[openstack-dev] [Keystone] Splitting Delegation and Federation

David Chadwick d.w.chadwick at kent.ac.uk
Tue Oct 2 09:06:04 UTC 2012


Hi Adam

happy to take ownership of the kent document. It is just that recently I 
have been quite busy, on the move a lot (currently on a train) and not 
had serious time to sit down at my desk and actually do it (go through 
the learning curve etc. being a newbie to OpenStack)

regards

David


On 28/09/2012 20:35, Adam Young wrote:
> I think I want to distinguish my original proposal for Federation from
> what the Kent folks have proposed.  I think both proposals are valuable,
> and server different needs.
>
> What I was doing was really making it possible for Keystone to work in a
> delegated manner, with a Keystone server dedicated to serving each
> domain separately (simplification ,but conceptually correct). This is
> more of an incremental approach.
>
> The Kent approach is truly Federated, and thus should carry forward with
> that name.
>
> The Federation session at the Summit will cover both, but should be
> focused on the Kent approach. The PKI future session is essential to the
> delegation approach, and will cover it in more detail.
>
> I've changed the existing Federation blueprint to Delegation:
>
> https://blueprints.launchpad.net/keystone/+spec/delegation
>
> With the full write up of the spec here:
>
> http://wiki.openstack.org/keystone/Delegation
>
>
> I've registered the Federation Blueprint as
>
> https://blueprints.launchpad.net/keystone/+spec/federation
>
> I'd appreciate the Kent taking ownership of the  Federation Blueprint
> moving forward.



More information about the OpenStack-dev mailing list