Re: [Openstack] [Keystone] Need feedback on how to fix keystone ldap domain support for Grizzly; are you using keystone ldap with multiple domains?

2013-05-07 Thread Aaron Knister
Hi Brad, FWIW-- I'm using AD as the LDAP backend and was using the msSFU30NisDomain attribute for the domain_id mapping. I'm now leveraging some OpenLDAP overlay magic instead, but I digress. I could see value for us in being able to leverage a domain_id stored in LDAP although admittedly we

Re: [Openstack] AuthN/AuthZ

2013-05-14 Thread Aaron Knister
perhaps posting this to the wrong list? I didn't get any replies from my original post. Thanks! -Aaron On Tue, May 7, 2013 at 1:52 PM, Aaron Knister aaron.knis...@gmail.comwrote: Hi Everyone, I'm looking for feedback and input about what other sites are doing for authentication

Re: [Openstack] AuthN/AuthZ

2013-05-16 Thread Aaron Knister
, Adam Young ayo...@redhat.com wrote: Run Keystone in Apache HTPD, use Kerberos and the LDAP backend to talk to AD. On 05/14/2013 06:11 PM, Aaron Knister wrote: *bump* Here's the tl;dr version: - How have other folks handled integration of OpenStack with existing authN/authZ

Re: [Openstack] AuthN/AuthZ

2013-05-20 Thread Aaron Knister
community is responding to the design topics for this aspect of authN/authZ integration. Alan On May 7, 2013, at 12:52 PM, Aaron Knister aaron.knis...@gmail.com wrote: Hi Everyone, I'm looking for feedback and input about what other sites are doing for authentication and authorization

Re: [Openstack] AuthN/AuthZ

2013-05-20 Thread Aaron Knister
Thanks Adam. I don't think I asked the right question. I'm wondering how I get horizon to use the external auth when keystone is running behind apache. On Mon, May 20, 2013 at 10:22 AM, Adam Young ayo...@redhat.com wrote: On 05/16/2013 11:29 AM, Aaron Knister wrote: Thanks Adam. I was able

Re: [Openstack] chardev: opening backend file failed: Permission denied

2013-06-21 Thread Aaron Knister
This is a shot in the dark, but is root squash disabled on the NFS export for all nodes? Sent from my iPhone On Jun 21, 2013, at 11:47 AM, Samuel Winchenbach swinc...@gmail.com wrote: Hi all, I had my cluster working on a single node. glance images and nova instances are stored on an