[Openstack] [Keystone] Quotas: LDAP Help

Everett Toews everett.toews at cybera.ca
Tue Jul 17 21:44:22 UTC 2012


On Tue, Jul 17, 2012 at 12:56 PM, Adam Young <ayoung at redhat.com> wrote:

> Yes, it is possible to use LDAP for Identity and SQL for the other things,
> like Tokens and Policy.  Quotas could be done the same way. You just have
> to extract the Quotas calls out of the Identity Provider.  It might make
> sense to go in Policy, or into its own driver.
>

Yep. I was thinking along the same lines. I think we could reasonably
sidestep the issue by storing the quotas in the SQL database. It probably
belongs in its own driver as I wouldn't want to pollute the Policy driver.

But, at this point, I think we need to revisit the question...do we want
quotas in Keystone?

This is the first I've heard of Boson, which makes sense as Kevin only
recently sent an email to the list. It looks like a much more comprehensive
and scalable solution to quotas. The fact that it would be cell aware is a
big benefit. Plus I would not want to see 3 quota implementations running
around in OpenStack (the current Nova impl., my Keystone impl., and Boson).
I would be willing to step aside to make way for Boson, if it is something
that would become a reality.

I'll respond to Kevin's thread on Boson...

Everett
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20120717/b2b90502/attachment.html>


More information about the Openstack mailing list