<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 08/17/2015 08:02 AM, Marc Pape
wrote:<br>
</div>
<blockquote
cite="mid:CADDupTmH5rydgYpsHiUyccMDE02ShRTapg=q8ZijSpexDMC4Nw@mail.gmail.com"
type="cite">
<div dir="ltr">Hello everybody,<br>
<br>
i've got some problems with our OpenStack (Juno) and the
Integrate<br>
Identity Service over LDAP.<br>
The LDAP connection is read only, so i configured the
[identity],<br>
[ldap] and [assignment] parts in keystone conf.<br>
The identity part use "driver =<br>
keystone.identity.backends.ldap.Identity" and assignment "driver
=<br>
keystone.assignment.backends.sql.Assignment"<br>
Our goal is a user authentication via LDAP and project
assignment in<br>
the internal SQL . It would be great if the service users of
OpenStack<br>
are also stored in SQL, but they are also currently in the LDAP<br>
deposited.<br>
After restarting the Keystone Service authentication via LDAP is<br>
possible. The user get the message that no projects assigned to
him.<br>
Now there are wto problems. How can you log in as admin to
assign<br>
projects and keystone said that it couldn't find the service
user like<br>
ceilometer, neutron and so on.<br>
I've followed the instructions on <a moz-do-not-send="true"
href="http://docs.openstack.org">docs.openstack.org</a> for
Identity<br>
management, but i didn't find any notices about that problems.<br>
</div>
</blockquote>
<br>
<br>
Does this help? <a class="moz-txt-link-freetext" href="http://richmegginson.livejournal.com/25846.html">http://richmegginson.livejournal.com/25846.html</a><br>
<br>
<blockquote
cite="mid:CADDupTmH5rydgYpsHiUyccMDE02ShRTapg=q8ZijSpexDMC4Nw@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
Many greetings and thanks for a possible answer<br>
<br>
Marc<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
OpenStack-operators mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a>
</pre>
</blockquote>
<br>
</body>
</html>