openstack-attic
/
identity-api
Code Issues Proposed changes

Add REMOTE_USER mapping info in federation docs. 

Reflect changes proposed in https://review.openstack.org/#/c/133037/ .
With the patch it is no longer compulsory to specify the rule for
``user_name`` mapping. If such rule is missing, a ``REMOTE_USER`` is
attempted.

Change-Id: Ib7c034fcbc7a2f22992fbcf6f75df12269399782
Closes-Bug: #1390085
This commit is contained in:
Marek Denis 2014-11-11 13:50:28 +01:00
parent f127f394bb
commit ec287bbb5d
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
v3/src/markdown/identity-api-v3-os-federation-ext.md
View File

@ -105,9 +105,9 @@ Required attributes::
}
}
Note that at least one rule must have a `user` attribute. If the `user`
attribute is missing when processing an assertion, the action returns
an HTTP 401 Unauthorized error.
If the `user` attribute is missing when processing an assertion, server
tries to directly map `REMOTE_USER` environment variable. If this variable
is also unavailable the server returns an HTTP 401 Unauthorized error.
For attribute type and value mapping, identify the local
resource type, attribute, and value: