<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Fri, Jul 24, 2015 at 1:01 AM, Julian Edwards <span dir="ltr"><<a href="mailto:bigjools@gmail.com" target="_blank">bigjools@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 24 July 2015 at 14:51, Matt Fischer <<a href="mailto:matt@mattfischer.com">matt@mattfischer.com</a>> wrote:<br>
> Julian,<br>
><br>
> You want this hybrid backend driver. Bind against LDAP for auth, store<br>
> everything else in mysql:<br>
><br>
> <a href="https://github.com/SUSE-Cloud/keystone-hybrid-backend" rel="noreferrer" target="_blank">https://github.com/SUSE-Cloud/keystone-hybrid-backend</a><br>
><br>
</span><span class="">> We maintain our own fork with has a few small differences. I do not use the<br>
> assignment portion of the driver and I'm not sure anyone does so keep that<br>
> in mind.<br>
<br>
</span>Oh cool, I'll check that out, thanks for the pointer.  Ideally I'd<br>
like to get something in-tree, but this might be a good start.<br></blockquote><div><br></div><div>I do have Ubuntu packaging code in my branch if that helps you deploy it at all:</div><div><br></div><div><a href="https://github.com/matthewfischer/keystone-hybrid-backend/">https://github.com/matthewfischer/keystone-hybrid-backend/</a><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class=""><br>
> I know some of the Keystone team has pretty strong opinions about this but<br>
> it works for us.<br>
<br>
</span>There's clearly a problem that needs solving, but I'd like to hear the opinions.<br>
<span class=""><br>
> And nice to run into you again...<br>
<br>
</span>Likewise!<br>
<br>
Cheers.<br>
<span class=""><br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
</span>Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</blockquote></div><br></div></div>