)]}'
{"doc/source/mapping_combinations.rst":[{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"b49a3df950c7ab69d37e8502771160c6f80a2ee9","unresolved":false,"context_lines":[{"line_number":611,"context_line":"the Identity Provider. It will map any user of with the name ``user1``"},{"line_number":612,"context_line":"or ``admin`` in the ``openstack_user`` attribute to a group with id"},{"line_number":613,"context_line":"``abc1234`` or a user with name ``federated_user``."},{"line_number":614,"context_line":""},{"line_number":615,"context_line":".. code-block:: javascript"},{"line_number":616,"context_line":""},{"line_number":617,"context_line":"    {"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_d8079f1a","line":614,"updated":"2015-10-20 16:40:49.000000000","message":"Surely you cannot map to a user OR a group in the JSON. The JSON should contain one or the other.","commit_id":"310d2ca8e63f45ace4c379342846aeccbce57bb8"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"2755bf1ca7aeedddc5af3a6390a28e2e5c494abb","unresolved":false,"context_lines":[{"line_number":611,"context_line":"the Identity Provider. It will map any user of with the name ``user1``"},{"line_number":612,"context_line":"or ``admin`` in the ``openstack_user`` attribute to a group with id"},{"line_number":613,"context_line":"``abc1234`` or a user with name ``federated_user``."},{"line_number":614,"context_line":""},{"line_number":615,"context_line":".. code-block:: javascript"},{"line_number":616,"context_line":""},{"line_number":617,"context_line":"    {"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_7bf765f5","line":614,"in_reply_to":"3a29b11f_d8079f1a","updated":"2015-10-20 16:43:20.000000000","message":"Whoops.","commit_id":"310d2ca8e63f45ace4c379342846aeccbce57bb8"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"7c9dcec8a032046a85fd9fb2063b8188b901f4c4","unresolved":false,"context_lines":[{"line_number":602,"context_line":""},{"line_number":603,"context_line":"An attribute file (/etc/shibboleth/attribute-map.xml) is used to add"},{"line_number":604,"context_line":"attributes to the Keystone Identity Provider. An attribute looks like:"},{"line_number":605,"context_line":"``\u003cAttribute name\u003d\"openstack_user\" id\u003d\"openstack_user\"/\u003e``. alist of"},{"line_number":606,"context_line":"possible attributes can be found here:"},{"line_number":607,"context_line":"https://github.com/openstack/keystone/blob/master/keystone/contrib/federation/idp.py#L166"},{"line_number":608,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_bbcbbd1d","line":605,"updated":"2015-10-20 16:51:33.000000000","message":"space","commit_id":"3b5025863bfcc3ed8ef9a9c9d2c270048963d7c6"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"693ade96dd116d6717280f6033ae8da0b42ec4d5","unresolved":false,"context_lines":[{"line_number":602,"context_line":""},{"line_number":603,"context_line":"An attribute file (/etc/shibboleth/attribute-map.xml) is used to add"},{"line_number":604,"context_line":"attributes to the Keystone Identity Provider. An attribute looks like:"},{"line_number":605,"context_line":"``\u003cAttribute name\u003d\"openstack_user\" id\u003d\"openstack_user\"/\u003e``. alist of"},{"line_number":606,"context_line":"possible attributes can be found here:"},{"line_number":607,"context_line":"https://github.com/openstack/keystone/blob/master/keystone/contrib/federation/idp.py#L166"},{"line_number":608,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_068b78c4","line":605,"in_reply_to":"3a29b11f_bbcbbd1d","updated":"2015-10-20 17:18:18.000000000","message":"Done","commit_id":"3b5025863bfcc3ed8ef9a9c9d2c270048963d7c6"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"7c9dcec8a032046a85fd9fb2063b8188b901f4c4","unresolved":false,"context_lines":[{"line_number":627,"context_line":"                \"remote\": ["},{"line_number":628,"context_line":"                    {"},{"line_number":629,"context_line":"                        \"type\": \"openstack_user\","},{"line_number":630,"context_line":"                        \"any_one_of\": ["},{"line_number":631,"context_line":"                            \"user1\","},{"line_number":632,"context_line":"                            \"admin\""},{"line_number":633,"context_line":"                        ]"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_3bd80def","line":630,"updated":"2015-10-20 16:51:33.000000000","message":"afair we also issue user\u0027s domain.","commit_id":"3b5025863bfcc3ed8ef9a9c9d2c270048963d7c6"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"693ade96dd116d6717280f6033ae8da0b42ec4d5","unresolved":false,"context_lines":[{"line_number":627,"context_line":"                \"remote\": ["},{"line_number":628,"context_line":"                    {"},{"line_number":629,"context_line":"                        \"type\": \"openstack_user\","},{"line_number":630,"context_line":"                        \"any_one_of\": ["},{"line_number":631,"context_line":"                            \"user1\","},{"line_number":632,"context_line":"                            \"admin\""},{"line_number":633,"context_line":"                        ]"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_21653ee0","line":630,"in_reply_to":"3a29b11f_3bd80def","updated":"2015-10-20 17:18:18.000000000","message":"How does the syntax look for issuing a user\u0027s domain in remote?","commit_id":"3b5025863bfcc3ed8ef9a9c9d2c270048963d7c6"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c8ab67eab148f512b01581399045e721df7e6e0b","unresolved":false,"context_lines":[{"line_number":607,"context_line":"https://github.com/openstack/keystone/blob/master/keystone/contrib/federation/idp.py#L166"},{"line_number":608,"context_line":""},{"line_number":609,"context_line":"The Keystone Service Provider must contain a mapping as shown below."},{"line_number":610,"context_line":"``\"type\": \"openstack_user\"`` matches to the attribute name we have in"},{"line_number":611,"context_line":"the Identity Provider. It will map any user of with the name ``user1``"},{"line_number":612,"context_line":"or ``admin`` in the ``openstack_user`` attribute to a group with id"},{"line_number":613,"context_line":"``abc1234``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a29b11f_837d2fe9","line":610,"updated":"2015-10-20 21:02:40.000000000","message":"marek was talking about this blueprint (implemented in liberty): \n\n  https://blueprints.launchpad.net/keystone/+spec/assertion-extra-attributes\n\nit allows for attributes such as \u0027user_domain_name\u0027 and \u0027project_domain_name\u0027 in the assertion too","commit_id":"026132c4f5317b68bf4c2d32661f85bb852f6209"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"047b3fb2f751e588b9485d1971d97b619aaf2a1b","unresolved":false,"context_lines":[{"line_number":607,"context_line":"https://github.com/openstack/keystone/blob/master/keystone/contrib/federation/idp.py#L166"},{"line_number":608,"context_line":""},{"line_number":609,"context_line":"The Keystone Service Provider must contain a mapping as shown below."},{"line_number":610,"context_line":"``\"type\": \"openstack_user\"`` matches to the attribute name we have in"},{"line_number":611,"context_line":"the Identity Provider. It will map any user of with the name ``user1``"},{"line_number":612,"context_line":"or ``admin`` in the ``openstack_user`` attribute to a group with id"},{"line_number":613,"context_line":"``abc1234``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a29b11f_e4ae6ae5","line":610,"in_reply_to":"3a29b11f_837d2fe9","updated":"2015-10-20 21:58:27.000000000","message":"Done","commit_id":"026132c4f5317b68bf4c2d32661f85bb852f6209"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c8ab67eab148f512b01581399045e721df7e6e0b","unresolved":false,"context_lines":[{"line_number":626,"context_line":"                ],"},{"line_number":627,"context_line":"                \"remote\": ["},{"line_number":628,"context_line":"                    {"},{"line_number":629,"context_line":"                        \"type\": \"openstack_user\","},{"line_number":630,"context_line":"                        \"any_one_of\": ["},{"line_number":631,"context_line":"                            \"user1\","},{"line_number":632,"context_line":"                            \"admin\""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a29b11f_6361f338","line":629,"updated":"2015-10-20 21:02:40.000000000","message":"just need to add \"openstack_user_domain\" here too","commit_id":"026132c4f5317b68bf4c2d32661f85bb852f6209"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"047b3fb2f751e588b9485d1971d97b619aaf2a1b","unresolved":false,"context_lines":[{"line_number":626,"context_line":"                ],"},{"line_number":627,"context_line":"                \"remote\": ["},{"line_number":628,"context_line":"                    {"},{"line_number":629,"context_line":"                        \"type\": \"openstack_user\","},{"line_number":630,"context_line":"                        \"any_one_of\": ["},{"line_number":631,"context_line":"                            \"user1\","},{"line_number":632,"context_line":"                            \"admin\""}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a29b11f_449ddeba","line":629,"in_reply_to":"3a29b11f_6361f338","updated":"2015-10-20 21:58:27.000000000","message":"Done, but how does openstack_user_domain work when tied into here. What does it affect?","commit_id":"026132c4f5317b68bf4c2d32661f85bb852f6209"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"988181ec2d1e20d9640cdbbb3720dbc5d7f9e349","unresolved":false,"context_lines":[{"line_number":630,"context_line":"                    {"},{"line_number":631,"context_line":"                        \"type\": ["},{"line_number":632,"context_line":"                            \"openstack_user\","},{"line_number":633,"context_line":"                            \"openstack_user_domain\""},{"line_number":634,"context_line":"                        ],"},{"line_number":635,"context_line":"                        \"any_one_of\": ["},{"line_number":636,"context_line":"                            \"user1\","}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a29b11f_89cf1855","line":633,"updated":"2015-10-23 10:26:08.000000000","message":"i think typically you will splik openstack_user and openstack_user_domain, so i\u0027d put it into separate rules.","commit_id":"f08e1ce6a7f03f75120b4b5f2b3a049c3213086d"},{"author":{"_account_id":16046,"name":"Fernando Diaz","email":"diazjf@us.ibm.com","username":"diazjf"},"change_message_id":"c62174aba56d1150160d8abe45f085b184ff997e","unresolved":false,"context_lines":[{"line_number":630,"context_line":"                    {"},{"line_number":631,"context_line":"                        \"type\": ["},{"line_number":632,"context_line":"                            \"openstack_user\","},{"line_number":633,"context_line":"                            \"openstack_user_domain\""},{"line_number":634,"context_line":"                        ],"},{"line_number":635,"context_line":"                        \"any_one_of\": ["},{"line_number":636,"context_line":"                            \"user1\","}],"source_content_type":"text/x-rst","patch_set":4,"id":"1a26ad4f_468b7bc3","line":633,"in_reply_to":"3a29b11f_89cf1855","updated":"2015-11-02 17:55:11.000000000","message":"Done","commit_id":"f08e1ce6a7f03f75120b4b5f2b3a049c3213086d"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"10f1b13cf9f1c3fe1113996c781f169acf007673","unresolved":false,"context_lines":[{"line_number":630,"context_line":"                    {"},{"line_number":631,"context_line":"                        \"type\": ["},{"line_number":632,"context_line":"                            \"openstack_user\","},{"line_number":633,"context_line":"                            \"openstack_user_domain\""},{"line_number":634,"context_line":"                        ],"},{"line_number":635,"context_line":"                        \"any_one_of\": ["},{"line_number":636,"context_line":"                            \"user1\","}],"source_content_type":"text/x-rst","patch_set":4,"id":"1a26ad4f_2eaa68d5","line":633,"in_reply_to":"3a29b11f_89cf1855","updated":"2015-10-27 22:04:11.000000000","message":"what do you mean? that we either use one or the other?","commit_id":"f08e1ce6a7f03f75120b4b5f2b3a049c3213086d"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"556ea9205619b1a774c2bc5231b64285a687b78d","unresolved":false,"context_lines":[{"line_number":635,"context_line":"                        ]"},{"line_number":636,"context_line":"                    },"},{"line_number":637,"context_line":"                    {"},{"line_number":638,"context_line":"                        \"type\":\"openstack_domain\","},{"line_number":639,"context_line":"                        \"any_one_of\": ["},{"line_number":640,"context_line":"                            \"default\""},{"line_number":641,"context_line":"                        ]"}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa80f949_b9015507","line":638,"updated":"2015-11-06 10:16:40.000000000","message":"it\u0027s \u003e\u003eopenstack_user_domain\u003c\u003c","commit_id":"82c803805bd526da1c1f1d73e01687e42d57c748"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"afd6d88d78eb80082025f5fa13c392244d656abf","unresolved":false,"context_lines":[{"line_number":601,"context_line":"differences."},{"line_number":602,"context_line":""},{"line_number":603,"context_line":"An attribute file (/etc/shibboleth/attribute-map.xml) is used to add"},{"line_number":604,"context_line":"attributes to the Keystone Identity Provider. Attributes look as follows:"},{"line_number":605,"context_line":"``\u003cAttribute name\u003d\"openstack_user\" id\u003d\"openstack_user\"/\u003e``"},{"line_number":606,"context_line":"``\u003cAttribute name\u003d\"openstack_user_domain\" id\u003d\"openstack_user_domain\"/\u003e``"},{"line_number":607,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa80f949_27f0ccfd","line":604,"updated":"2015-11-06 15:47:00.000000000","message":"this might be better served as a code block","commit_id":"ab781d81645df05f3d216a0d10778f19bf5a79ca"}]}