apache:
https://review.openstack.org/#/c/163878/10/doc/source/extensions/abfab.rst

Steve



From:   "Van Leeuwen, Robert" <rovanleeu...@ebay.com>
To: pratik dave <prtkd...@gmail.com>
Cc: "openstack@lists.openstack.org" <openstack@lists.openstack.org>
Date:   2016/02/08 04:01 AM
Subject:Re: [Openstack] Fwd: Need to integrate radius server with
OpenStack



>Now we are stuck at this point how to authenticate users via free radius.
>Any help or pointers on this would be grateful.



Hi Pratik,


You can write your own keystone middleware to authenticate with.

There is a nice doc about that here:
http://docs.openstack.org/developer/keystone/external-auth.html

Note that if you use external_auth as in the example it will only take over
the authentication:
The user will still need to exist in keystone and roles need to be assigned
in the keystone backend.

For  a "fully integrated” solution you will have to look at LDAP afaik.

Cheers,
Robert van Leeuwen___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-08 Thread Van Leeuwen, Robert 
>Now we are stuck at this point how to authenticate users via free radius.
>Any help or pointers on this would be grateful.


Hi Pratik,

You can write your own keystone middleware to authenticate with.

There is a nice doc about that here:
http://docs.openstack.org/developer/keystone/external-auth.html

Note that if you use external_auth as in the example it will only take over the 
authentication:
The user will still need to exist in keystone and roles need to be assigned in 
the keystone backend.

For  a "fully integrated” solution you will have to look at LDAP afaik.

Cheers,
Robert van Leeuwen
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-05 Thread pratik dave 
Hi,

We have two servers on same subnet.

We have setup freeradius on one server and OpenStack with devstack on
another.

We are using mooshot and we have installed moonshot libraries and enabled
auth_gssapi  module with apache2.4 .

We have enabled websso in OpenStack horizon. Our freeradius setup is
working tested locally.

Now we are stuck at this point how to authenticate users via freeradius.

Any help or pointers on this would be grateful.

Thank you.
On Feb 5, 2016 12:03 AM, "Anthony T CHOW" <anthony.c...@al-enterprise.com>
wrote:

> Pratik,
>
>
>
> I think Ubuntu server comes with a RADIUS server that you can enable.
> When you say dependencies you mean enabling “Free RADIUS” and “Moonshot” or
> with OpenStack.
>
>
>
> I find this article interesting on Keystone but may not apply to your case:
>
> https://blog-nkinder.rhcloud.com/?p=130
>
> Have a nice day,
>
>
>
> Anthony.
>
>
>
> *From:* pratik dave [mailto:prtkd...@gmail.com]
> *Sent:* Thursday, February 04, 2016 10:00 AM
> *To:* Simon Pasquier
> *Cc:* openstack@lists.openstack.org
> *Subject:* Re: [Openstack] Fwd: Need to integrate radius server with
> OpenStack
>
>
>
> Dear Simon, let me know if u still need more information.
>
> Thank you.
>
> On Feb 4, 2016 8:25 PM, "pratik dave" <prtkd...@gmail.com> wrote:
>
> I want to use radius for authentication.
> I am trying with free radius and moonshot. But not getting through
> dependencies.
>
> Do u know any other way than moonshot?
>
> On Feb 1, 2016 7:46 PM, "Simon Pasquier" <spasqu...@mirantis.com> wrote:
>
> Hello,
>
> I think you need to provide more details about what kind of integration
> you want to achieve:
>
> - Do you want to use RADIUS for authentication & authorization? For
> accounting?
>
> - Do you seek for integration with LDAP/Active Directory?
>
> - Something else?
>
> BR,
>
> Simon
>
>
>
> On Mon, Jan 18, 2016 at 10:26 AM, pratik dave <prtkd...@gmail.com> wrote:
>
> Hi,
> >
> > We want to integrate our radius server with OpenStack kilo release.
> >
> > Can anyone gives some pointers?
>
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-04 Thread pratik dave 
I want to use radius for authentication.
I am trying with free radius and moonshot. But not getting through
dependencies.

Do u know any other way than moonshot?
On Feb 1, 2016 7:46 PM, "Simon Pasquier"  wrote:

> Hello,
> I think you need to provide more details about what kind of integration
> you want to achieve:
> - Do you want to use RADIUS for authentication & authorization? For
> accounting?
> - Do you seek for integration with LDAP/Active Directory?
> - Something else?
> BR,
> Simon
>
> On Mon, Jan 18, 2016 at 10:26 AM, pratik dave  wrote:
>
>> Hi,
>> >
>> > We want to integrate our radius server with OpenStack kilo release.
>> >
>> > Can anyone gives some pointers?
>>
>> ___
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-04 Thread pratik dave 
Dear Simon, let me know if u still need more information.

Thank you.
On Feb 4, 2016 8:25 PM, "pratik dave"  wrote:

> I want to use radius for authentication.
> I am trying with free radius and moonshot. But not getting through
> dependencies.
>
> Do u know any other way than moonshot?
> On Feb 1, 2016 7:46 PM, "Simon Pasquier"  wrote:
>
>> Hello,
>> I think you need to provide more details about what kind of integration
>> you want to achieve:
>> - Do you want to use RADIUS for authentication & authorization? For
>> accounting?
>> - Do you seek for integration with LDAP/Active Directory?
>> - Something else?
>> BR,
>> Simon
>>
>> On Mon, Jan 18, 2016 at 10:26 AM, pratik dave  wrote:
>>
>>> Hi,
>>> >
>>> > We want to integrate our radius server with OpenStack kilo release.
>>> >
>>> > Can anyone gives some pointers?
>>>
>>> ___
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Fwd: Need to integrate radius server with OpenStack

2016-02-01 Thread Simon Pasquier 
Hello,
I think you need to provide more details about what kind of integration you
want to achieve:
- Do you want to use RADIUS for authentication & authorization? For
accounting?
- Do you seek for integration with LDAP/Active Directory?
- Something else?
BR,
Simon

On Mon, Jan 18, 2016 at 10:26 AM, pratik dave  wrote:

> Hi,
> >
> > We want to integrate our radius server with OpenStack kilo release.
> >
> > Can anyone gives some pointers?
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Fwd: Need to integrate radius server with OpenStack

2016-01-18 Thread pratik dave 
Hi,
>
> We want to integrate our radius server with OpenStack kilo release.
>
> Can anyone gives some pointers?
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack