openstack
/
keystone
Code Issues Proposed changes

SAML federation docs refer to old WSGIScriptAlias 

Some time ago, the default WSGIScriptAlias was changed from
/var/www/keystone/main to /usr/local/bin/keystone-wsgi-public
and /usr/local/bin/keystone-wsgi-admin.

The federation docs still referred to /var/www/keystone/main which
won't work in default configuration of keystone within apache.

Change-Id: Ib9c059d30c12e982a6b0b5b7fcbca6da650650ba
This commit is contained in:
Eric Brown 2016-11-28 16:03:51 -08:00
parent e41308668c
commit e120ac341a
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/source/federation/mellon.rst
View File

@ -31,9 +31,9 @@ You'll also need to install the Apache module `mod_auth_mellon
Configure your Keystone virtual host and adjust the config to properly handle SAML2 workflow:
Add *WSGIScriptAlias* directive to your vhost configuration::
Add this *WSGIScriptAlias* directive to your public vhost configuration::
WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1
WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /usr/local/bin/keystone-wsgi-public/$1
Make sure the *wsgi-keystone.conf* contains a *<Location>* directive for the Mellon module and
a *<Location>* directive for each identity provider

4
doc/source/federation/shibboleth.rst
View File

@ -31,9 +31,9 @@ example:
Configure your Keystone virtual host and adjust the config to properly handle SAML2 workflow:
Add *WSGIScriptAlias* directive to your vhost configuration::
Add this *WSGIScriptAlias* directive to your public vhost configuration::
WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1
WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /usr/local/bin/keystone-wsgi-public/$1
Make sure the *keystone.conf* vhost file contains a *<Location>* directive for the Shibboleth module and
a *<Location>* directive for each identity provider::