[openstack-dev] [Keystone] external AuthN Identity Backend
Dave Walker
email at daviey.com
Thu Oct 16 19:18:31 UTC 2014
On 16 October 2014 20:07, David Stanek <dstanek at dstanek.com> wrote:
<SNIP>
> I may be missing something, but can you use the external auth method with
> the LDAP backend?
>
No, as the purpose of the LDAP backend is to validate user/pass
combination are valid. With the external auth plugin, these are not
provided to keystone (and may not even exist). If they did exist, we
would be doing auth at the edge and at the backend - which seems
needlessly expensive.
--
Kind Regards,
Daviey Walker
More information about the OpenStack-dev
mailing list