)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"53b17dfe161547647ab537aa79cf8fa87a9279ac","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"closes-bug: #1470952"},{"line_number":12,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"ba3cc151_ffa64252","line":9,"updated":"2015-07-06 20:23:57.000000000","message":"can you add a meaningful message or either remove this?","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"baa510c7a7005f66f94f3882b708e00f57b39c9f","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"closes-bug: #1470952"},{"line_number":12,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"ba3cc151_8bc63298","line":9,"in_reply_to":"ba3cc151_58c8a574","updated":"2015-07-09 15:07:11.000000000","message":"Done","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"4392c64eff7a44b1e7e056f790bf60619c5ae38f","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"add federation docs for mod_auth_mellon"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"closes-bug: #1470952"},{"line_number":12,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"ba3cc151_58c8a574","line":9,"in_reply_to":"ba3cc151_ffa64252","updated":"2015-07-06 21:09:19.000000000","message":"++","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"}],"doc/source/configure_federation.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c400c06463f3ee81f31e7fa822f025ab62f3d83b","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and mod_auth_mellon are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_74a15ef7","line":60,"updated":"2015-07-03 07:31:05.000000000","message":"would be nice to use a proper name instead of the module name (mod_auth_mellon), i just don\u0027t know the proper name :)","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"8d4e17fe7f175135ac80c9b17ad682395deba54b","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and mod_auth_mellon are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_11be88ff","line":60,"in_reply_to":"ba3cc151_6ec7f545","updated":"2015-07-06 15:38:31.000000000","message":"Done","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"42d6feca33ccf509c636ac8ffd8d610864d9046c","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and mod_auth_mellon are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_6ec7f545","line":60,"in_reply_to":"ba3cc151_74a15ef7","updated":"2015-07-06 15:30:38.000000000","message":"How about this::\n\n    \". . . and Mellon (mod_auth_mellon) are documented . . .\"","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8cf3d8654623d0a1276ca87c093e128be80ac2d9","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and mod_auth_mellon are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_e13cbde2","line":60,"in_reply_to":"ba3cc151_74a15ef7","updated":"2015-07-03 08:23:04.000000000","message":"I also don\u0027t know what \"OpenID Connect\" does in this list, but I understand this. \nMaybe we can fix it here and mark this in the commit message?","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"42d6feca33ccf509c636ac8ffd8d610864d9046c","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and mod_auth_mellon are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_2e732d4f","line":60,"in_reply_to":"ba3cc151_e13cbde2","updated":"2015-07-06 15:30:38.000000000","message":"\u003e I also don\u0027t know what \"OpenID Connect\" does in this list, but I understand this. Maybe we can fix it here and mark this in the commit message?\n\nWhat exactly would you like me to do here?","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":13055,"name":"Alexander Makarov","email":"ajiekcahdp.makapob@gmail.com","username":"amakarov"},"change_message_id":"dc1eb9973bebcd6793706a1e37477363550042d0","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and Mellon (mod_auth_mellon) are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_e864554a","line":60,"updated":"2015-07-06 17:00:41.000000000","message":"What\u0027s the need to emphasize mod_auth_mellon?","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"256c018a44de325a22b5ce54c18a1834231ef776","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and Mellon (mod_auth_mellon) are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_c387f210","line":60,"in_reply_to":"ba3cc151_e864554a","updated":"2015-07-06 17:11:09.000000000","message":"* Why the -1?\n* Why the need to emphasize Shibboleth and OpenID Connect?\n* There are at least two blueprints - https://review.openstack.org/190361 and https://review.openstack.org/194147 - that are concerned with federation, and they do not want to mention Mellon unless it is documented in the official Keystone documentation.  Note that Federation !\u003d Shibboleth.","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"64c916e3235a52cf2dd5e2efe03884ddb1a77c4c","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and Mellon (mod_auth_mellon) are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_4e48e62d","line":60,"updated":"2015-07-06 18:41:29.000000000","message":"Suffixing \u0027(mod_auth_mellon)\u0027 so often seems to be overkill. Is it not sufficient to just refer to this in mellon.rst?","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"cd0a3d626f9031434d1b7ba2be83d2bc1bee70c7","unresolved":false,"context_lines":[{"line_number":57,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"There are many ways to configure Federation in the Apache HTTPD server.  Using"},{"line_number":60,"context_line":"Shibboleth, OpenID Connect, and Mellon (mod_auth_mellon) are documented so far."},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_c9a5d0b5","line":60,"in_reply_to":"ba3cc151_4e48e62d","updated":"2015-07-06 19:10:18.000000000","message":"Done","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"64c916e3235a52cf2dd5e2efe03884ddb1a77c4c","unresolved":false,"context_lines":[{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."},{"line_number":64,"context_line":"* To use Mellon, follow the steps outlined at: `Setup Mellon (mod_auth_mellon)`_."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_2e4b222d","line":64,"updated":"2015-07-06 18:41:29.000000000","message":"Suffixing \u0027(mod_auth_mellon)\u0027 so often seems to be overkill. Is it not sufficient to just refer to this in mellon.rst?","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"cd0a3d626f9031434d1b7ba2be83d2bc1bee70c7","unresolved":false,"context_lines":[{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* To use Shibboleth, follow the steps outlined at: `Setup Shibboleth`_."},{"line_number":63,"context_line":"* To use OpenID Connect, follow the steps outlined at: `Setup OpenID Connect`_."},{"line_number":64,"context_line":"* To use Mellon, follow the steps outlined at: `Setup Mellon (mod_auth_mellon)`_."},{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_69aa8487","line":64,"in_reply_to":"ba3cc151_2e4b222d","updated":"2015-07-06 19:10:18.000000000","message":"Done","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":6816,"name":"Jesse Pretorius","email":"jesse@odyssey4.me","username":"jesse-pretorius"},"change_message_id":"64c916e3235a52cf2dd5e2efe03884ddb1a77c4c","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"},{"line_number":68,"context_line":".. _`Setup Mellon (mod_auth_mellon)`: federation/mellon.html"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Configure keystone and Horizon for Single Sign-On"},{"line_number":71,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_6e404a08","line":68,"updated":"2015-07-06 18:41:29.000000000","message":"Suffixing \u0027(mod_auth_mellon)\u0027 so often seems to be overkill. Is it not sufficient to just refer to this in mellon.rst?","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"cd0a3d626f9031434d1b7ba2be83d2bc1bee70c7","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"},{"line_number":68,"context_line":".. _`Setup Mellon (mod_auth_mellon)`: federation/mellon.html"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Configure keystone and Horizon for Single Sign-On"},{"line_number":71,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":3,"id":"ba3cc151_e99e9462","line":68,"in_reply_to":"ba3cc151_6e404a08","updated":"2015-07-06 19:10:18.000000000","message":"Done","commit_id":"5d958a6c05de4278e3ca0b5c45382909b6c622f6"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"3779b0b2086ddd75d250ec023a848141a2d887fc","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"},{"line_number":68,"context_line":".. _`Setup Mellon`: federation/mellon.html"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Configure keystone and Horizon for Single Sign-On"},{"line_number":71,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_e5222101","line":68,"updated":"2015-07-21 06:33:32.000000000","message":"you are comparing apples and oranges. Both shibboleth and mellon are for SAML. \n\nSuggested changes so we reflect that we currently have docs for two major federation protocols:\n\nOpenID Connect (mod_auth_oidc)\nSAML (mod_shib and mod_mellon).\n\nThis comment applies to all the document.","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"edba34d2ce975a7845ff298bd6230a181ebce0ed","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":".. _`Setup Shibboleth`: federation/shibboleth.html"},{"line_number":67,"context_line":".. _`Setup OpenID Connect`: federation/openidc.html"},{"line_number":68,"context_line":".. _`Setup Mellon`: federation/mellon.html"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"Configure keystone and Horizon for Single Sign-On"},{"line_number":71,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_c459005c","line":68,"in_reply_to":"3a50d1a3_e5222101","updated":"2015-07-21 18:12:15.000000000","message":"Done","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"}],"doc/source/federation/mellon.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c400c06463f3ee81f31e7fa822f025ab62f3d83b","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"    $ mellon_create_metadata.sh http://keystone.fqdn:5000/keystone \\"},{"line_number":97,"context_line":"      http://keystone.fqdn:5000/v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"The first parameter is used as the entity ID, a unique identifier for this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_4bfb4a47","line":96,"updated":"2015-07-03 07:31:05.000000000","message":"why is there a \u0027keystone\u0027 after :5000?","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"e87f2975bbc977914a2b0b1f997683fdbee33b2d","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"    $ mellon_create_metadata.sh http://keystone.fqdn:5000/keystone \\"},{"line_number":97,"context_line":"      http://keystone.fqdn:5000/v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"The first parameter is used as the entity ID, a unique identifier for this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_902b8033","line":96,"in_reply_to":"ba3cc151_412ec9a5","updated":"2015-07-06 11:40:54.000000000","message":"Also see lines 45-47.","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"8d4e17fe7f175135ac80c9b17ad682395deba54b","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"    $ mellon_create_metadata.sh http://keystone.fqdn:5000/keystone \\"},{"line_number":97,"context_line":"      http://keystone.fqdn:5000/v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"The first parameter is used as the entity ID, a unique identifier for this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_b1455c18","line":96,"in_reply_to":"ba3cc151_412ec9a5","updated":"2015-07-06 15:38:31.000000000","message":"Done","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"8cf3d8654623d0a1276ca87c093e128be80ac2d9","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"    $ mellon_create_metadata.sh http://keystone.fqdn:5000/keystone \\"},{"line_number":97,"context_line":"      http://keystone.fqdn:5000/v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"The first parameter is used as the entity ID, a unique identifier for this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_412ec9a5","line":96,"in_reply_to":"ba3cc151_4bfb4a47","updated":"2015-07-03 08:23:04.000000000","message":"++","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"e87f2975bbc977914a2b0b1f997683fdbee33b2d","unresolved":false,"context_lines":[{"line_number":93,"context_line":""},{"line_number":94,"context_line":".. code-block:: bash"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"    $ mellon_create_metadata.sh http://keystone.fqdn:5000/keystone \\"},{"line_number":97,"context_line":"      http://keystone.fqdn:5000/v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":98,"context_line":""},{"line_number":99,"context_line":"The first parameter is used as the entity ID, a unique identifier for this"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba3cc151_f0168cf0","line":96,"in_reply_to":"ba3cc151_4bfb4a47","updated":"2015-07-06 11:40:54.000000000","message":"The example is valid. http://keystone.fqdn:5000/keystone is an entity id. It just looks weird.","commit_id":"2341aef934951e29095db75aedcf2f263e480fb6"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"748a521ca97e1d702c824d337b744bbcff0b27e9","unresolved":false,"context_lines":[{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn_keystone.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn_keystone.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn_keystone.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_970b687d","line":45,"updated":"2015-07-06 16:12:05.000000000","message":"please fix these lines too. The command used below (mellon_create_metadata.sh http://keystone.fqdn:5000 \u003c...\u003e) will not generate files with these names.","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"540d1e0e884a112bcca9999add1e017c23d9af17","unresolved":false,"context_lines":[{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn_keystone.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn_keystone.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn_keystone.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_d5d48548","line":45,"in_reply_to":"ba3cc151_970b687d","updated":"2015-07-06 17:24:49.000000000","message":"Done","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"2941ddfd39056ee2b4fc8d9953f496e8daf602fd","unresolved":false,"context_lines":[{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn_keystone.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn_keystone.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn_keystone.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_a3baee6c","line":45,"in_reply_to":"ba3cc151_970b687d","updated":"2015-07-06 17:19:02.000000000","message":"Really?  In my case it does - If my keystone server is running on the node which has an FQDN of \"keystone.fqdn\", I get the following files::\n\n    /etc/httpd/mellon/http_keystone.fqdn_keystone.key\n    /etc/httpd/mellon/http_keystone.fqdn_keystone.cert\n    /etc/httpd/mellon/http_keystone.fqdn_keystone.xml\n\nWhat do you get?  What version of mellon are you using?","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"928559ecaba11050b3fa1004a71e14aa110988af","unresolved":false,"context_lines":[{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn_keystone.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn_keystone.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn_keystone.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba3cc151_b59a21c4","line":45,"in_reply_to":"ba3cc151_a3baee6c","updated":"2015-07-06 17:23:26.000000000","message":"Never mind.   I see what I did wrong.","commit_id":"e154b4399d67f7bb38e27185c7809915781f23e9"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"53b17dfe161547647ab537aa79cf8fa87a9279ac","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_ba2a087d","line":43,"updated":"2015-07-06 20:23:57.000000000","message":"will Melon receive all calls intended to keystone v3? How will this work?","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"0ceabc05589f3438339ea5725b37814e35d0d652","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_d9dad377","line":43,"in_reply_to":"ba3cc151_3eb909cc","updated":"2015-07-09 14:54:47.000000000","message":"Is there something that needs clarification in this doc about this topic?  Looking at shibboleth.rst, there is nothing more in that document about this topic.","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"46faefc3c134bfbbf85105343ee76721a5ac78b2","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_3eb909cc","line":43,"in_reply_to":"ba3cc151_ba2a087d","updated":"2015-07-06 21:47:50.000000000","message":"This means that mellon will expose it\u0027s environment variables to everything under \u0027/v3\u0027 if you have an assertion present.  It will only send you over to teh IdP for locations that are protected by setting the \"MellonEnable\" directive to \"auth\".","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"4392c64eff7a44b1e7e056f790bf60619c5ae38f","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_1b9bf7ca","line":43,"in_reply_to":"ba3cc151_ba2a087d","updated":"2015-07-06 21:09:19.000000000","message":"Yes, I think this is different from Shib in that it basically proxies all requests: https://github.com/UNINETT/mod_auth_mellon/wiki/GenericSetup#configuring-mod_auth_mellon","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"53b17dfe161547647ab537aa79cf8fa87a9279ac","unresolved":false,"context_lines":[{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"},{"line_number":49,"context_line":"        MellonEndpointPath /v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":50,"context_line":"        MellonIdP \"IDP\""},{"line_number":51,"context_line":"    \u003c/Location\u003e"},{"line_number":52,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_1a41b439","line":49,"updated":"2015-07-06 20:23:57.000000000","message":"this means that we can only have one identity provider, or we may set a wildcard here?","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"46faefc3c134bfbbf85105343ee76721a5ac78b2","unresolved":false,"context_lines":[{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"},{"line_number":49,"context_line":"        MellonEndpointPath /v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":50,"context_line":"        MellonIdP \"IDP\""},{"line_number":51,"context_line":"    \u003c/Location\u003e"},{"line_number":52,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_9e3ff524","line":49,"in_reply_to":"ba3cc151_1a41b439","updated":"2015-07-06 21:47:50.000000000","message":"You can set multiple \u0027mellonIdPMetadataFile\u0027 directives when you have multiple IdPs.  You can also use a wildcard by using the \u0027MellonIdPMetadataGlob\u0027 directive.\n\nThe \u0027MellonEndpointPath\u0027 directive simply needs to be the endpoint location listed in the SP metadata for Keystone.  It does not need to be an IdP specific URL, though it does have to exist under the \u0027base\u0027 location (\u0027/v3\u0027 in this example).  I think \u0027/v3/saml2\u0027 would work fine.","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"0ceabc05589f3438339ea5725b37814e35d0d652","unresolved":false,"context_lines":[{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"},{"line_number":47,"context_line":"        MellonSPMetadataFile /etc/httpd/mellon/http_keystone.fqdn.xml"},{"line_number":48,"context_line":"        MellonIdPMetadataFile /etc/httpd/mellon/idp-metadata.xml"},{"line_number":49,"context_line":"        MellonEndpointPath /v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth/mellon"},{"line_number":50,"context_line":"        MellonIdP \"IDP\""},{"line_number":51,"context_line":"    \u003c/Location\u003e"},{"line_number":52,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_796aa782","line":49,"in_reply_to":"ba3cc151_9e3ff524","updated":"2015-07-09 14:54:47.000000000","message":"Is there something that needs clarification in this doc about this topic?  Looking at shibboleth.rst, there is nothing more in that document about this topic.","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"53b17dfe161547647ab537aa79cf8fa87a9279ac","unresolved":false,"context_lines":[{"line_number":109,"context_line":"    $ wget --cacert /path/to/ca.crt -O /etc/httpd/mellon/idp-metadata.xml \\"},{"line_number":110,"context_line":"      https://idp.fqdn/idp/saml2/metadata"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"Upload your Service Provider\u0027s Metadata file to your Identity Provider.  For"},{"line_number":113,"context_line":"example:"},{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_9ab944ef","line":112,"updated":"2015-07-06 20:23:57.000000000","message":"is this really necessary? I believe that you may say where to find this metadata and the IdP can get it in the way it wants (by accessing the URL or by a local copy of it)","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"0ceabc05589f3438339ea5725b37814e35d0d652","unresolved":false,"context_lines":[{"line_number":109,"context_line":"    $ wget --cacert /path/to/ca.crt -O /etc/httpd/mellon/idp-metadata.xml \\"},{"line_number":110,"context_line":"      https://idp.fqdn/idp/saml2/metadata"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"Upload your Service Provider\u0027s Metadata file to your Identity Provider.  For"},{"line_number":113,"context_line":"example:"},{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. code-block:: bash"}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_992d2b91","line":112,"in_reply_to":"ba3cc151_9ab944ef","updated":"2015-07-09 14:54:47.000000000","message":"I\u0027m not sure what you mean.  Are you asking if it is necessary that the IdP has the SP metadata?  The answer is yes.\n\nAre you asking if it is necessary to upload the SP metadata file to the IdP using curl?   The answer is no, that\u0027s why I said \"For example:\".","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"53b17dfe161547647ab537aa79cf8fa87a9279ac","unresolved":false,"context_lines":[{"line_number":128,"context_line":"         https://idp.fqdn/idp/rest/providers/saml2/SPS/keystone"},{"line_number":129,"context_line":"    $ rm -f /etc/httpd/mellon/idp_username.txt /etc/httpd/mellon/idp_password.txt /etc/httpd/mellon/cookies"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"Once you are done, restart Apache:"},{"line_number":132,"context_line":""},{"line_number":133,"context_line":".. code-block:: bash"},{"line_number":134,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_bad76822","line":131,"updated":"2015-07-06 20:23:57.000000000","message":"the SP Apache?","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"baa510c7a7005f66f94f3882b708e00f57b39c9f","unresolved":false,"context_lines":[{"line_number":128,"context_line":"         https://idp.fqdn/idp/rest/providers/saml2/SPS/keystone"},{"line_number":129,"context_line":"    $ rm -f /etc/httpd/mellon/idp_username.txt /etc/httpd/mellon/idp_password.txt /etc/httpd/mellon/cookies"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"Once you are done, restart Apache:"},{"line_number":132,"context_line":""},{"line_number":133,"context_line":".. code-block:: bash"},{"line_number":134,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"ba3cc151_4bbcaa05","line":131,"in_reply_to":"ba3cc151_bad76822","updated":"2015-07-09 15:07:11.000000000","message":"Done","commit_id":"25001ee7ffdd60c16e6fc5568765833dc16b0995"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"3779b0b2086ddd75d250ec023a848141a2d887fc","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_05e94d80","line":43,"updated":"2015-07-21 06:33:32.000000000","message":"Have you tested this setup?\nDo we really want to touch /v3 whole namespace here?","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"edba34d2ce975a7845ff298bd6230a181ebce0ed","unresolved":false,"context_lines":[{"line_number":40,"context_line":"Make sure the *wsgi-keystone.conf* contains a *\u003cLocation\u003e* directive for the Mellon module and"},{"line_number":41,"context_line":"a *\u003cLocation\u003e* directive for each identity provider::"},{"line_number":42,"context_line":""},{"line_number":43,"context_line":"    \u003cLocation /v3\u003e"},{"line_number":44,"context_line":"        MellonEnable \"info\""},{"line_number":45,"context_line":"        MellonSPPrivateKeyFile /etc/httpd/mellon/http_keystone.fqdn.key"},{"line_number":46,"context_line":"        MellonSPCertFile /etc/httpd/mellon/http_keystone.fqdn.cert"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_c4302004","line":43,"in_reply_to":"3a50d1a3_05e94d80","updated":"2015-07-21 18:12:15.000000000","message":"Did you see nkinder\u0027s comments earlier in this review about this topic?","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"3779b0b2086ddd75d250ec023a848141a2d887fc","unresolved":false,"context_lines":[{"line_number":126,"context_line":"         -b /etc/httpd/mellon/cookies -c /etc/httpd/mellon/cookies \\"},{"line_number":127,"context_line":"         --data-urlencode metadata@/etc/httpd/mellon/http_keystone.fqdn_keystone.xml \\"},{"line_number":128,"context_line":"         https://idp.fqdn/idp/rest/providers/saml2/SPS/keystone"},{"line_number":129,"context_line":"    $ rm -f /etc/httpd/mellon/idp_username.txt /etc/httpd/mellon/idp_password.txt /etc/httpd/mellon/cookies"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"Once you are done, restart the Apache instance that is serving Keystone, for example:"},{"line_number":132,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_a502d909","line":129,"updated":"2015-07-21 06:33:32.000000000","message":"This is example of some sort of IdP and I would avoid such examples, because this is  IdP specific thing. YOu ma give some reerences to external docs. Otherwise typical admin/users trying to execute those commands and will end up frustrated as we make him upload \"something to somewhere\" not even saying what is that (honestly I don\u0027t know wha IdP it is - FreeIPA + ipsilon I guess?)","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"},{"author":{"_account_id":9983,"name":"Richard Megginson","email":"rmeggins@redhat.com","username":"rmeggins"},"change_message_id":"edba34d2ce975a7845ff298bd6230a181ebce0ed","unresolved":false,"context_lines":[{"line_number":126,"context_line":"         -b /etc/httpd/mellon/cookies -c /etc/httpd/mellon/cookies \\"},{"line_number":127,"context_line":"         --data-urlencode metadata@/etc/httpd/mellon/http_keystone.fqdn_keystone.xml \\"},{"line_number":128,"context_line":"         https://idp.fqdn/idp/rest/providers/saml2/SPS/keystone"},{"line_number":129,"context_line":"    $ rm -f /etc/httpd/mellon/idp_username.txt /etc/httpd/mellon/idp_password.txt /etc/httpd/mellon/cookies"},{"line_number":130,"context_line":""},{"line_number":131,"context_line":"Once you are done, restart the Apache instance that is serving Keystone, for example:"},{"line_number":132,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a50d1a3_8419b88a","line":129,"in_reply_to":"3a50d1a3_a502d909","updated":"2015-07-21 18:12:15.000000000","message":"Done","commit_id":"33c2d368bf898e7e8b47c576cedf26a572377f36"}]}