)]}'
{"api/v3/identity-api-v3-os-federation-ext.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":138,"context_line":"   If no domain is specified in the local rule, user is deemed ephemeral"},{"line_number":139,"context_line":"   and becomes a member of service domain named ``federated``."},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"   In case of direct user mapping"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"   An example of user object mapping to an existing user:"},{"line_number":144,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_beac3137","line":141,"updated":"2015-01-27 20:41:13.000000000","message":"this sentence died","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":138,"context_line":"   If no domain is specified in the local rule, user is deemed ephemeral"},{"line_number":139,"context_line":"   and becomes a member of service domain named ``federated``."},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"   In case of direct user mapping"},{"line_number":142,"context_line":""},{"line_number":143,"context_line":"   An example of user object mapping to an existing user:"},{"line_number":144,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_2c963b95","line":141,"in_reply_to":"fa81d914_beac3137","updated":"2015-01-28 11:16:29.000000000","message":"removed.","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"}],"specs/kilo/federated-direct-user-mapping.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":11,"context_line":"`bp federated-direct-user-mapping"},{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/federated-direct-user-mapping\u003e`_"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Allow for specifying mapping rules where effective user exists in the"},{"line_number":16,"context_line":"backend. Otherwise treat as ephemeral users, members of service domain called"},{"line_number":17,"context_line":"``federated``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_9e5dad4b","line":14,"updated":"2015-01-27 20:41:13.000000000","message":"nit, no need for 2 lines","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":11,"context_line":"`bp federated-direct-user-mapping"},{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/federated-direct-user-mapping\u003e`_"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Allow for specifying mapping rules where effective user exists in the"},{"line_number":16,"context_line":"backend. Otherwise treat as ephemeral users, members of service domain called"},{"line_number":17,"context_line":"``federated``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_86a7064f","line":14,"in_reply_to":"fa81d914_9e5dad4b","updated":"2015-01-28 11:16:29.000000000","message":"Done","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":32,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":33,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":34,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":35,"context_line":"``federated``."},{"line_number":36,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":37,"context_line":"specify the domain the user belongs to. If such attribute is not specified"},{"line_number":38,"context_line":"explicitly, this will mean the user is meant to be ephemeral and automatically"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_79b9f3e8","line":35,"updated":"2015-01-27 20:41:13.000000000","message":"capitial F","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":32,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":33,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":34,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":35,"context_line":"``federated``."},{"line_number":36,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":37,"context_line":"specify the domain the user belongs to. If such attribute is not specified"},{"line_number":38,"context_line":"explicitly, this will mean the user is meant to be ephemeral and automatically"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_a6632a19","line":35,"in_reply_to":"fa81d914_79b9f3e8","updated":"2015-01-28 11:16:29.000000000","message":"Done","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":73,"context_line":"            \"user\": {"},{"line_number":74,"context_line":"                \"id\": \"username%40example.com\","},{"line_number":75,"context_line":"                \"domain\": {"},{"line_number":76,"context_line":"                    \"name\": \"federated\""},{"line_number":77,"context_line":"                },"},{"line_number":78,"context_line":"                \"name\": \"username@example.com\","},{"line_number":79,"context_line":"                \"OS-FEDERATION\": {"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_f9ede3f0","line":76,"updated":"2015-01-27 20:41:13.000000000","message":"Federated*","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":73,"context_line":"            \"user\": {"},{"line_number":74,"context_line":"                \"id\": \"username%40example.com\","},{"line_number":75,"context_line":"                \"domain\": {"},{"line_number":76,"context_line":"                    \"name\": \"federated\""},{"line_number":77,"context_line":"                },"},{"line_number":78,"context_line":"                \"name\": \"username@example.com\","},{"line_number":79,"context_line":"                \"OS-FEDERATION\": {"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_c6681ef8","line":76,"in_reply_to":"fa81d914_f9ede3f0","updated":"2015-01-28 11:16:29.000000000","message":"Done","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"85ec237a2e00a3007122bc58208e4749300b2350","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":93,"context_line":"checking by membership in the federated domain."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Alternatives"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a930d6b_2b6655ed","line":93,"updated":"2015-01-27 15:48:08.000000000","message":"will this logic be replicated in keystonemiddleware and keystone server?","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"194b0be4d6cffda89b8151684601b8f24b602984","unresolved":false,"context_lines":[{"line_number":90,"context_line":""},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":93,"context_line":"checking by membership in the federated domain."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Alternatives"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a930d6b_b1cd5433","line":93,"in_reply_to":"1a930d6b_2b6655ed","updated":"2015-01-27 16:39:03.000000000","message":"in keystone server for sure, in keystonemiddleware, if needed - yes.","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":92,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":93,"context_line":"checking by membership in the federated domain."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Alternatives"},{"line_number":97,"context_line":"------------"},{"line_number":98,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_f9c0832c","line":95,"updated":"2015-01-27 20:41:13.000000000","message":"This also solves the issue of an inconsistent token being returned, (where the user didn\u0027t have a domain) and there should be less special handling needed by clients/middleware.","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":92,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":93,"context_line":"checking by membership in the federated domain."},{"line_number":94,"context_line":""},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Alternatives"},{"line_number":97,"context_line":"------------"},{"line_number":98,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_46742ecf","line":95,"in_reply_to":"fa81d914_f9c0832c","updated":"2015-01-28 11:16:29.000000000","message":"added as I think it\u0027s worth mentioning it here too.","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1c0cd07ab7e717a653d3a35e1371497d3ccb0c83","unresolved":false,"context_lines":[{"line_number":146,"context_line":"Work Items"},{"line_number":147,"context_line":"----------"},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"* Add logic for service domain ``federated``."},{"line_number":150,"context_line":"* Mapping engine to properly handle ``domain`` keyword in the ``user`` object."},{"line_number":151,"context_line":"* Adjust auth plugins to distinguish between ephemeral user authentication and"},{"line_number":152,"context_line":"  existing user mapping."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_39a69bc2","line":149,"updated":"2015-01-27 20:41:13.000000000","message":"capitial F","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"70ad1431e60d6b02af1dc9bcce44ba4873e20b4f","unresolved":false,"context_lines":[{"line_number":146,"context_line":"Work Items"},{"line_number":147,"context_line":"----------"},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"* Add logic for service domain ``federated``."},{"line_number":150,"context_line":"* Mapping engine to properly handle ``domain`` keyword in the ``user`` object."},{"line_number":151,"context_line":"* Adjust auth plugins to distinguish between ephemeral user authentication and"},{"line_number":152,"context_line":"  existing user mapping."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa81d914_6681328f","line":149,"in_reply_to":"fa81d914_39a69bc2","updated":"2015-01-28 11:16:29.000000000","message":"Done","commit_id":"3955ad20dda10b3d378b2fcd15b1d101ad625c51"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"5c8007b06a56a9bc89bf74d142087b95f511ed9e","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Many cloud providers want to use cloud federation so the authentication is"},{"line_number":24,"context_line":"handled by the first class Identity Provider, but the user exists in the"},{"line_number":25,"context_line":"Identity backend."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Proposed Change"},{"line_number":28,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_3d300201","line":26,"updated":"2015-02-02 21:19:15.000000000","message":"Can you provide a sentence or two that mentions the benefits of not treating the users as ephemeral.  Or say what the disadvantages are when this is not done.  This would really help to explain why this is needed. Folks may be confused since we spent so much time on the previous federation work saying this was not needed","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":23,"context_line":"Many cloud providers want to use cloud federation so the authentication is"},{"line_number":24,"context_line":"handled by the first class Identity Provider, but the user exists in the"},{"line_number":25,"context_line":"Identity backend."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"Proposed Change"},{"line_number":28,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_7038e1a0","line":26,"in_reply_to":"da86d52c_3d300201","updated":"2015-02-02 21:37:32.000000000","message":"added a bit here","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"5c8007b06a56a9bc89bf74d142087b95f511ed9e","unresolved":false,"context_lines":[{"line_number":28,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":31,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_1df5feca","line":31,"updated":"2015-02-02 21:19:15.000000000","message":"what keeps multiple ephemeral users from different IDPs that all get  from colliding when placed in the default federal domain? Can you add a sentence on what is used to prevent this?","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":28,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":31,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_d0e18dff","line":31,"in_reply_to":"da86d52c_1df5feca","updated":"2015-02-02 21:37:32.000000000","message":"i added a bit here too","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"0fce6afcfbb7d28190acfe9cada32940aa70738f","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":31,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":35,"context_line":"specify the domain the user belongs to. If such attribute is not specified"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_a5369e50","line":32,"updated":"2015-02-02 19:05:44.000000000","message":"s/hardcoded/immutable/?","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"Part of the change is adding a concept of a default federated domain. That is,"},{"line_number":31,"context_line":"all the ephemeral users (not present in the backend) will be stored in a"},{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":35,"context_line":"specify the domain the user belongs to. If such attribute is not specified"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_50511dd7","line":32,"in_reply_to":"da86d52c_a5369e50","updated":"2015-02-02 21:37:32.000000000","message":"Done","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"5c8007b06a56a9bc89bf74d142087b95f511ed9e","unresolved":false,"context_lines":[{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":35,"context_line":"specify the domain the user belongs to. If such attribute is not specified"},{"line_number":36,"context_line":"explicitly, this will mean the user is meant to be ephemeral and automatically"},{"line_number":37,"context_line":"belongs to federated domain. If the domain is not present in the backend,"},{"line_number":38,"context_line":"server will respond with appropriate error code.  If the  domain attribute is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_7d90ba43","line":35,"updated":"2015-02-02 21:19:15.000000000","message":"\"such attribute\" should be \"such an attribute\"","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":32,"context_line":"default federated domain. The domain\u0027s name will be hardcoded and will be named"},{"line_number":33,"context_line":"``Federated``."},{"line_number":34,"context_line":"Mapping rules should be changed - cloud administrators should be able to"},{"line_number":35,"context_line":"specify the domain the user belongs to. If such attribute is not specified"},{"line_number":36,"context_line":"explicitly, this will mean the user is meant to be ephemeral and automatically"},{"line_number":37,"context_line":"belongs to federated domain. If the domain is not present in the backend,"},{"line_number":38,"context_line":"server will respond with appropriate error code.  If the  domain attribute is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_50ed9dee","line":35,"in_reply_to":"da86d52c_7d90ba43","updated":"2015-02-02 21:37:32.000000000","message":"Done","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"0fce6afcfbb7d28190acfe9cada32940aa70738f","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":91,"context_line":"checking by membership in the federated domain."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_254f0ebf","line":91,"updated":"2015-02-02 19:05:44.000000000","message":"I think its also worth mentioning that, for the existing federated tokens, if domain information is absent, then by default the user is in the federated domain.","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":91,"context_line":"checking by membership in the federated domain."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_30c90979","line":91,"in_reply_to":"da86d52c_254f0ebf","updated":"2015-02-02 21:37:32.000000000","message":"Done","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"5c8007b06a56a9bc89bf74d142087b95f511ed9e","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":91,"context_line":"checking by membership in the federated domain."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_5dc0562a","line":91,"in_reply_to":"da86d52c_254f0ebf","updated":"2015-02-02 21:19:15.000000000","message":"I agree","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"1dd068c5a5b54f3a0371593adf48a51b531a9e62","unresolved":false,"context_lines":[{"line_number":88,"context_line":""},{"line_number":89,"context_line":""},{"line_number":90,"context_line":"The proper way to distinguish whether the user is ephemeral or not is by"},{"line_number":91,"context_line":"checking by membership in the federated domain."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_70a2a1af","line":91,"in_reply_to":"da86d52c_5dc0562a","updated":"2015-02-02 21:37:32.000000000","message":"Done","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"0fce6afcfbb7d28190acfe9cada32940aa70738f","unresolved":false,"context_lines":[{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"},{"line_number":95,"context_line":"needed by clients/middleware."},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"Alternatives"},{"line_number":98,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_05acca34","line":95,"updated":"2015-02-02 19:05:44.000000000","message":"Are we saying there are three cases?\n\n 1) existing tokens for ephemeral where the domain information is absent\n 2) newly issued tokens for ephemeral users where the domain information is present and set to \"Federated\"\n 3) newly issued tokens for local users where domain information is present\n\nAre we saying there\u0027s no distinction between 1) and 2)? I would think that\u0027s the case.","commit_id":"82415de27e530063d57025436b59aee08ee45df8"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"4113b92a98cece82b5ea9aca80a8a00580fcb11b","unresolved":false,"context_lines":[{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Proposed change also solves the issue of an inconsistent token being returned,"},{"line_number":94,"context_line":"(where the user didn\u0027t have a domain) and there should be less special handling"},{"line_number":95,"context_line":"needed by clients/middleware."},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"Alternatives"},{"line_number":98,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da86d52c_c6863813","line":95,"in_reply_to":"da86d52c_05acca34","updated":"2015-02-02 20:07:55.000000000","message":"There is no real-world impact here. This is more of a consistency change than anything else.","commit_id":"82415de27e530063d57025436b59aee08ee45df8"}]}