Re: [openstack-dev] [keytone] Pike PTL

2016-11-25 Thread Marek Denis
Steve, You've done amazing job. Thanks for that and making keystone even better! Marek Denis ​ __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org

[openstack-dev] [keystone] Stepping down from keystone core

2016-11-22 Thread Marek Denis
can only hope my contributions and reviews have been useful and made OpenStack a little bit better. I wish you all the best in the future. With kind regards, Marek Denis __ OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [keystone] changes to keystone-core!

2016-02-03 Thread Marek Denis
___ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Marek Denis [marek.de...@cern.ch] ___

Re: [openstack-dev] [keystone federation] some questions about keystone IDP with SAML supported

2015-10-14 Thread Marek Denis
om/zaccone/3c3d4c8f39a19709bcd7/raw/d938f2f9d1cf06d29a81d57c8069c291fed66cab/k2k-env.sh https://gist.githubusercontent.com/zaccone/4bbc07d215c0047738b4/raw/75295fe32df88b24576ece69994270dc4eb19a6e/k2k-ecp-client.py my keystone version is kilo help me, thanks I hope I did! :-) -- M

Re: [openstack-dev] [Keystone] [Horizon] Federated Login

2015-08-11 Thread Marek Denis
Hi On 05.08.2015 19:36, Dolph Mathews wrote: yes this was my understanding of the discussion that took place many months ago. I had assumed (wrongly) that something had been done about it, but I guess from your message that we are no further forward on this Actually 2) above

Re: [openstack-dev] [keystone] Liberty SFE Request - Dynamic Policies

2015-07-14 Thread Marek Denis
I am +1 on this SFE. Dynamic Policy team has been working hard on this and they will for sure deliver nice features for Liberty. -- Marek Denis [marek.de...@cern.ch] __ OpenStack Development Mailing List (not for usage

Re: [openstack-dev] [Keystone][FFE] ECP wrapped assertions

2015-03-24 Thread Marek Denis
: https://review.openstack.org/#/c/166078/and 2) to actually use this new property in order to generate the ECP assertion: https://review.openstack.org/#/c/162866/ Thanks, Steve Martinelli OpenStack Keystone Core Marek Denis OpenStack Keystone Core

[openstack-dev] [Keystone][FFE] - IdP ID (remote_id) registration and validation

2015-03-17 Thread Marek Denis
, -- Marek Denis Keystone Core member __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo

Re: [openstack-dev] Need help in configuring keystone

2015-03-02 Thread Marek Denis
Akshik, When you are beginning an adventure with saml, shibboleth and so on, it's helpful to start with fetching auto-generated shibboleth2.xml file from testshib.org . This should cover most of your use-cases, at least in the testing environment. Marek

Re: [openstack-dev] Need help in configuring keystone

2015-02-27 Thread Marek Denis
Hi again, Did you upload Metadata generated by your Service Provider (Keystone) to testshib Identity Providers? How did you generate /etc/shibboleth2/shibboleth2.xml file? Did you read http://testshib.org/register.html ? cheers, Marek

Re: [openstack-dev] Need help in configuring keystone

2015-02-27 Thread Marek Denis
Provider) Let me know if that was your issue. If not, a more detailed steps of how your configured your Keystone acting as a Service Provider would be more helpful. Marek Denis On 27.02.2015 11:26, Akshik DBK wrote: Hi I'm new to SAML, trying to integrate keystone with SAML, Im using Ubuntu

Re: [openstack-dev] Error Enabling Federation Extension

2015-02-19 Thread Marek Denis
Hi Akshik, Could you give some more details about the steps you did for configuring federation as well as the environment you are using? Is it devstack? What version of Keystone do you use? Thanks, Marek On 19.02.2015 12:52, Akshik DBK wrote: im getting “Target WSGI script

Re: [openstack-dev] [keystone] SPFE: Authenticated Encryption (AE) Tokens

2015-02-16 Thread Marek Denis
+1 from me. On 13.02.2015 22:19, Morgan Fainberg wrote: On February 13, 2015 at 11:51:10 AM, Lance Bragstad (lbrags...@gmail.com mailto:lbrags...@gmail.com) wrote: Hello all, I'm proposing the Authenticated Encryption (AE) Token specification [1] as an SPFE. AE tokens increases scalability

Re: [openstack-dev] [Keystone] Proposing Marek Denis for the Keystone Core Team

2015-02-13 Thread Marek Denis
Fainberg (morgan.fainb...@gmail.com) wrote: Hi everyone! I wanted to propose Marek Denis (marekd on IRC) as a new member of the Keystone Core team. Marek has been instrumental in the implementation of Federated Identity. His work on Keystone and first hand knowledge of the issues with extremely

Re: [openstack-dev] [horizon][keystone]

2015-02-05 Thread Marek Denis
Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Marek Denis [marek.de...@cern.ch

Re: [openstack-dev] [horizon][keystone]

2015-02-05 Thread Marek Denis
...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev -- Marek Denis [marek.de...@cern.ch] __ OpenStack Development Mailing List (not for usage questions) Unsubscribe

Re: [openstack-dev] [Keystone] Nominating Brad Topol for Keystone-Spec core

2015-01-18 Thread Marek Denis
to the Keystone Spec repo. Voting will remain open until Friday Jan 23. Cheers, Morgan Fainberg -- Marek Denis [marek.de...@cern.ch] __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack

Re: [openstack-dev] [Keystone] Alternative federation mapping

2014-11-02 Thread Marek Denis
Hi John, It indeed looks interesting and enhancing the mapping engine is on ours to-do list for a long time. I'd be happy to talk this through during the summit. Do you think you will be able to come for a Keystone websso/federation Design Session on Wednesday at 16.30? Thanks, Marek On

Re: [openstack-dev] [Keystone][Horizon] CORS and Federation

2014-09-17 Thread Marek Denis
On 17.09.2014 15:45, Steve Martinelli wrote: ++ to your suggestion David, I think making the list of trusted IdPs publicly available makes sense. I think this might be useful in an academic/science world but on the other hand most cloud providers from the 'business' world might be very

Re: [openstack-dev] [Keystone][Horizon] CORS and Federation

2014-09-17 Thread Marek Denis
Hi, First of all, we should clarify whether your JS client wants to implement ECP or WebSSO workflow. They are slightly different. I feel JS is smart enough to implement the ECP flow and then and it could simply implement what we already have in the keystoneclient [0]. This + some discovery

Re: [openstack-dev] [Keystone] - Cloud federation on top of the Apache

2014-01-30 Thread Marek Denis
php-script which prints out all the variables: ?php header('Content-Type: text/plain'); foreach($_SERVER as $key=$value) { if(substr($key, 0, 7) == 'MELLON_') { echo($key . '=' . $value . \r\n); } } ? -- Marek Denis [marek.de...@cern.ch

Re: [openstack-dev] [Keystone] - Cloud federation on top of the Apache

2014-01-29 Thread Marek Denis
extensions or you used only webSSO? -- Marek Denis [marek.de...@cern.ch] ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] [Keystone] - Cloud federation on top of the Apache

2014-01-27 Thread Marek Denis
, but from what I have already noticed after the client is redirected to the IdP (and to the SP again) the initial input is lost. I am looking forward to hear feedback from you. Thanks, -- Marek Denis [marek.de...@cern.ch] ___ OpenStack-dev mailing list

Re: [openstack-dev] Testing before sending for review

2013-10-23 Thread Marek Denis
for the reply. -- Marek Denis [marek.de...@cern.ch] ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev