[openstack-dev] [Keystone] external AuthN Identity Backend

Dave Walker email at daviey.com
Thu Oct 16 19:18:31 UTC 2014


On 16 October 2014 20:07, David Stanek <dstanek at dstanek.com> wrote:
<SNIP>
> I may be missing something, but can you use the external auth method with
> the LDAP backend?
>

No, as the purpose of the LDAP backend is to validate user/pass
combination are valid.  With the external auth plugin, these are not
provided to keystone (and may not even exist).  If they did exist, we
would be doing auth at the edge and at the backend - which seems
needlessly expensive.

--
Kind Regards,
Daviey Walker



More information about the OpenStack-dev mailing list