Open Stack

I resend it to openstack-operators. I think it is the appropiate mailing
list

2015-06-18 13:04 GMT+02:00 J. Pablo Martín Cobos <goinnn at gmail.com>:

> Hi all,
>
> I'm a Python/Django software developer [1].  We have to do an integration
> of OpenStack and a Shibboleth IdP in my current project.
>
> This is not a easy feature to configure... but finally we got it :-) Now
> we only need specify a domain for the user different to the "Federated"
> default domain. This domain depends on an attribute from the IdP.
>
> Is it possible to get with stable/kilo branch? Is it a feature for the
> next  release? [2] These are my rules:
>
> [
>     {
>         "local": [
>             {
>                 "user": {
>                     "name": "{0}",
>                     "domain": {
>                         "name": "{1}"
>                     }
>                 }
>             },
>             {
>                 "group": {
>                     "id": "0ff59ec2f97646eb9350fe75478f9600"
>                 }
>             }
>         ],
>         "remote": [
>             {
>                 "type": "identity"
>             },
>             {
>                 "type": "domain"
>             }
>         ]
>     }
> ]
>
> I have tested with a lot of rules with little changes:
>
> "domain": {
>     "name": "Default"
> }
>
> or
>
> "domain": {
>     "id": "default"
> }
>
> or
>
> "domain": {
>     "id": "14321243"
> }
>
> etc... and this never works :-(
>
> Could you help me?
>
> REF's
>
> 1. https://github.com/goinnn
> 2.
> https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-federation-ext.rst
>
> Thanks a lot!!,
>
> --
>
> Pablo Martín
> Software engineer
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150619/ca39d63c/attachment.html>