[openstack-dev] [Keystone] Alternative federation mapping

David Stanek dstanek at dstanek.com
Tue Nov 4 21:19:42 UTC 2014

On Tue, Nov 4, 2014 at 10:30 AM, John Dennis <jdennis at redhat.com> wrote:

> O.K. group assignment is the final goal in Keystone. I suppose the
> relevant question then is the functionality in the current Keystone
> mapper sufficiently rich such that you can present to it an arbitrary
> set of values and yield a group assessment? It's been a while since I
> looked at the mapper, things might have changed, but it seemed to me it
> had a lot of baked in assumptions about the data (assertion) it would
> receive. As long as those assumptions held true all is good.

There are probably a few other assumptions, but the main one is that the
mapper expects the incoming data to be a dictionary where the value is a
string. If there are multiple values we expect them to be delimited with a
semicolon in the string.

blog: http://www.traceback.org
twitter: http://twitter.com/dstanek
www: http://dstanek.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20141104/13cfa0ed/attachment.html>

More information about the OpenStack-dev mailing list