Open Stack

Wenmao- I've seen translucent LDAP proxies used for this type of operation,
although typically to provide additional attributes rather than additional
users.

-- Sent from a tiny keyboard
On Jan 22, 2013 4:23 AM, "Liu Wenmao" <marvelliu at gmail.com> wrote:

>
>
> ---------- Forwarded message ----------
> From: Liu Wenmao <marvelliu at gmail.com>
> Date: Tue, Jan 22, 2013 at 4:55 PM
> Subject: Re: [Openstack] using Win AD authentication as keystone backend
> To: Tim Bell <Tim.Bell at cern.ch>
>
>
> Thanks Bell
>
> is it possible to use active directory and mysql database at the same
> time? for example, keystone first query the user in AD, if nothing is
> found, it then query mysql database.
>
> The motivation is that I want to store service users(glance, nova) in
> mysql and use current AD database for employee login.
>
> Wenmao
>
>
> On Tue, Jan 22, 2013 at 3:51 PM, Tim Bell <Tim.Bell at cern.ch> wrote:
>
>> We run Active Directory with Keystone at CERN.****
>>
>> ** **
>>
>> The configuration is documented by Jose in the Wiki at
>> http://wiki.openstack.org/HowtoIntegrateKeystonewithAD.****
>>
>> ** **
>>
>> Not sure if all the patches made it into Folsom though.****
>>
>> ** **
>>
>> Tim****
>>
>> ** **
>>
>> *From:* openstack-bounces+tim.bell=cern.ch at lists.launchpad.net [mailto:
>> openstack-bounces+tim.bell=cern.ch at lists.launchpad.net] *On Behalf Of *Liu
>> Wenmao
>> *Sent:* 22 January 2013 04:23
>> *To:* openstack at lists.launchpad.net
>> *Subject:* [Openstack] using Win AD authentication as keystone backend***
>> *
>>
>> ** **
>>
>> hello all:****
>>
>> ** **
>>
>> My company use Windows AD(active directory) authentication for internal
>> user login, is it possible to integrate the current authentication with
>> keystone backend, so that we do not extra user/password maintaining. Hope
>> Openstack Folsom has an easy and stable solution.****
>>
>> ** **
>>
>> thanks ****
>>
>> ** **
>>
>> ** **
>>
>> Wenmao Liu****
>>
>> NSFOCUS****
>>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130122/6b4c7bca/attachment.html>