)]}'
{"security-guide-rst/source/identity/federated-keystone.rst":[{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"d7da23cf753e7a0871a2033b14544915b05b542f","unresolved":false,"context_lines":[{"line_number":210,"context_line":"    The ``apt-get`` command is Ubuntu specific. For other distributions,"},{"line_number":211,"context_line":"    replace with appropriate command."},{"line_number":212,"context_line":""},{"line_number":213,"context_line":"Configure the Identity service virtual host and adjust the config to"},{"line_number":214,"context_line":"properly handle SAML2 workflow."},{"line_number":215,"context_line":""},{"line_number":216,"context_line":"Add ``WSGIScriptAlias`` directive to your vhost configuration:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_2cfe9fae","side":"PARENT","line":213,"updated":"2015-07-31 18:05:21.000000000","message":"This is one of the bullet points.","commit_id":"75b9fd32cc6026488a04f99bae154b195dd5bd1e"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"d7da23cf753e7a0871a2033b14544915b05b542f","unresolved":false,"context_lines":[{"line_number":219,"context_line":""},{"line_number":220,"context_line":"    WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1"},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"Add two ``\u003cLocation\u003e`` directives to the :file:`wsgi-keystone.conf` file:"},{"line_number":223,"context_line":""},{"line_number":224,"context_line":".. code:: console"},{"line_number":225,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_0c6c039b","side":"PARENT","line":222,"updated":"2015-07-31 18:05:21.000000000","message":"This is one of the bullet points.","commit_id":"75b9fd32cc6026488a04f99bae154b195dd5bd1e"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"09c2661f15a1e5f3f2ffb73f5f7bb7929b9b07f7","unresolved":false,"context_lines":[{"line_number":113,"context_line":"   * Enable TLS support. Install ``mod_nss`` according to your distribution,"},{"line_number":114,"context_line":"     then apply the following patch and restart HTTPD:"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"   .. code:: ini"},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"      --- /etc/httpd/conf.d/nss.conf.orig 2012-03-29 12:59:06.319470425 -0400"},{"line_number":119,"context_line":"      +++ /etc/httpd/conf.d/nss.conf      2012-03-29 12:19:38.862721465 -0400"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_fb762f05","line":116,"updated":"2015-07-31 17:21:09.000000000","message":"Needs one more level of indentation, so that it starts under \"E\"","commit_id":"1b398155253fb3dee8656cd4a9fa6a61fced5b83"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"09c2661f15a1e5f3f2ffb73f5f7bb7929b9b07f7","unresolved":false,"context_lines":[{"line_number":136,"context_line":""},{"line_number":137,"context_line":"      #   General setup for the virtual host"},{"line_number":138,"context_line":"      #DocumentRoot \"/etc/httpd/htdocs\""},{"line_number":139,"context_line":"      \u003c/virtualhost\u003e\u003c/virtualhost\u003e"},{"line_number":140,"context_line":""},{"line_number":141,"context_line":"   * If you have a firewall in place, configure it to allow TLS traffic. For"},{"line_number":142,"context_line":"     example:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_5b72c3e4","line":139,"updated":"2015-07-31 17:21:09.000000000","message":"The entire code block above needs one more level of indentation.","commit_id":"1b398155253fb3dee8656cd4a9fa6a61fced5b83"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"09c2661f15a1e5f3f2ffb73f5f7bb7929b9b07f7","unresolved":false,"context_lines":[{"line_number":171,"context_line":"     you have the file in ``/var/www/cgi-bin`` location, you can do this by"},{"line_number":172,"context_line":"     running:"},{"line_number":173,"context_line":""},{"line_number":174,"context_line":"     .. code:: ini"},{"line_number":175,"context_line":""},{"line_number":176,"context_line":"        # restorecon /var/www/cgi-bin"},{"line_number":177,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_3b0c9741","line":174,"updated":"2015-07-31 17:21:09.000000000","message":"ini or console?","commit_id":"1b398155253fb3dee8656cd4a9fa6a61fced5b83"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"09c2661f15a1e5f3f2ffb73f5f7bb7929b9b07f7","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":"     Add two ``\u003cLocation\u003e`` directives to the :file:`wsgi-keystone.conf` file:"},{"line_number":224,"context_line":""},{"line_number":225,"context_line":"     .. code:: console"},{"line_number":226,"context_line":""},{"line_number":227,"context_line":"        \u003cLocation /Shibboleth.sso\u003e"},{"line_number":228,"context_line":"        SetHandler shib"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_3e41e539","line":225,"updated":"2015-07-31 17:21:09.000000000","message":"i think this should be ini, as we are switching the first code block to ini.","commit_id":"1b398155253fb3dee8656cd4a9fa6a61fced5b83"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"09c2661f15a1e5f3f2ffb73f5f7bb7929b9b07f7","unresolved":false,"context_lines":[{"line_number":243,"context_line":"        use a wildcard value. Otherwise every Federated protocol will be"},{"line_number":244,"context_line":"        handled by Shibboleth."},{"line_number":245,"context_line":""},{"line_number":246,"context_line":"    The ``ShibRequireSession`` rule is invalid in Apache 2.4 or newer"},{"line_number":247,"context_line":"    and should be dropped in that specific setup."},{"line_number":248,"context_line":""},{"line_number":249,"context_line":"   * Enable the Identity service virtual host:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a50d1a3_3e72457d","line":246,"updated":"2015-07-31 17:21:09.000000000","message":"This para is part of the note, please indent to match it with \"The\" in first para.","commit_id":"1b398155253fb3dee8656cd4a9fa6a61fced5b83"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"c304f936b28622b07ed3ffc1d541a98528c6ea31","unresolved":false,"context_lines":[{"line_number":110,"context_line":"#. Run the Identity service under Apache, instead of using"},{"line_number":111,"context_line":"   ``keystone-all``."},{"line_number":112,"context_line":""},{"line_number":113,"context_line":"   * Enable TLS support. Install ``mod_nss`` according to your distribution,"},{"line_number":114,"context_line":"     then apply the following patch and restart HTTPD:"},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"     .. code:: diff"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a4dcd0f_4fe9e619","line":113,"updated":"2015-08-03 23:53:01.000000000","message":"All of these bullets are actually substeps, and should be numbered. I recommend using a. b. c. and so on. This currently renders as numbers, but hopefully it will eventually render as letters.","commit_id":"9877952cc07028e6e6f27f07defbe41b45f74b0b"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"c304f936b28622b07ed3ffc1d541a98528c6ea31","unresolved":false,"context_lines":[{"line_number":271,"context_line":""},{"line_number":272,"context_line":"#. Configure Apache to use a Federation capable authentication method."},{"line_number":273,"context_line":""},{"line_number":274,"context_line":"   * Once you have your Identity service virtual host ready, configure"},{"line_number":275,"context_line":"     Shibboleth and upload your metadata to the Identity Provider."},{"line_number":276,"context_line":""},{"line_number":277,"context_line":"     If new certificates are required, they can be easily created by"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a4dcd0f_0ff3de0b","line":274,"updated":"2015-08-03 23:53:01.000000000","message":"All of these bullets are actually substeps, and should be numbered. I recommend using a. b. c. and so on. This currently renders as numbers, but hopefully it will eventually render as letters.","commit_id":"9877952cc07028e6e6f27f07defbe41b45f74b0b"},{"author":{"_account_id":12686,"name":"Brian Moss","email":"kallimachos@gmail.com","username":"bmoss"},"change_message_id":"c304f936b28622b07ed3ffc1d541a98528c6ea31","unresolved":false,"context_lines":[{"line_number":312,"context_line":""},{"line_number":313,"context_line":"#. Enable ``OS-FEDERATION`` extension:"},{"line_number":314,"context_line":""},{"line_number":315,"context_line":"   * Add the Federation extension driver to the ``[federation]`` section in"},{"line_number":316,"context_line":"     the :file:`keystone.conf` file. For example:"},{"line_number":317,"context_line":""},{"line_number":318,"context_line":"     .. code:: ini"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a4dcd0f_efda3278","line":315,"updated":"2015-08-03 23:53:01.000000000","message":"Substeps, etc.","commit_id":"9877952cc07028e6e6f27f07defbe41b45f74b0b"}]}