Open Stack

Hi Derek, I think I understand - yes you can do that in horizon but you
first need to "switch domain context" because default admin user is in
domain "default". Now you can see the domains tab, you should see in there
a button for setting the ldap context and then you can manage users like
add to projects roles.


Kind regards,

Tony Pearce



On Fri, 11 Jun 2021 at 17:32, Derek O keeffe <derekokeeffe85 at yahoo.ie>
wrote:

> Hi Tony,
>
> Thanks for that, worked first time!!
>
> Do you know if it's possible to allow the default domain admin edit the
> ldap members that are pulled into a domain? I can't seem to be able to see
> the users in that domain to change their roles through horizon. All works
> fine over cli. Thanks in advance.
>
> Regards,
> Derek
>
> On Friday 11 June 2021, 10:24:37 IST, Tony Pearce <tonyppe at gmail.com>
> wrote:
>
>
> Hi Derek,
>
> I think that you need to give admin privilege to view the domain tab.
>
> # see domain tab in admin user
> openstack user list | grep admin
> openstack role add --domain default --user [ID from previous command] admin
>
> So in my case I have previously used:
> openstack user list | grep admin
> openstack role add --domain default --user
> beae2211cad94afc83173d730cce0c85 admin
>
> kind regards,
>
>
> On Fri, 11 Jun 2021 at 16:59, Derek O keeffe <derekokeeffe85 at yahoo.ie>
> wrote:
>
> Hi all,
>
> I have two domains in my setup (default & ldap)
>
> If I log in as default admin I cannot see a domain tab in the identity
> dropdown (all cli works fine). I'm sure I had it there before and think it
> could be a setting in /etc/opoenstack-dashboard/local_settings.py
>
> Any pointers as to what I might be missing? Thanks in advance.
>
> Regards,
> Derek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20210611/f21e07be/attachment-0001.html>