[Openstack] keystone delegate Athentication

2013-02-06 Thread Mballo Cherif
Hi everybody ! I am wondering if it's possible to delegate keystone Authentication to an Authentication against a server (I have one Strong Authentication server) or an Identity Provider? If I make modification on keystoneclient code it may be possible? Any ideas? Please help me! Thanks !

Re: [Openstack] keystone delegate Athentication

2013-02-06 Thread Dolph Mathews
Adam Young is working on introducing delegation in grizzly: https://blueprints.launchpad.net/keystone/+spec/trusts I'm sure he'd appreciate some help if you'd like to contribute! -Dolph On Wed, Feb 6, 2013 at 8:54 AM, Mballo Cherif cherif.mba...@gemalto.comwrote: Hi everybody ! I am

Re: [Openstack] keystone delegate Athentication

2013-02-06 Thread Adam Young
Actually, this isn't trusts, if I understand it correctly, but rather the REMOTE_USER patch that went in earlier. THe short version is that you run keystone in Apache, and set up strong authentication in Apache. REMOTE_USER is from the wsgi (Python CGI) contract. It is the variable set by

Re: [Openstack] keystone delegate Athentication

2013-02-06 Thread David Chadwick
This is already available in a side branch of the Git hub in the federation code, written to support the following blueprint: https://blueprints.launchpad.net/keystone/+spec/federation We have a number of people already experimenting with the above code. We have a newer version available in