diff options
Diffstat (limited to 'doc/source/configuration.rst')
| -rw-r--r-- | doc/source/configuration.rst | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/source/configuration.rst b/doc/source/configuration.rst index 1c339490..b4af31f8 100644 --- a/doc/source/configuration.rst +++ b/doc/source/configuration.rst @@ -72,6 +72,7 @@ following sections: * ``[sql]`` - optional storage backend configuration * ``[ec2]`` - Amazon EC2 authentication driver configuration * ``[s3]`` - Amazon S3 authentication driver configuration. +* ``[oauth1]`` - Oauth 1.0a system driver configuration * ``[identity]`` - identity system driver configuration * ``[catalog]`` - service catalog driver configuration * ``[token]`` - token driver & token provider configuration @@ -96,6 +97,25 @@ order: PasteDeploy configuration file is specified by the ``config_file`` parameter in ``[paste_deploy]`` section of the primary configuration file. If the parameter is not an absolute path, then Keystone looks for it in the same directories as above. If not specified, WSGI pipeline definitions are loaded from the primary configuration file. +Keystone supports the option (disabled by default) to specify identity driver +configurations on a domain by domain basis, allowing, for example, a specific +domain to have its own LDAP or SQL server. This is configured by specifying the +following options:: + + [identity] + domain_specific_drivers_enabled = True + domain_config_dir = /etc/keystone/domains + +Setting ``domain_specific_drivers_enabled`` to True will enable this feature, causing +keystone to look in the ``domain_config_dir`` for config files of the form:: + + keystone.<domain_name>.conf + +Options given in the domain specific configuration file will override those in the +primary configuration file for the specified domain only. Domains without a specific +configuration file will continue to use the options from the primary configuration +file. + Authentication Plugins ---------------------- |