)]}'
{"api-ref/source/v3-ext/federation.inc":[{"author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"change_message_id":"1a301634bfd20a0c5f2eda6f995155f013418939","unresolved":false,"context_lines":[{"line_number":172,"context_line":"   respond with an appropriate HTTP error code."},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"   If the ``type`` attribute is not set to ``local`` in the local rule and no"},{"line_number":175,"context_line":"   domain is specified, the user is deemed ephemeral and becomes a member of"},{"line_number":176,"context_line":"   service domain named ``Federated``."},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"   An example of user object mapping to an existing local user:"},{"line_number":179,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":1,"id":"bf3e73b7_b513a60d","line":176,"range":{"start_line":175,"start_character":57,"end_line":176,"end_character":37},"updated":"2017-08-07 14:22:11.000000000","message":"It would make sense to also update this since we\u0027re touching this sentence. This is no longer the case, the user becomes a member of the domain of the identity provider.","commit_id":"cb6b32cc59261afa00dcf55fcb34b275aaeb91b8"},{"author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"change_message_id":"3c4cc62fd7ca0fe030eb3e026d56c5fc1c4ea718","unresolved":false,"context_lines":[{"line_number":173,"context_line":""},{"line_number":174,"context_line":"   If the ``type`` attribute is not set to ``local`` in the local rule and no"},{"line_number":175,"context_line":"   domain is specified, the user is deemed ephemeral and becomes a member of"},{"line_number":176,"context_line":"   service identity provider\u0027s domain."},{"line_number":177,"context_line":""},{"line_number":178,"context_line":"   An example of user object mapping to an existing local user:"},{"line_number":179,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"bf3e73b7_16edd5ee","line":176,"range":{"start_line":176,"start_character":3,"end_line":176,"end_character":10},"updated":"2017-08-07 17:21:36.000000000","message":"nit: the","commit_id":"d10908caa9909b9f178a59551f004a80a722cf2e"}],"doc/source/advanced-topics/federation/mapping_combinations.rst":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"b6e85b364f70b3de784f69edc48badd11891ad62","unresolved":false,"context_lines":[{"line_number":408,"context_line":""},{"line_number":409,"context_line":"Users can be mapped to local users that already exist in keystone\u0027s identity"},{"line_number":410,"context_line":"backend by setting the ``type`` attribute of the user to ``local`` and providing"},{"line_number":411,"context_line":"a domain:"},{"line_number":412,"context_line":""},{"line_number":413,"context_line":".. code-block:: json"},{"line_number":414,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf3e73b7_1505d2c2","line":411,"updated":"2017-08-07 14:19:01.000000000","message":"Providing a domain id or the domain id the local user belongs to? Judging by the conventions in the example below - the user must belong into the domain being referenced in order for this to work.","commit_id":"cb6b32cc59261afa00dcf55fcb34b275aaeb91b8"},{"author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"change_message_id":"1a301634bfd20a0c5f2eda6f995155f013418939","unresolved":false,"context_lines":[{"line_number":433,"context_line":"will result in a 401 Unauthorized error."},{"line_number":434,"context_line":""},{"line_number":435,"context_line":"If you omit the ``type`` attribute or set it to ``ephemeral`` or do not provide a"},{"line_number":436,"context_line":"domain, the user is deemed ephemeral and becomes a member of the service domain"},{"line_number":437,"context_line":"named ``Federated``. It will not be looked up in the local keystone backend, so"},{"line_number":438,"context_line":"all of its attributes must come from the IdP and the mapping rules."},{"line_number":439,"context_line":""},{"line_number":440,"context_line":".. NOTE::"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf3e73b7_3518d61b","line":437,"range":{"start_line":436,"start_character":41,"end_line":437,"end_character":19},"updated":"2017-08-07 14:22:11.000000000","message":"same comment.","commit_id":"cb6b32cc59261afa00dcf55fcb34b275aaeb91b8"},{"author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"change_message_id":"3c4cc62fd7ca0fe030eb3e026d56c5fc1c4ea718","unresolved":false,"context_lines":[{"line_number":437,"context_line":"provider\u0027s domain. It will not be looked up in the local keystone backend, so"},{"line_number":438,"context_line":"all of its attributes must come from the IdP and the mapping rules."},{"line_number":439,"context_line":""},{"line_number":440,"context_line":".. NOTE::"},{"line_number":441,"context_line":"    Domain ``Federated`` is a service domain - it cannot be listed, displayed,"},{"line_number":442,"context_line":"    added or deleted.  There is no need to perform any operation on it prior to"},{"line_number":443,"context_line":"    federation configuration."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"Output"},{"line_number":446,"context_line":"------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"bf3e73b7_d6d74d23","line":443,"range":{"start_line":440,"start_character":0,"end_line":443,"end_character":29},"updated":"2017-08-07 17:21:36.000000000","message":"There is no need for this note anymore.","commit_id":"d10908caa9909b9f178a59551f004a80a722cf2e"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"43c4eb631f8c87f7652b2f7567176e7207cb2e32","unresolved":false,"context_lines":[{"line_number":440,"context_line":".. NOTE::"},{"line_number":441,"context_line":"    Domain ``Federated`` is a service domain - it cannot be listed, displayed,"},{"line_number":442,"context_line":"    added or deleted.  There is no need to perform any operation on it prior to"},{"line_number":443,"context_line":"    federation configuration."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"Output"},{"line_number":446,"context_line":"------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"bf3e73b7_6cf9f47e","line":443,"in_reply_to":"bf3e73b7_d6d74d23","updated":"2017-08-07 18:30:28.000000000","message":"The federated domain and it\u0027s configuration options are still used in several places within keystone. We should understand the behavior of that attribute now that Ron\u0027s IdP and domain work went in before we remove this.","commit_id":"d10908caa9909b9f178a59551f004a80a722cf2e"}]}