)]}'
{"doc/admin-guide-cloud/source/keystone_integrate_assignment_backend_ldap.rst":[{"author":{"_account_id":612,"name":"Tom Fifield","email":"tom@openstack.org","username":"fifieldt"},"change_message_id":"7c641068fa70efe093b8a4c206f11cafd5608fcb","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"   The OpenStack Identity service does not support domain-specific"},{"line_number":10,"context_line":"   assignment back ends. Using LDAP as an assignment back end is not"},{"line_number":11,"context_line":"   recommended."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"When you configure the OpenStack Identity service to use LDAP servers,"},{"line_number":14,"context_line":"you can split authentication and authorization using the *assignment*"}],"source_content_type":"text/x-rst","patch_set":1,"id":"ba15a1d1_401c2677","line":11,"updated":"2015-09-15 05:57:18.000000000","message":"So the recommendation here is basically: don\u0027t split authN and authZ if you\u0027re using LDAP, but LDAP is still fine to use if you don\u0027t do the assignment feature?\n\nCould be overthinking this, but I\u0027m just wondering whether it\u0027s worth context-ifying this note in case someone wanders into the page from a web search without understanding what \"assignment\" is and thinks it means generally LDAP is not recommended.","commit_id":"493969f667d6f3dfbd9082d0650abccd62947567"}],"doc/admin-guide-cloud/source/keystone_integrate_identity_backend_ldap.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"40af3c17af83abd8374c8f2232897bfc1eae4ef9","unresolved":false,"context_lines":[{"line_number":14,"context_line":"   define the destination LDAP server in the ``keystone.conf`` file."},{"line_number":15,"context_line":"   For more information, see :ref:`integrate-identity-with-ldap`."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"**To integrate one Identity back end with LDAP**"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"#. Enable the LDAP Identity driver in the ``keystone.conf`` file. This"},{"line_number":20,"context_line":"   allows LDAP as an identity back end:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba15a1d1_eb426bad","line":17,"updated":"2015-09-17 20:01:33.000000000","message":"nit: could fix \u0027back end\u0027 to be \u0027backend\u0027","commit_id":"13e6cb9d3dc175d9bc1f6b784c30fd3dba1c48fe"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"5786506f4437294c5174234e7b6f5fda64ea656c","unresolved":false,"context_lines":[{"line_number":14,"context_line":"   define the destination LDAP server in the ``keystone.conf`` file."},{"line_number":15,"context_line":"   For more information, see :ref:`integrate-identity-with-ldap`."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"**To integrate one Identity back end with LDAP**"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"#. Enable the LDAP Identity driver in the ``keystone.conf`` file. This"},{"line_number":20,"context_line":"   allows LDAP as an identity back end:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba15a1d1_6e232da8","line":17,"in_reply_to":"ba15a1d1_eb426bad","updated":"2015-09-22 17:24:47.000000000","message":"See our conventions on spelling of back end","commit_id":"13e6cb9d3dc175d9bc1f6b784c30fd3dba1c48fe"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"40af3c17af83abd8374c8f2232897bfc1eae4ef9","unresolved":false,"context_lines":[{"line_number":73,"context_line":"      During service restart, authentication and authorization are"},{"line_number":74,"context_line":"      unavailable."},{"line_number":75,"context_line":""},{"line_number":76,"context_line":"**To integrate multiple Identity back ends with LDAP**"},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"#. Set the following options in the :file:`/etc/keystone/keystone.conf` file:"},{"line_number":79,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba15a1d1_0b3ebf27","line":76,"updated":"2015-09-17 20:01:33.000000000","message":"same as above","commit_id":"13e6cb9d3dc175d9bc1f6b784c30fd3dba1c48fe"}],"doc/admin-guide-cloud/source/keystone_integrate_with_ldap.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"40af3c17af83abd8374c8f2232897bfc1eae4ef9","unresolved":false,"context_lines":[{"line_number":31,"context_line":"   enable the ``authlogin_nsswitch_use_ldap`` boolean value for SELinux"},{"line_number":32,"context_line":"   on the Openstack Identity server. To enable and make the option"},{"line_number":33,"context_line":"   persistent across reboots, set the following boolean value as the"},{"line_number":34,"context_line":"   root user:"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":".. code-block:: console"},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba15a1d1_8b188fd4","line":34,"updated":"2015-09-17 20:01:33.000000000","message":"\u0027as a root or privileged user:\u0027 ?","commit_id":"13e6cb9d3dc175d9bc1f6b784c30fd3dba1c48fe"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"40af3c17af83abd8374c8f2232897bfc1eae4ef9","unresolved":false,"context_lines":[{"line_number":70,"context_line":"      allow_subtree_delete \u003d False"},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"#. Configure ``dumb_member`` to true if your environment requires"},{"line_number":73,"context_line":"   the ``use_dumb_member`` variable."},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"   .. code-block:: ini"},{"line_number":76,"context_line":"      :linenos:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ba15a1d1_4b8597cc","line":73,"updated":"2015-09-17 20:01:33.000000000","message":"might want to explain what \u0027dumb_member\u0027 option is, and why it\u0027s needed, the keystone.conf file should have some info on it","commit_id":"13e6cb9d3dc175d9bc1f6b784c30fd3dba1c48fe"}]}