)]}'
{"doc/source/authentication.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"86158ea857b7879e8447d92d2c311677d708cc42","unresolved":false,"context_lines":[{"line_number":13,"context_line":"authentication options are examined to determine if one of the default"},{"line_number":14,"context_line":"types can be used. If no match is found an error is reported and OSC exits."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Note that the authentication call to the Identity service has not yet "},{"line_number":17,"context_line":"occurred.  It is deferred until the last possible moment in order to "},{"line_number":18,"context_line":"reduce the number of unnecessary queried to the server, such as when further"},{"line_number":19,"context_line":"processing detects an invalid command."}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_ad5453ff","line":16,"updated":"2014-10-24 18:35:37.000000000","message":"White space!!!! Ahh!!","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"86158ea857b7879e8447d92d2c311677d708cc42","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Note that the authentication call to the Identity service has not yet "},{"line_number":17,"context_line":"occurred.  It is deferred until the last possible moment in order to "},{"line_number":18,"context_line":"reduce the number of unnecessary queried to the server, such as when further"},{"line_number":19,"context_line":"processing detects an invalid command."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Authentication Plugins"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_ed71fba8","line":18,"updated":"2014-10-24 18:35:37.000000000","message":"Queries*","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"dc3f3ff9ac5c0b39c86f08b95413bd67c2432bd9","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Authentication Plugins"},{"line_number":22,"context_line":"----------------------"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Keystone client contains a base set of plugins, additional ones"},{"line_number":25,"context_line":"may be available from the Keystone project or other sources. The description"},{"line_number":26,"context_line":"of the plugins themselves is found in the Keysotne documentation."},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_4d2da7a7","line":24,"updated":"2014-10-24 19:11:30.000000000","message":"This seems like two different sentences. You can either replace the , with a ; or just split it into two different sentences, e.g., \n\nKeystone client contains a base set of plugins. Additional ones may be available from the Keystone project or other sources.","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"622fd5e77e9185f15965327c847970880dc84753","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Authentication Plugins"},{"line_number":22,"context_line":"----------------------"},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Keystone client contains a base set of plugins, additional ones"},{"line_number":25,"context_line":"may be available from the Keystone project or other sources. The description"},{"line_number":26,"context_line":"of the plugins themselves is found in the Keysotne documentation."},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_82911649","line":24,"in_reply_to":"9aa7fdbe_4d2da7a7","updated":"2014-10-25 01:49:31.000000000","message":"I rewrote the whole paragraph","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"86158ea857b7879e8447d92d2c311677d708cc42","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Keystone client contains a base set of plugins, additional ones"},{"line_number":25,"context_line":"may be available from the Keystone project or other sources. The description"},{"line_number":26,"context_line":"of the plugins themselves is found in the Keysotne documentation."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"There are at least three authentication types that are always available:"},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_6d5d0b15","line":26,"updated":"2014-10-24 18:35:37.000000000","message":"Keystone*","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"dc3f3ff9ac5c0b39c86f08b95413bd67c2432bd9","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Keystone client contains a base set of plugins, additional ones"},{"line_number":25,"context_line":"may be available from the Keystone project or other sources. The description"},{"line_number":26,"context_line":"of the plugins themselves is found in the Keysotne documentation."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"There are at least three authentication types that are always available:"},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_ad1ff36a","line":26,"updated":"2014-10-24 19:11:30.000000000","message":"Link to those plugins?","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"622fd5e77e9185f15965327c847970880dc84753","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Keystone client contains a base set of plugins, additional ones"},{"line_number":25,"context_line":"may be available from the Keystone project or other sources. The description"},{"line_number":26,"context_line":"of the plugins themselves is found in the Keysotne documentation."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"There are at least three authentication types that are always available:"},{"line_number":29,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_e2858207","line":26,"in_reply_to":"9aa7fdbe_ad1ff36a","updated":"2014-10-25 01:49:31.000000000","message":"Done","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"dc3f3ff9ac5c0b39c86f08b95413bd67c2432bd9","unresolved":false,"context_lines":[{"line_number":64,"context_line":"* A new ``ClientManager`` is created and supplied with the set of options from the"},{"line_number":65,"context_line":"  command line and/or environment:"},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"  * If ``--os-auth-type`` is not provided select an authentication plugin"},{"line_number":68,"context_line":"    based on the existing options.  This is a short-circuit evaluation,"},{"line_number":69,"context_line":"    the first match wins."},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_f001d06a","line":67,"updated":"2014-10-24 19:11:30.000000000","message":"\"If ``--os-auth-type`` is not provided, *we* select an authentication plugin based on the existing options.\" ? I\u0027m not sure if you meant to say \"we\" or something else.","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"622fd5e77e9185f15965327c847970880dc84753","unresolved":false,"context_lines":[{"line_number":64,"context_line":"* A new ``ClientManager`` is created and supplied with the set of options from the"},{"line_number":65,"context_line":"  command line and/or environment:"},{"line_number":66,"context_line":""},{"line_number":67,"context_line":"  * If ``--os-auth-type`` is not provided select an authentication plugin"},{"line_number":68,"context_line":"    based on the existing options.  This is a short-circuit evaluation,"},{"line_number":69,"context_line":"    the first match wins."},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_a28ffa28","line":67,"in_reply_to":"9aa7fdbe_f001d06a","updated":"2014-10-25 01:49:31.000000000","message":"I\u0027m trying to avoid first and second person...reworded","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":12000,"name":"Ian Cordasco","email":"sigmavirus24@gmail.com","username":"sigmavirus24"},"change_message_id":"dc3f3ff9ac5c0b39c86f08b95413bd67c2432bd9","unresolved":false,"context_lines":[{"line_number":69,"context_line":"    the first match wins."},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"    * if ``--os-auth-type`` is supplied and a valid and available plugin"},{"line_number":72,"context_line":"      it is used"},{"line_number":73,"context_line":"    * if ``--os-endpoint`` and ``--os-token`` are supplied ``token_endpoint``"},{"line_number":74,"context_line":"      is selected"},{"line_number":75,"context_line":"    * if ``--os-username`` is supplied ``password`` is selected"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9aa7fdbe_5047fcbb","line":72,"updated":"2014-10-24 19:11:30.000000000","message":"We\u0027ve already established that ``--os-auth-type`` is not supplied. Should this be reorganized so that this isn\u0027t indented inside the case where ``--os-auth-type`` is not provided?","commit_id":"5d0959917cceb396908d07482988afb995d3261a"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bb852a45c22ed48af3945146fc46a60642fc08f3","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Authentication"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"OpenStackClient leverages Keystone client\u0027s authentication plugins to support"},{"line_number":6,"context_line":"a number of different authentication methods."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Authentication Process"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_96f077ff","line":5,"updated":"2014-10-25 04:07:29.000000000","message":"OpenStack Client*","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"4951d932ddb17aa3973febba532bdf508819732f","unresolved":false,"context_lines":[{"line_number":2,"context_line":"Authentication"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"OpenStackClient leverages Keystone client\u0027s authentication plugins to support"},{"line_number":6,"context_line":"a number of different authentication methods."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Authentication Process"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_366a6b81","line":5,"in_reply_to":"9aa7fdbe_96f077ff","updated":"2014-10-25 05:08:50.000000000","message":"Did you notice it\u0027s been written as \u0027OpenStackClient\u0027 since the start?  It\u0027s a name, not a description.  At least until the lawyers tell us to change it.","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bb852a45c22ed48af3945146fc46a60642fc08f3","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"There are at least three authentication types that are always available:"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"* **Password**: A username and password, plus optional project and/or domain,"},{"line_number":33,"context_line":"  are used to identify the user.  This is the most common type and is the"},{"line_number":34,"context_line":"  default any time a username is supplied.  An authentication URL for the"},{"line_number":35,"context_line":"  Identity service is also required. [Required: ``--os-auth-url``,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_f697038e","line":32,"updated":"2014-10-25 04:07:29.000000000","message":"You say project is optional, but then list it as a required arg at line  36","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"4951d932ddb17aa3973febba532bdf508819732f","unresolved":false,"context_lines":[{"line_number":29,"context_line":""},{"line_number":30,"context_line":"There are at least three authentication types that are always available:"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"* **Password**: A username and password, plus optional project and/or domain,"},{"line_number":33,"context_line":"  are used to identify the user.  This is the most common type and is the"},{"line_number":34,"context_line":"  default any time a username is supplied.  An authentication URL for the"},{"line_number":35,"context_line":"  Identity service is also required. [Required: ``--os-auth-url``,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_766073a5","line":32,"in_reply_to":"9aa7fdbe_f697038e","updated":"2014-10-25 05:08:50.000000000","message":"I couldn\u0027t remember the rules between project and domain.  Is it one OR the other is required?","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bb852a45c22ed48af3945146fc46a60642fc08f3","unresolved":false,"context_lines":[{"line_number":36,"context_line":"  ``--os-project-name``, ``--os-username``; Optional: ``--os-password``]"},{"line_number":37,"context_line":"* **Token**: This is slightly different from the usual token authentication"},{"line_number":38,"context_line":"  (described below as token/endpoint) in that a token and an authentication"},{"line_number":39,"context_line":"  URL are supplied and the plugin retrieves a new (scoped?) token."},{"line_number":40,"context_line":"  [Required: ``--os-auth-url``, ``--os-token``]"},{"line_number":41,"context_line":"* **Token/Endpoint**: This is the original token authentication (known as \u0027token"},{"line_number":42,"context_line":"  flow\u0027 in the early CLI documentation in the OpenStack wiki).  It requires"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_368eeb79","line":39,"updated":"2014-10-25 04:07:29.000000000","message":"Pretty sure it returns an unscoped token if no scope (project/domain) is present. Otherwise it returns a scoped token.","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"4951d932ddb17aa3973febba532bdf508819732f","unresolved":false,"context_lines":[{"line_number":36,"context_line":"  ``--os-project-name``, ``--os-username``; Optional: ``--os-password``]"},{"line_number":37,"context_line":"* **Token**: This is slightly different from the usual token authentication"},{"line_number":38,"context_line":"  (described below as token/endpoint) in that a token and an authentication"},{"line_number":39,"context_line":"  URL are supplied and the plugin retrieves a new (scoped?) token."},{"line_number":40,"context_line":"  [Required: ``--os-auth-url``, ``--os-token``]"},{"line_number":41,"context_line":"* **Token/Endpoint**: This is the original token authentication (known as \u0027token"},{"line_number":42,"context_line":"  flow\u0027 in the early CLI documentation in the OpenStack wiki).  It requires"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_d65bdff3","line":39,"in_reply_to":"9aa7fdbe_368eeb79","updated":"2014-10-25 05:08:50.000000000","message":"I intended to ask Jamie about this, user supplies a token then the plugin makes a call to auth-url to get another one.  The user has not given a project or domain, is it assumed that they will be pulled from the supplied token if it is scoped?\n\nI don\u0027t want to go into all of the Keystone rules here, just describe how OSC and the plugins behave enough for the reader to know when/why they want to use this.  I\u0027ll remove the \u0027(scoped?)\u0027 bit if I rev this before I get this figured out.","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"4951d932ddb17aa3973febba532bdf508819732f","unresolved":false,"context_lines":[{"line_number":47,"context_line":"  in ``keystone.conf``.  It will also work with other services and a regular"},{"line_number":48,"context_line":"  scoped token such as one obtained from a ``token issue`` command."},{"line_number":49,"context_line":"  [Required: ``--os-url``, ``--os-token``]"},{"line_number":50,"context_line":"* **Others**: There are SAML and other (Kerberos?) plugins under development"},{"line_number":51,"context_line":"  that are also supported.  To use them they must be selected by supplying"},{"line_number":52,"context_line":"  the ``auth-type`` options."},{"line_number":53,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_96da374a","line":50,"updated":"2014-10-25 05:08:50.000000000","message":"Steve, I know ayoung is working on Kerberos, do y\u0027all know yet if that is going in to KSC or its own repo?","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bb852a45c22ed48af3945146fc46a60642fc08f3","unresolved":false,"context_lines":[{"line_number":49,"context_line":"  [Required: ``--os-url``, ``--os-token``]"},{"line_number":50,"context_line":"* **Others**: There are SAML and other (Kerberos?) plugins under development"},{"line_number":51,"context_line":"  that are also supported.  To use them they must be selected by supplying"},{"line_number":52,"context_line":"  the ``auth-type`` options."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"Detailed Process"},{"line_number":55,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_76eb1313","line":52,"updated":"2014-10-25 04:07:29.000000000","message":"os-auth-type*","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":970,"name":"Dean Troyer","email":"dtroyer@gmail.com","username":"dtroyer"},"change_message_id":"4951d932ddb17aa3973febba532bdf508819732f","unresolved":false,"context_lines":[{"line_number":49,"context_line":"  [Required: ``--os-url``, ``--os-token``]"},{"line_number":50,"context_line":"* **Others**: There are SAML and other (Kerberos?) plugins under development"},{"line_number":51,"context_line":"  that are also supported.  To use them they must be selected by supplying"},{"line_number":52,"context_line":"  the ``auth-type`` options."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"Detailed Process"},{"line_number":55,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_b60d7bea","line":52,"in_reply_to":"9aa7fdbe_76eb1313","updated":"2014-10-25 05:08:50.000000000","message":"Dang, missed that backporting the blog edits...  http://hackstack.org/x/blog/2014/10/24/how-dost-thy-cloud-know-me-let-me-count-the-ways/ is the original, less formal version that also includes the --os-cloud bits.","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bb852a45c22ed48af3945146fc46a60642fc08f3","unresolved":false,"context_lines":[{"line_number":54,"context_line":"Detailed Process"},{"line_number":55,"context_line":"----------------"},{"line_number":56,"context_line":""},{"line_number":57,"context_line":"The authentication process in OpenStackClient is all contained in and handled"},{"line_number":58,"context_line":"by the ``ClientManager`` object."},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"* On import ``api.auth``:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9aa7fdbe_b6f1fb02","line":57,"updated":"2014-10-25 04:07:29.000000000","message":"OpenStack Client*","commit_id":"d535686e03c169ffa697af17e97891846df8d8aa"}]}