[Openstack] Fwd: Need to integrate radius server with OpenStack

Steve Martinelli stevemar at ca.ibm.com
Mon Feb 8 15:44:28 UTC 2016


Not sure if this helps, but at one point we had someone propose install
instructions for moonshot and apache:
https://review.openstack.org/#/c/163878/10/doc/source/extensions/abfab.rst

Steve



From:	"Van Leeuwen, Robert" <rovanleeuwen at ebay.com>
To:	pratik dave <prtkdave at gmail.com>
Cc:	"openstack at lists.openstack.org" <openstack at lists.openstack.org>
Date:	2016/02/08 04:01 AM
Subject:	Re: [Openstack] Fwd: Need to integrate radius server with
            OpenStack



>Now we are stuck at this point how to authenticate users via free radius.
>Any help or pointers on this would be grateful.



Hi Pratik,


You can write your own keystone middleware to authenticate with.

There is a nice doc about that here:
http://docs.openstack.org/developer/keystone/external-auth.html

Note that if you use external_auth as in the example it will only take over
the authentication:
The user will still need to exist in keystone and roles need to be assigned
in the keystone backend.

For  a "fully integrated” solution you will have to look at LDAP afaik.

Cheers,
Robert van Leeuwen_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack at lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160208/adef8aad/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160208/adef8aad/attachment.gif>


More information about the Openstack mailing list