Re: [Openstack] keystone middleware

2013-02-19 Thread pat
Hello, Comments inline. On Mon, 18 Feb 2013 19:56:00 -0600, Dolph Mathews wrote On Mon, Feb 18, 2013 at 9:59 AM, pat p...@xvalheru.org wrote: Hello, Sorry to disturb, but I have some questions regarding keystone middleware. Some introduction to problem: I need to integrate OpenStack to our

Re: [Openstack] keystone middleware

2013-02-19 Thread pat
Hi, Expecting single external user store which is RO for keystone. In common the users store is LDAP. As I wrote the key thing here is the generated token. Pat On Tue, 19 Feb 2013 10:44:59 +, David Chadwick wrote Hi Pat do you expect the one central user store to be replicated, say

[Openstack] keystone middleware

2013-02-18 Thread pat
or step by step documentation (something for an ... :-))? I've read Middleware Architecture documentation and my questions are based on this. Thanks a lot for your help. Pat Freehosting PIPNI - http://www.pipni.cz

Re: [Openstack] keystone middleware

2013-02-18 Thread pat
Hi David, Well, it might be useful. I forget to add that I expect one (central) user store. Thanks Pat On Mon, 18 Feb 2013 16:11:05 +, David Chadwick wrote Hi Pat sounds like you need our federation software which was designed specifically for this use case. We currently

Re: [Openstack] keystone question

2013-02-10 Thread pat
Hi, Thanks a lot. Pat On Fri, 8 Feb 2013 08:52:13 -0500, Tong Li wrote The X-Auth-Token header in your request to validate the user token are not the same thing. You have to login as admin to get a token and hold on to that token, when a user request comes in with his token, you can hand

[Openstack] keystone question

2013-02-06 Thread pat
Hi all, I have a question about keystone. I have an application (Jee web one) which I want to authenticate against keystone. What I have to do? Thanks Pat Freehosting PIPNI - http://www.pipni.cz

Re: [Openstack] keystone questions

2012-08-29 Thread pat
answers and patience :-) Your answers are helpful to me. Pat On Tue, 28 Aug 2012 08:55:16 -0700, Joseph Heck wrote On Aug 28, 2012, at 12:41 AM, pat p...@xvalheru.org wrote: Thanks for Q1. About Q2, I more think about keystone instances and each has its own storage and the keystones

Re: [Openstack] keystone questions

2012-08-29 Thread pat
Hi Dolph, Well, I don't have such use case (this just came to my mind), but yes, it's with data redundancy, etc. I think about synchronization at Keystone level ... the failover is the problem. As I wrote, I'm curious if this is possible. Thanks for your answer. Pat On Wed, 29 Aug 2012 04

Re: [Openstack] keystone questions

2012-08-28 Thread pat
Hi Joe, Thanks for Q1. About Q2, I more think about keystone instances and each has its own storage and the keystones are interconnected and their data are replicated. The DB, in your suggestion, looks like single point of failure to me. Thanks for your time Pat On Mon, 27 Aug 2012 09:46

[Openstack] keystone questions

2012-08-27 Thread pat
Keystone to be a bottleneck? If so, could you point me to a “tutorial”? Or did I missed something important? Thanks a lot Pat Freehosting PIPNI - http://www.pipni.cz/ ___ Mailing list: https://launchpad.net

Re: [Openstack] implementing custom keystone module

2012-08-22 Thread pat
On Tue, 21 Aug 2012 17:38:54 -0400, Adam Young wrote On 08/21/2012 05:10 PM, pat wrote: Hello, I want to implement custom keystone authentication module. I went through the What are you trying to do? There is a good chance that one of the other modules can be a good example. Well

Re: [Openstack] multiple LDAPs in OpenStack

2012-08-21 Thread pat
Yes, you are right, but I want to collect information first ;-) Thanks to all Pat On Mon, 20 Aug 2012 18:07:45 -0500, Dolph Mathews wrote While there's no implementation of this in keystone today, I'm sure you could write your own LDAP driver in keystone, heavily leveraging the existing

[Openstack] implementing custom keystone module

2012-08-21 Thread pat
keystone and WSGI? And yes, I've never used python :-) Thanks for help. Pat P.S. I've googled a lot, but keystone is too common world :-( Freehosting PIPNI - http://www.pipni.cz/ ___ Mailing list: https

[Openstack] multiple LDAPs in OpenStack

2012-08-20 Thread pat
Hello, I'm new to this list and OpenStack at all. I want to ask a question: I want to ask if it's possible to use one LDAP per tenant. I've searched the web, but didn't found the answer. Thanks Pat Freehosting PIPNI - http://www.pipni.cz