openstack/openstack-helm
Code Issues Proposed changes

Merge "Map LDAP groups in keystone"

Browse Source
This commit is contained in:
Zuul 2020-02-18 21:11:43 +00:00 committed by Gerrit Code Review
commit 79b324e289
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
keystone/values_overrides/ldap.yaml
View File

@ -41,6 +41,12 @@ conf:
user_mail_attribute: mail
user_pass_attribute: userPassword
group_tree_dn: "ou=Groups,dc=cluster,dc=local"
group_filter: ""
group_objectclass: posixGroup
group_id_attribute: cn
group_name_attribute: cn
group_desc_attribute: description
group_member_attribute: memberUID
use_pool: true
pool_size: 27
pool_retry_max: 3

2
tools/deployment/component/keystone/keystone.sh
View File

@ -44,6 +44,8 @@ FEATURE_GATE="ldap"; if [[ ${FEATURE_GATES//,/ } =~ (^|[[:space:]])${FEATURE_GAT
openstack user list
openstack user list --domain ldapdomain
openstack group list --domain ldapdomain
openstack role add --user bob --project admin --user-domain ldapdomain --project-domain default admin
domain="ldapdomain"