<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi<div><br></div><div>So the bad news is that you are correct, multi-domain LDAP is not ready in IceHouse (It is marked as experimental.....and it has serious flaws). The good news is that this is fixed for Juno - and this support has already been merged - and will be in the Juno milestone 2 release. Here's the spec that describes the work done:</div><div><br></div><div><a href="https://github.com/openstack/keystone-specs/blob/master/specs/juno/multi-backend-uuids.rst">https://github.com/openstack/keystone-specs/blob/master/specs/juno/multi-backend-uuids.rst</a></div><div><br></div><div>This support uses the domain-specifc config files approach that is already in IceHouse - so the way you define the LDAP parameters for each domain does not change.</div><div><br></div><div>Henry</div><div><div><div>On 17 Jul 2014, at 10:52, foss geek <<a href="mailto:thefossgeek@gmail.com">thefossgeek@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">Dear All,<div><br></div><div><div>We are using LDAP as identity back end and SQL as assignment back end.</div><div><br></div><div>Now I am trying to evaluate Keystone multi-domain support with LDAP (identity) + SQL (assignment)</div>
<div><br></div><div>Does any one managed to setup LDAP/SQL multi-domain environment in Havana/Icehouse?</div><div><br></div><div>Does keystone have suggested LDAP DIT for domains?<br></div></div><div><br></div><div>I gone through the below thread [1] and [2], it seems Keystone multi-domain with LDAP+SQL is not ready in Icehouse. </div>
<div><br></div><div>Hope some one will help.</div><div><br></div><div>Thanks for your time. </div><div><br></div><div>[1]<a href="http://www.gossamer-threads.com/lists/openstack/dev/37705">http://www.gossamer-threads.com/lists/openstack/dev/37705</a><br>
</div><div><br></div><div>[2]<a href="http://lists.openstack.org/pipermail/openstack/2014-January/004900.html">http://lists.openstack.org/pipermail/openstack/2014-January/004900.html</a><br></div><div><br></div><div><br></div>
</div>
_______________________________________________<br>OpenStack-dev mailing list<br><a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br></blockquote></div><br></div></body></html>