[openstack-dev] [keystone] Implementation and policy of keystone

Toshiya Shiga tos-shiga at yk.jp.nec.com
Wed Nov 4 10:56:10 UTC 2015


Hi, Adam,

I see.
I will check the policy that was determined in the summit.

Thanks and Regards,

---
Toshiya Shiga

> -----Original Message-----
> From: Adam Young [mailto:ayoung at redhat.com]
> Sent: Tuesday, November 03, 2015 1:06 PM
> To: openstack-dev at lists.openstack.org
> Subject: Re: [openstack-dev] [keystone] Implementation and policy of
> keystone
> 
> On 11/01/2015 08:19 AM, Toshiya Shiga wrote:
> > Hi.
> >
> > We want to implement that the project users are able to manage the users
> of own's project.
> > We are considering some proposals for that.
> >
> > which keystone project's policy is using "domain" (e.g. reseller)or is
> not using "domain"?
> > We want a proposal that meets the project of policy.
> 
> Big topic on the Keystone side of this past summit.
> 
> THe short:
> Don't use domain scoped tokens.  Use Project scoped tokens.  We are
> finishing up the "domain is a project" work and also getting a way to set
> the "admin" project for a deployment;
> 
> 
> 
> >
> >
> > Thanks and Regards,
> >
> > ---
> >
> > Toshiya Shiga
> >
> >
> ______________________________________________________________________
> > ____ OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe:
> > OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> ______________________________________________________________________
> ____
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list