)]}'
{"doc/source/configure_federation.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"3a12b36613c3ed6bae69f42d8423d9c561e03f3e","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":".. _`Enabling Federation`: federation/federation.html"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Configuring Federationa in Keystone"},{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa32b979_116a9aee","line":83,"updated":"2015-06-17 13:52:42.000000000","message":"s/Federationa/Federation","commit_id":"afdeb35580824b2bbc788250ef351e53bdcaf723"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"97e3f40bb87d99c08b7d884a0e1e0ae945a68199","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":".. _`Enabling Federation`: federation/federation.html"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Configuring Federationa in Keystone"},{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa32b979_747e741a","line":83,"in_reply_to":"fa32b979_116a9aee","updated":"2015-06-17 13:54:45.000000000","message":"Done","commit_id":"afdeb35580824b2bbc788250ef351e53bdcaf723"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"de1583960b9e5ad3042cd7d9e1421bc1c32f82f6","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run Keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``OS-FEDERATION`` in Keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_a2dcba73","line":54,"updated":"2015-06-17 14:18:36.000000000","message":"s/Keystone/keystone","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"30f77f06f07ce2c4dcf2e81ebf68f94fdf1939ea","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run Keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``OS-FEDERATION`` in Keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_e285e2ce","line":54,"in_reply_to":"fa32b979_a2dcba73","updated":"2015-06-17 14:23:19.000000000","message":"it is capitalized for consistency","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"de1583960b9e5ad3042cd7d9e1421bc1c32f82f6","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":".. _`Enabling Federation`: federation/federation.html"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Configuring Federation in Keystone"},{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_82df3668","line":83,"updated":"2015-06-17 14:18:36.000000000","message":"s/Keystone/keystone","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"0ca49620f7c8bcece5ced28b75046dcfe29eb394","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run Keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``OS-FEDERATION`` in Keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_f5d89781","line":54,"updated":"2015-06-22 14:00:33.000000000","message":"(nit) s/Keystone/keystone","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run Keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``OS-FEDERATION`` in Keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_290db8e7","line":54,"in_reply_to":"fa32b979_f5d89781","updated":"2015-06-25 10:28:08.000000000","message":"Done","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":".. _`Keystone Federation and Horizon`: federation/websso.html"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"Enable the ``OS-FEDERATION``"},{"line_number":77,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Follow the steps outlined at: `Enabling Federation`_."}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_59e08e96","line":76,"updated":"2015-06-22 20:16:54.000000000","message":"I\u0027m guessing this section was supposed to be removed, since you don\u0027t have to enable it anymore.","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":13055,"name":"Alexander Makarov","email":"ajiekcahdp.makapob@gmail.com","username":"amakarov"},"change_message_id":"f478f533c1e9c3a158cc960a8e6873310e265e01","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":".. _`Enabling Federation`: federation/federation.html"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Configuring Federation in Keystone"},{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_1d58b955","line":83,"updated":"2015-06-22 17:23:09.000000000","message":"same as @ line 54","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":80,"context_line":""},{"line_number":81,"context_line":".. _`Enabling Federation`: federation/federation.html"},{"line_number":82,"context_line":""},{"line_number":83,"context_line":"Configuring Federation in Keystone"},{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_09f794d3","line":83,"in_reply_to":"fa32b979_1d58b955","updated":"2015-06-25 10:28:08.000000000","message":"Done","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"},{"line_number":87,"context_line":"configure the ``OS-FEDERATION``."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"1. Add local Keystone groups and roles"},{"line_number":90,"context_line":"2. Add Identity Provider(s), Mapping(s), and Protocol(s)"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_d9ea5e74","line":87,"updated":"2015-06-22 20:16:54.000000000","message":"remove \"the\"","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":84,"context_line":"-----------------------------------"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"},{"line_number":87,"context_line":"configure the ``OS-FEDERATION``."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"1. Add local Keystone groups and roles"},{"line_number":90,"context_line":"2. Add Identity Provider(s), Mapping(s), and Protocol(s)"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_c9fc4cb7","line":87,"in_reply_to":"fa32b979_d9ea5e74","updated":"2015-06-25 10:28:08.000000000","message":"Done","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":76,"context_line":"Configuring Federation in keystone"},{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and Keystone are communicating we can start to"},{"line_number":80,"context_line":"configure ``OS-FEDERATION``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_d7526d68","line":79,"updated":"2015-06-26 08:53:13.000000000","message":"I am wondering why keystone and Keystone are mixed in this docs?","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":80,"context_line":"configure ``OS-FEDERATION``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local Keystone groups and roles"},{"line_number":84,"context_line":"3. Add Identity Provider(s), Mapping(s), and Protocol(s)"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_b7724910","line":83,"updated":"2015-06-26 08:53:13.000000000","message":"I am wondering why keystone and Keystone are mixed in this doc?","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c0315b4b9e6addcbb3a2c9c98fba21c702d69671","unresolved":false,"context_lines":[{"line_number":80,"context_line":"configure ``OS-FEDERATION``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local Keystone groups and roles"},{"line_number":84,"context_line":"3. Add Identity Provider(s), Mapping(s), and Protocol(s)"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_d05cb34e","line":83,"in_reply_to":"fa32b979_b7724910","updated":"2015-06-26 09:49:35.000000000","message":"Done","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"},{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_d7f6ed8f","line":89,"updated":"2015-06-26 08:53:13.000000000","message":"And ... saml2,oidc etc. to distinguish `external,password,token,oauth1`?","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"6d40c86c51c2a905f00e82f78ac6686be5348f2e","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"},{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_78d4a5bc","line":89,"in_reply_to":"fa32b979_1039bbf2","updated":"2015-06-26 13:54:47.000000000","message":"@Marek, I meant reword somehow to distinguish between `external,password,token` and `saml2, oidc`.\n\nMaybe `Add the authentication methods (saml2,oidc etc.) to the ... `?\n\nJust a soft suggestion, it\u0027s okay as it is, thanks.","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c0315b4b9e6addcbb3a2c9c98fba21c702d69671","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"},{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_1039bbf2","line":89,"in_reply_to":"fa32b979_d7f6ed8f","updated":"2015-06-26 09:49:35.000000000","message":"i don\u0027t understand what you are suggesting here.","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"448240592d4a8ec6ec6cb1b6c530d2c382c0aab5","unresolved":false,"context_lines":[{"line_number":86,"context_line":"Configure authentication drivers in ``keystone.conf``"},{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_dadb747c","line":89,"in_reply_to":"fa32b979_d7f6ed8f","updated":"2015-06-26 08:54:30.000000000","message":"s/And/Add","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_57297df1","line":90,"updated":"2015-06-26 08:53:13.000000000","message":"s/used/use?","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c0315b4b9e6addcbb3a2c9c98fba21c702d69671","unresolved":false,"context_lines":[{"line_number":87,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we used"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"},{"line_number":93,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_d00a7327","line":90,"in_reply_to":"fa32b979_57297df1","updated":"2015-06-26 09:49:35.000000000","message":"Done","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":262,"context_line":""},{"line_number":263,"context_line":".. NOTE::"},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    This feature requies installed xmlsec1 tool via your distribution packaging"},{"line_number":266,"context_line":"    system (for instance apt or yum)"},{"line_number":267,"context_line":""},{"line_number":268,"context_line":"    Example for apt:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_97e5c539","line":265,"updated":"2015-06-26 08:53:13.000000000","message":"nits: s/requies/requires and `requires installed xmlsec1` sound weird, more like `requires to install xmlsec1`?","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c0315b4b9e6addcbb3a2c9c98fba21c702d69671","unresolved":false,"context_lines":[{"line_number":262,"context_line":""},{"line_number":263,"context_line":".. NOTE::"},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    This feature requies installed xmlsec1 tool via your distribution packaging"},{"line_number":266,"context_line":"    system (for instance apt or yum)"},{"line_number":267,"context_line":""},{"line_number":268,"context_line":"    Example for apt:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_0b074c19","line":265,"in_reply_to":"fa32b979_97e5c539","updated":"2015-06-26 09:49:35.000000000","message":"Done","commit_id":"24c47148b9e2cfdf8095537e51e42df6f08626d5"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    under the License."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":15,"context_line":"Configuring keystone for Federation"},{"line_number":16,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"-----------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_d420e79d","line":15,"updated":"2015-06-30 17:19:32.000000000","message":"this should remain uppercase since it\u0027s a title.\n\nOtherwise you should also lowercase federation.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    under the License."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":15,"context_line":"Configuring keystone for Federation"},{"line_number":16,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"-----------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_2db76c87","line":15,"in_reply_to":"ba3cc151_d420e79d","updated":"2015-07-01 08:35:56.000000000","message":"Done","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":15209,"name":"Lucas Xu","email":"hanxu@redhat.com","username":"xuh"},"change_message_id":"3d3753444096e2ba7f74b52cff4caf26ee0d32b2","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":".. NOTE::"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"    This feature is considered stable and supported as of the Juno release."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Prerequisites"},{"line_number":35,"context_line":"-------------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_6dccf035","line":32,"updated":"2015-06-29 15:18:49.000000000","message":"of the Kilo release?","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"513122d0475a4db8be76893840c07afed1bdae29","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":".. NOTE::"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"    This feature is considered stable and supported as of the Juno release."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Prerequisites"},{"line_number":35,"context_line":"-------------"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_2414a142","line":32,"in_reply_to":"ba3cc151_6dccf035","updated":"2015-06-30 07:27:20.000000000","message":"No, this as of Juno, Keystone IdP (see below) is stable as of Kilo, so the docs are ok :-)","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":".. _`Keystone Federation and Horizon`: federation/websso.html"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"Configuring Federation in keystone"},{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_d4578700","line":76,"updated":"2015-06-30 17:19:32.000000000","message":"this should remain uppercase since it\u0027s a title.\n\nOtherwise you should also lowercase federation.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":73,"context_line":""},{"line_number":74,"context_line":".. _`Keystone Federation and Horizon`: federation/websso.html"},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"Configuring Federation in keystone"},{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_adab7c1c","line":76,"in_reply_to":"ba3cc151_d4578700","updated":"2015-07-01 08:35:56.000000000","message":"Done","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"},{"line_number":80,"context_line":"configure ``OS-FEDERATION``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local keystone groups and roles"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_546377dc","line":80,"updated":"2015-06-30 17:19:32.000000000","message":"suggest change ``OS-FEDERATION`` to keystone federation throughout this doc. I don\u0027t thin OS-FEDERATION exists anymore.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"},{"line_number":80,"context_line":"configure ``OS-FEDERATION``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local keystone groups and roles"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_3021ff9f","line":80,"in_reply_to":"ba3cc151_546377dc","updated":"2015-07-01 08:35:56.000000000","message":"i changed it, however we still have a \u0027namespace\u0027 in our URL, so I doubt OS-FEDERATION just disappears...?","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we use"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_54913798","line":92,"updated":"2015-06-30 17:19:32.000000000","message":"The last sentence can be removed since this is the default given stevedore support for auth.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":89,"context_line":"Add the authentication methods to the ``[auth]`` section in ``keystone.conf``."},{"line_number":90,"context_line":"Names should be equal to protocol names added via Identity API v3. Here we use"},{"line_number":91,"context_line":"examples ``saml2`` and ``oidc``. Authentication drivers should point to"},{"line_number":92,"context_line":"``keystone.auth.plugins.mapped.Mapped``"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_9051eb10","line":92,"in_reply_to":"ba3cc151_54913798","updated":"2015-07-01 08:35:56.000000000","message":"Done","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":96,"context_line":"       [auth]"},{"line_number":97,"context_line":"       methods \u003d external,password,token,saml2,oidc"},{"line_number":98,"context_line":"       saml2 \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":99,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Create keystone groups and assign roles"},{"line_number":102,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_34ed9325","line":99,"updated":"2015-06-30 17:19:32.000000000","message":"these last 2 lines should be removed given stevedore support.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":96,"context_line":"       [auth]"},{"line_number":97,"context_line":"       methods \u003d external,password,token,saml2,oidc"},{"line_number":98,"context_line":"       saml2 \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":99,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Create keystone groups and assign roles"},{"line_number":102,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_50028370","line":99,"in_reply_to":"ba3cc151_34ed9325","updated":"2015-07-01 08:35:56.000000000","message":"btw, setup.cfg has openid, not oidc, so I will tweak this doc.","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"4cee446521ba0d7ba36b1e12dd34d5e52d828805","unresolved":false,"context_lines":[{"line_number":262,"context_line":""},{"line_number":263,"context_line":".. NOTE::"},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    This feature requires to install xmlsec1 tool via your distribution packaging"},{"line_number":266,"context_line":"    system (for instance apt or yum)"},{"line_number":267,"context_line":""},{"line_number":268,"context_line":"    Example for apt:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_f4cdebb7","line":265,"updated":"2015-06-30 17:19:32.000000000","message":"change \"to install\" to \"installation of the\"","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8be269fa32a68df2db8133aea570778715cb055c","unresolved":false,"context_lines":[{"line_number":262,"context_line":""},{"line_number":263,"context_line":".. NOTE::"},{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    This feature requires to install xmlsec1 tool via your distribution packaging"},{"line_number":266,"context_line":"    system (for instance apt or yum)"},{"line_number":267,"context_line":""},{"line_number":268,"context_line":"    Example for apt:"}],"source_content_type":"text/x-rst","patch_set":7,"id":"ba3cc151_30a6df10","line":265,"in_reply_to":"ba3cc151_f4cdebb7","updated":"2015-07-01 08:35:56.000000000","message":"Done","commit_id":"c7c0843fa63501541f50b322fbd402dc39e1dfb7"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"9582438fed2ac9a1e11a94d81ea6eec68000e79d","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``keystone federation`` in keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_0af83f7a","line":54,"updated":"2015-07-01 12:56:13.000000000","message":"suggest change \"``keystone federation``\" to just \"federation\"","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"e28de77be526b7415544dd7e7a798d709852cb9d","unresolved":false,"context_lines":[{"line_number":51,"context_line":""},{"line_number":52,"context_line":"1. Run keystone under Apache, rather than using ``keystone-all``."},{"line_number":53,"context_line":"2. Configure Apache to use a federation capable authentication method."},{"line_number":54,"context_line":"3. Configure ``keystone federation`` in keystone."},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Configure Apache to use a federation capable authentication method"},{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_65f01c68","line":54,"in_reply_to":"ba3cc151_0af83f7a","updated":"2015-07-01 13:14:32.000000000","message":"Done","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"9582438fed2ac9a1e11a94d81ea6eec68000e79d","unresolved":false,"context_lines":[{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"},{"line_number":80,"context_line":"configure ``keystone federation``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local keystone groups and roles"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_0a3fdf24","line":80,"updated":"2015-07-01 12:56:13.000000000","message":"suggest change \"``keystone federation``\" to just \"federation\"","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"e28de77be526b7415544dd7e7a798d709852cb9d","unresolved":false,"context_lines":[{"line_number":77,"context_line":"-----------------------------------"},{"line_number":78,"context_line":""},{"line_number":79,"context_line":"Now that the Identity Provider and keystone are communicating we can start to"},{"line_number":80,"context_line":"configure ``keystone federation``."},{"line_number":81,"context_line":""},{"line_number":82,"context_line":"1. Configure authentication drivers in ``keystone.conf``"},{"line_number":83,"context_line":"2. Add local keystone groups and roles"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_0502703d","line":80,"in_reply_to":"ba3cc151_0a3fdf24","updated":"2015-07-01 13:14:32.000000000","message":"Done","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"9582438fed2ac9a1e11a94d81ea6eec68000e79d","unresolved":false,"context_lines":[{"line_number":122,"context_line":"* Mapping"},{"line_number":123,"context_line":"* Protocol"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"More information on ``keystone federation`` can be found `here"},{"line_number":126,"context_line":"\u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html\u003e`__."},{"line_number":127,"context_line":""},{"line_number":128,"context_line":"~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_2a8183c3","line":125,"updated":"2015-07-01 12:56:13.000000000","message":"suggest change \"``keystone federation``\" to just \"federation\" or \"federation in keystone\"","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"e28de77be526b7415544dd7e7a798d709852cb9d","unresolved":false,"context_lines":[{"line_number":122,"context_line":"* Mapping"},{"line_number":123,"context_line":"* Protocol"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"More information on ``keystone federation`` can be found `here"},{"line_number":126,"context_line":"\u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html\u003e`__."},{"line_number":127,"context_line":""},{"line_number":128,"context_line":"~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":8,"id":"ba3cc151_859c4010","line":125,"in_reply_to":"ba3cc151_2a8183c3","updated":"2015-07-01 13:14:32.000000000","message":"Done","commit_id":"1a8cf431736d71359520b56a0425b78cf4a5ee54"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"c59b491dc6e1d289166ac31aa710ee0a6366f213","unresolved":false,"context_lines":[{"line_number":122,"context_line":"* Mapping"},{"line_number":123,"context_line":"* Protocol"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"More information on ``federation in keystone`` can be found `here"},{"line_number":126,"context_line":"\u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html\u003e`__."},{"line_number":127,"context_line":""},{"line_number":128,"context_line":"~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":9,"id":"ba3cc151_b71bb772","line":125,"updated":"2015-07-01 13:15:43.000000000","message":"`` should be used for constant strings that show up in the code.","commit_id":"8cb9548ad0c239cce8f6506a202d36fb66f490e9"}],"doc/source/extensions.rst":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"0ca49620f7c8bcece5ced28b75046dcfe29eb394","unresolved":false,"context_lines":[{"line_number":87,"context_line":"* `API Specification for Endpoint Policy \u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-endpoint-policy.html\u003e`__"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"-------------------"},{"line_number":90,"context_line":"Identity Federation"},{"line_number":91,"context_line":"-------------------"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"The Identity Federation  provides the ability for users to manage Identity"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_553703b0","line":90,"updated":"2015-06-22 14:00:33.000000000","message":"Should this be in the extensions.rst file?","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":87,"context_line":"* `API Specification for Endpoint Policy \u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-endpoint-policy.html\u003e`__"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"-------------------"},{"line_number":90,"context_line":"Identity Federation"},{"line_number":91,"context_line":"-------------------"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"The Identity Federation  provides the ability for users to manage Identity"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_d9a1fe47","line":90,"in_reply_to":"fa32b979_553703b0","updated":"2015-06-22 20:16:54.000000000","message":"since federation isn\u0027t an extension, this should be moved somewhere else.","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"23c45620fd86a26e3f781a264d6d0bd498e5a5ce","unresolved":false,"context_lines":[{"line_number":105,"context_line":"   extensions/federation.rst"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"* `API Specification for Federation \u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html\u003e`__"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"-------"},{"line_number":110,"context_line":"Inherit"},{"line_number":111,"context_line":"-------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_f759b15c","side":"PARENT","line":108,"updated":"2015-06-26 08:53:13.000000000","message":"where is this section documented now? do we still need the API Specification for Federation anymore, if so, let\u0027s provided these info somewhere.","commit_id":"a70b514ed9aa1ccb4084e85fb7d342daabd337ed"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c0315b4b9e6addcbb3a2c9c98fba21c702d69671","unresolved":false,"context_lines":[{"line_number":105,"context_line":"   extensions/federation.rst"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":"* `API Specification for Federation \u003chttp://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html\u003e`__"},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"-------"},{"line_number":110,"context_line":"Inherit"},{"line_number":111,"context_line":"-------"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa32b979_6dcab01c","side":"PARENT","line":108,"in_reply_to":"fa32b979_f759b15c","updated":"2015-06-26 09:49:35.000000000","message":"it\u0027s not an extension, so definitely not here. I don\u0027t really know if we need to put it anywhere.","commit_id":"a70b514ed9aa1ccb4084e85fb7d342daabd337ed"}],"doc/source/extensions/federation.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"a943e02438ba5253198946f8e39aa14f367653bb","unresolved":false,"context_lines":[{"line_number":26,"context_line":"       [federation]"},{"line_number":27,"context_line":"       driver \u003d keystone.contrib.federation.backends.sql.Federation"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"2. Add the ``saml2`` and/or ``oidc`` authentication methods to the ``[auth]``"},{"line_number":30,"context_line":"   section in ``keystone.conf``::"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"       [auth]"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_a801fb39","side":"PARENT","line":29,"updated":"2015-06-17 14:56:29.000000000","message":"Lines 29-35 were still useful\n\nedit: oh i see, they were moved","commit_id":"1ce6a87738be1d6694c3feaf048547f7c58a1604"}],"doc/source/federation/federation.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"3a12b36613c3ed6bae69f42d8423d9c561e03f3e","unresolved":false,"context_lines":[{"line_number":18,"context_line":"Configure the Federation"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To enable the federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Add the federation driver to the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf``. For example::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa32b979_542fb087","line":21,"updated":"2015-06-17 13:52:42.000000000","message":"s/To enable the federation/To configure federation","commit_id":"afdeb35580824b2bbc788250ef351e53bdcaf723"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"97e3f40bb87d99c08b7d884a0e1e0ae945a68199","unresolved":false,"context_lines":[{"line_number":18,"context_line":"Configure the Federation"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To enable the federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Add the federation driver to the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf``. For example::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"fa32b979_d484200c","line":21,"in_reply_to":"fa32b979_542fb087","updated":"2015-06-17 13:54:45.000000000","message":"Done","commit_id":"afdeb35580824b2bbc788250ef351e53bdcaf723"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"de1583960b9e5ad3042cd7d9e1421bc1c32f82f6","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Add the federation driver to the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf``. For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_c23e9e8a","line":23,"updated":"2015-06-17 14:18:36.000000000","message":"this isn\u0027t already configured since federation is no longer an extension?","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"94b9174121e4ddc7b91059f523199ee56b73ca6d","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Add the federation driver to the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf``. For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_7d22d753","line":23,"in_reply_to":"fa32b979_bd1dbf63","updated":"2015-06-17 14:33:22.000000000","message":"so I believe this should be an extra step in the end of this section","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"6db8b56b40a1f396ffa7bb12fbdbd6b1aab36f34","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Add the federation driver to the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf``. For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_bd1dbf63","line":23,"in_reply_to":"fa32b979_c23e9e8a","updated":"2015-06-17 14:29:46.000000000","message":"technically it\u0027s not configure, the sql backend is the default that we provide, it may be overridden by another backend the deployer chooses","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"de1583960b9e5ad3042cd7d9e1421bc1c32f82f6","unresolved":false,"context_lines":[{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"3. Add the ``federation_extension`` middleware to the ``api_v3`` pipeline in"},{"line_number":43,"context_line":"   ``keystone-paste.ini``. This must be added after ``json_body`` and before"},{"line_number":44,"context_line":"   the last entry in the pipeline. For example::"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_82741668","line":42,"updated":"2015-06-17 14:18:36.000000000","message":"this isn\u0027t already configured since federation is no longer an extension?","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"a7496486eb4566874c3f552ed26bb2510926f3f0","unresolved":false,"context_lines":[{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"3. Add the ``federation_extension`` middleware to the ``api_v3`` pipeline in"},{"line_number":43,"context_line":"   ``keystone-paste.ini``. This must be added after ``json_body`` and before"},{"line_number":44,"context_line":"   the last entry in the pipeline. For example::"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_c2e53ea4","line":42,"in_reply_to":"fa32b979_82741668","updated":"2015-06-17 14:25:04.000000000","message":"no: https://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini\n\nMy understanding is that while federation is not an extension, we don\u0027t really need to make users have it enabled by default. I might be wrong, though.","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"3be9f041efc5693a2fea8c530372e9c112364f33","unresolved":false,"context_lines":[{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"3. Add the ``federation_extension`` middleware to the ``api_v3`` pipeline in"},{"line_number":43,"context_line":"   ``keystone-paste.ini``. This must be added after ``json_body`` and before"},{"line_number":44,"context_line":"   the last entry in the pipeline. For example::"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_221f4a6d","line":42,"in_reply_to":"fa32b979_c2e53ea4","updated":"2015-06-17 14:28:51.000000000","message":"its there already in the v3 pipeline https://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini#L82","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"33248569a42a68fe4f3bb276683a6f518ef1b7d3","unresolved":false,"context_lines":[{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"3. Add the ``federation_extension`` middleware to the ``api_v3`` pipeline in"},{"line_number":43,"context_line":"   ``keystone-paste.ini``. This must be added after ``json_body`` and before"},{"line_number":44,"context_line":"   the last entry in the pipeline. For example::"},{"line_number":45,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa32b979_7d15f73d","line":42,"in_reply_to":"fa32b979_c2e53ea4","updated":"2015-06-17 14:29:35.000000000","message":"oh, you are right, this should be fixed.","commit_id":"0ece1cf5c3fb9d4fbba32f24d33520202706e2bc"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"dfa136a4fe34ee59ae766c2f6ff9071ff788b6ea","unresolved":false,"context_lines":[{"line_number":15,"context_line":"      under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"Configure the Federation"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_f632765d","line":18,"updated":"2015-06-17 19:58:59.000000000","message":"The Federation what? Seems like something is missing here...","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"5a9d35b4e7d8d8dfba3a80992cf2bd801c000ff6","unresolved":false,"context_lines":[{"line_number":15,"context_line":"      under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"Configure the Federation"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_8120f1f8","line":18,"in_reply_to":"fa32b979_f632765d","updated":"2015-06-22 12:51:13.000000000","message":"changed to \"Federation authentication\"","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"a0f67be934124db1253925eaf5a3bafcddac9a45","unresolved":false,"context_lines":[{"line_number":35,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. NOTE::"},{"line_number":38,"context_line":"    The ``external`` method should be dropped to avoid any interference with"},{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_e80b8322","line":38,"updated":"2015-06-17 14:43:39.000000000","message":"is this still valid?","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"dfa136a4fe34ee59ae766c2f6ff9071ff788b6ea","unresolved":false,"context_lines":[{"line_number":35,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. NOTE::"},{"line_number":38,"context_line":"    The ``external`` method should be dropped to avoid any interference with"},{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_36f0de66","line":38,"in_reply_to":"fa32b979_28dacb4c","updated":"2015-06-17 19:58:59.000000000","message":"I didn\u0027t remove it when I was testing, but that was quite a while ago.  If it shouldn\u0027t be there should we remove it from the example above?","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"5a9d35b4e7d8d8dfba3a80992cf2bd801c000ff6","unresolved":false,"context_lines":[{"line_number":35,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. NOTE::"},{"line_number":38,"context_line":"    The ``external`` method should be dropped to avoid any interference with"},{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_612e0dfc","line":38,"in_reply_to":"fa32b979_36f0de66","updated":"2015-06-22 12:51:13.000000000","message":"ok, removing for now.","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"faf70f5f005dc99b978c2ed326e3a1488429976a","unresolved":false,"context_lines":[{"line_number":35,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. NOTE::"},{"line_number":38,"context_line":"    The ``external`` method should be dropped to avoid any interference with"},{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_28dacb4c","line":38,"in_reply_to":"fa32b979_a8aedbe3","updated":"2015-06-17 14:49:32.000000000","message":"someone else can confirm, but I believe that I haven\u0027t removed this when was making the deployment to write: http://rodrigods.com/it-is-time-to-play-with-keystone-to-keystone-federation-in-kilo/","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"b7588f180b1a53d900bb98bf7267311e0cb1a703","unresolved":false,"context_lines":[{"line_number":35,"context_line":"       oidc \u003d keystone.auth.plugins.mapped.Mapped"},{"line_number":36,"context_line":""},{"line_number":37,"context_line":".. NOTE::"},{"line_number":38,"context_line":"    The ``external`` method should be dropped to avoid any interference with"},{"line_number":39,"context_line":"    some Apache + Shibboleth SP setups, where a ``REMOTE_USER`` env variable is"},{"line_number":40,"context_line":"    always set, even as an empty value."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa32b979_a8aedbe3","line":38,"in_reply_to":"fa32b979_e80b8322","updated":"2015-06-17 14:45:23.000000000","message":"i think so.","commit_id":"e3ed005a82430f533e807cb547273fe681faff1c"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":1,"context_line":".."},{"line_number":2,"context_line":"      Copyright 2014 OpenStack, Foundation"},{"line_number":3,"context_line":"      All Rights Reserved."},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"      Licensed under the Apache License, Version 2.0 (the \"License\"); you may"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_b9b51a7f","line":2,"updated":"2015-06-22 20:16:54.000000000","message":"Remove the copyright since you don\u0027t work for the foundation.","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":15,"context_line":"      under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"Configure the Federation authentication"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_598e4ed1","line":18,"updated":"2015-06-22 20:16:54.000000000","message":"remove \"the\"","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":15,"context_line":"      under the License."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":18,"context_line":"Configure the Federation authentication"},{"line_number":19,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_29013505","line":18,"in_reply_to":"fa32b979_598e4ed1","updated":"2015-06-25 10:28:08.000000000","message":"Done","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Make sure the federation driver in the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf`` is set (it should be by default). For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_b93afae5","line":23,"updated":"2015-06-22 20:16:54.000000000","message":"Deployers don\u0027t need to do this. The driver has a default.","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"To configure federation:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"1. Make sure the federation driver in the ``[federation]`` section in"},{"line_number":24,"context_line":"   ``keystone.conf`` is set (it should be by default). For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_a9154540","line":23,"in_reply_to":"fa32b979_b93afae5","updated":"2015-06-25 10:28:08.000000000","message":"removed","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":24,"context_line":"   ``keystone.conf`` is set (it should be by default). For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"},{"line_number":27,"context_line":"       driver \u003d keystone.contrib.federation.backends.sql.Federation"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"2. Add the ``saml2`` and/or ``oidc`` authentication methods to the ``[auth]``"},{"line_number":30,"context_line":"   section in ``keystone.conf``::"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_b96c3a09","line":27,"updated":"2015-06-22 20:16:54.000000000","message":"this should be just \"sql\"","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"c7d2a0c415c1d8def1da0c3ab1256f9576ea1022","unresolved":false,"context_lines":[{"line_number":24,"context_line":"   ``keystone.conf`` is set (it should be by default). For example::"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"       [federation]"},{"line_number":27,"context_line":"       driver \u003d keystone.contrib.federation.backends.sql.Federation"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"2. Add the ``saml2`` and/or ``oidc`` authentication methods to the ``[auth]``"},{"line_number":30,"context_line":"   section in ``keystone.conf``::"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_29285585","line":27,"in_reply_to":"fa32b979_b96c3a09","updated":"2015-06-25 10:28:08.000000000","message":"this is being fixed in a followup patch.","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"e161a74b2b885a3212b2dc06c1af468a608266fb","unresolved":false,"context_lines":[{"line_number":26,"context_line":"       [federation]"},{"line_number":27,"context_line":"       driver \u003d keystone.contrib.federation.backends.sql.Federation"},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"2. Add the ``saml2`` and/or ``oidc`` authentication methods to the ``[auth]``"},{"line_number":30,"context_line":"   section in ``keystone.conf``::"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"       [auth]"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa32b979_790c7242","line":29,"updated":"2015-06-22 20:16:54.000000000","message":"how does somebody know which to add?","commit_id":"6b7567bc02be2c0a08736cf4017f0c1953cd3d24"}]}