Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-30 Thread Matthieu Huin
-dev@lists.openstack.org Sent: Wednesday, May 28, 2014 5:59:48 PM Subject: [openstack-dev] [keystone] Redesign of Keystone Federation Hi Everyone at the Atlanta meeting the following slides were presented during the federation session http://www.slideshare.net/davidwchadwick/keystone

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-29 Thread Morgan Fainberg
To: openstack-dev@lists.openstack.org openstack-dev@lists.openstack.org Subject:  Re: [openstack-dev] [keystone] Redesign of Keystone Federation On 05/28/2014 11:59 AM, David Chadwick wrote: Hi Everyone at the Atlanta meeting the following slides were presented during the federation session

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-29 Thread Brad Topol
(not for usage questions) openstack-dev@lists.openstack.org, Date: 05/29/2014 01:07 PM Subject:Re: [openstack-dev] [keystone] Redesign of Keystone Federation I agree that there is room for improvement on the Federation design within Keystone. I would like to re-iterate what Adam said

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-29 Thread Tim Bell
) Subject: Re: [openstack-dev] [keystone] Redesign of Keystone Federation +1! Excellent summary and analysis Morgan! --Brad Brad Topol, Ph.D. IBM Distinguished Engineer OpenStack (919) 543-0646 Internet: bto...@us.ibm.commailto:bto...@us.ibm.com Assistant: Kendra Witherspoon (919) 254-0680 From

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-29 Thread Dolph Mathews
in parallel - not redesign OS-FEDERATION. Tim *From:* Brad Topol [mailto:bto...@us.ibm.com] *Sent:* 29 May 2014 19:31 *To:* OpenStack Development Mailing List (not for usage questions) *Subject:* Re: [openstack-dev] [keystone] Redesign of Keystone Federation +1! Excellent summary

[openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-28 Thread David Chadwick
Hi Everyone at the Atlanta meeting the following slides were presented during the federation session http://www.slideshare.net/davidwchadwick/keystone-apach-authn It was acknowledged that the current design is sub-optimal, but was a best first efforts to get something working in time for the

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-28 Thread Adam Young
On 05/28/2014 11:59 AM, David Chadwick wrote: Hi Everyone at the Atlanta meeting the following slides were presented during the federation session http://www.slideshare.net/davidwchadwick/keystone-apach-authn It was acknowledged that the current design is sub-optimal, but was a best first

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-28 Thread Tim Bell
-Original Message- From: Adam Young [mailto:ayo...@redhat.com] Sent: 28 May 2014 18:23 To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [keystone] Redesign of Keystone Federation On 05/28/2014 11:59 AM, David Chadwick wrote: Hi Everyone at the Atlanta

Re: [openstack-dev] [keystone] Redesign of Keystone Federation

2014-05-28 Thread Marco Fargetta
Hi David and Kristy, looking at the slides it is not clear to me why you need to have an authn plugin for each Apache plugin. I have experience only with few Apache plugins and they provide the possibility to customise the attributes for the application behind. As an example, with mod_shib it is