summaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorAdam Young <ayoung@redhat.com>2013-07-12 10:23:38 -0400
committerJamie Lennox <jamielennox@gmail.com>2013-07-17 12:45:52 +1000
commit88c319e6bce98082f9a90b8b27726793d5366326 (patch)
tree867ae6600cec6cfd50885eaf86d17dfb27cd1a16 /etc
parent3a56c8a68d0f033266f98963261a6d724e506966 (diff)
downloadkeystone-88c319e6bce98082f9a90b8b27726793d5366326.tar.gz
keystone-88c319e6bce98082f9a90b8b27726793d5366326.tar.xz
keystone-88c319e6bce98082f9a90b8b27726793d5366326.zip
Pluggable Remote User
Select the code to handle REMOTE_USER based on a config file option Fixes the REMOTE_USER logic to get the domain name from REALM, which is the least surprise option. Disregards the auth_data passed in, as we should be using REMOTE_USER to get the user name. External Plugin is now executed in conjunction with the auth methods, as opposed to in place of them. DocImpact blueprint pluggable-remote-user Change-Id: I9dda6dbe073f03806bdf539db6faa01644109f1c
Diffstat (limited to 'etc')
-rw-r--r--etc/keystone.conf.sample3
1 files changed, 2 insertions, 1 deletions
diff --git a/etc/keystone.conf.sample b/etc/keystone.conf.sample
index 7ab9acdc..671accf1 100644
--- a/etc/keystone.conf.sample
+++ b/etc/keystone.conf.sample
@@ -257,7 +257,8 @@
# user_additional_attribute_mapping =
[auth]
-methods = password,token
+methods = external,password,token
+#external = keystone.auth.plugins.external.ExternalDefault
password = keystone.auth.plugins.password.Password
token = keystone.auth.plugins.token.Token