Re: [Openstack] keystone middleware

2013-02-19 Thread David Chadwick
Hi Pat do you expect the one central user store to be replicated, say in Keystone, or not replicated? The approach we have taken is to assume that the user stores (we support multiple distributed ones) are external to Keystone, and will be managed by external administrators. When a user

Re: [Openstack] keystone middleware

2013-02-19 Thread pat
Hello, Comments inline. On Mon, 18 Feb 2013 19:56:00 -0600, Dolph Mathews wrote On Mon, Feb 18, 2013 at 9:59 AM, pat p...@xvalheru.org wrote: Hello, Sorry to disturb, but I have some questions regarding keystone middleware. Some introduction to problem: I need to integrate OpenStack to our

Re: [Openstack] keystone middleware

2013-02-19 Thread pat
Hi, Expecting single external user store which is RO for keystone. In common the users store is LDAP. As I wrote the key thing here is the generated token. Pat On Tue, 19 Feb 2013 10:44:59 +, David Chadwick wrote Hi Pat do you expect the one central user store to be replicated, say

[Openstack] keystone middleware

2013-02-18 Thread pat
Hello, Sorry to disturb, but I have some questions regarding keystone middleware. Some introduction to problem: I need to integrate OpenStack to our existing infrastructure where all systems are integrated on REST and Web level using SSO-like system (there's generated a token string with

Re: [Openstack] keystone middleware

2013-02-18 Thread David Chadwick
Hi Pat sounds like you need our federation software which was designed specifically for this use case. We currently support SAML as the SSO protocol, and have just added Keystone to Keystone SSO. I have also written a blueprint to show how OAuthv2 and OpenConnect can be used by writing

Re: [Openstack] keystone middleware

2013-02-18 Thread pat
Hi David, Well, it might be useful. I forget to add that I expect one (central) user store. Thanks Pat On Mon, 18 Feb 2013 16:11:05 +, David Chadwick wrote Hi Pat sounds like you need our federation software which was designed specifically for this use case. We currently

Re: [Openstack] keystone middleware

2013-02-18 Thread Dolph Mathews
On Mon, Feb 18, 2013 at 9:59 AM, pat p...@xvalheru.org wrote: Hello, Sorry to disturb, but I have some questions regarding keystone middleware. Some introduction to problem: I need to integrate OpenStack to our existing infrastructure where all systems are integrated on REST and Web level