<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Actually, this isn't trusts, if I
understand it correctly, but rather the REMOTE_USER patch that
went in earlier.<br>
<br>
THe short version is that you run keystone in Apache, and set up
strong authentication in Apache. REMOTE_USER is from the wsgi
(Python CGI) contract. It is the variable set by Apache and sent
to Keystone saying the username of the authenticated user. <br>
<br>
Will that work for you?<br>
<br>
<br>
On 02/06/2013 09:58 AM, Dolph Mathews wrote:<br>
</div>
<blockquote
cite="mid:CAC=h7gWrCwnN-yBjuy7Yz6ZT9-3dzvGJcBvzc2JATJZJPB+WMA@mail.gmail.com"
type="cite">
<div dir="ltr">Adam Young is working on introducing delegation in
grizzly: <a moz-do-not-send="true"
href="https://blueprints.launchpad.net/keystone/+spec/trusts">https://blueprints.launchpad.net/keystone/+spec/trusts</a>
<div><br>
</div>
<div style="">
I'm sure he'd appreciate some help if you'd like to
contribute!</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div><br>
</div>
-Dolph</div>
<br>
<br>
<div class="gmail_quote">On Wed, Feb 6, 2013 at 8:54 AM, Mballo
Cherif <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:Cherif.Mballo@gemalto.com" target="_blank">Cherif.Mballo@gemalto.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="FR">
<div>
<p class="MsoNormal"><span lang="EN-US">Hi everybody !</span></p>
<p class="MsoNormal"><span lang="EN-US">I am wondering
if it’s possible to delegate keystone Authentication
to an <span>Authentication against a server (I
have one Strong Authentication server) or an
Identity Provider?</span></span></p>
<p class="MsoNormal"><span><span lang="EN-US">If I make
modification on keystoneclient code it may be
possible?</span></span></p>
<p class="MsoNormal"><span><span lang="EN-US">Any ideas?
Please help me!</span></span></p>
<p class="MsoNormal"><span><span lang="EN-US"> </span></span></p>
<p class="MsoNormal"><span><span lang="EN-US"> </span></span></p>
<p class="MsoNormal"><span><span lang="EN-US">Thanks !</span></span></p>
<p class="MsoNormal"><span><span lang="EN-US"> </span></span></p>
<p class="MsoNormal"><span><span lang="EN-US">Sherif!</span></span><span
lang="EN-US"></span></p>
</div>
</div>
<br>
_______________________________________________<br>
Mailing list: <a moz-do-not-send="true"
href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a moz-do-not-send="true"
href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a moz-do-not-send="true"
href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a moz-do-not-send="true"
href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
More help : <a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a>
</pre>
</blockquote>
<br>
</body>
</html>