The specification detailing the great documentation migration
requires a doc/source/contributor/ directory for all contributor
documentation. Keystone had a directory specifically for this type
of content but it was in doc/source/devref/.
This commit renames devref/ to contributor/ because the term
`contributor` is more inclusive of other community members that
aren't necessarily developers. The specification also requires this
convention for consistency with other projects.
Change-Id: Id6363213dc6ba6946bd272ca5ee67b4604afc5ac
Partial-Bug: 1694460
All users and groups are required to have a name. Prior to this fix,
Keystone was not properly enforcing this for LDAP users and groups.
Keystone will now ignore users and groups that do not have a value for
the LDAP attribute which Keystone has been configured to use for that
entity's name.
Closes-Bug: #1704205
Change-Id: I424813785b7a355514ef42f1e4c6384b8a78b256
This is part of an effort to consolidate everything from the Operator
guide into the Administrator guide.
Change-Id: I76b0eaee11f5a8d68304a163381c905611edd43b
Since the last patch in the ocata release that removed the metadata_ref,
the ec2tokens api is broken due to unable to unpack the result of the
authenticate command (4 elements) while expecting to expand it into 5.
Change-Id: I71c4b51444ea9f7a3016b68d7dee9a4747e9c0fd
Closes-Bug: #1691111
Closes-Bug: #1635389
The guide uses the Apache HTTP server with mod_wsgi to serve
identity service, but it did not introduce the step to install
Apache2 and libapache2-mod-wsgi package in this guide. The identity
service will not be started without these two packages.
This patch modify the step 1 in part "Install and configure components"
for installing two packages metioned above.
Change-Id: I8ca55e605f806bdc48f753ab893040d9a76aa93d
Closes-Bug: 1707176
When creating an IdP, if a domain was generated for it and a conflict
was raised while effectively creating the IdP in the database, the
auto-generated domain is now cleaned up.
Change-Id: I9b7c3c1fae32b9412f75323a75d9ebe4ad756729
Closes-Bug: #1688188
The OS-EP-FILTER api-ref request sample is malformed; it is missing a comma
for it to be proper json. This patchset fixes the issue.
trivial fix
Change-Id: Ia26fc67affde11335a825dcff7063716f09d071b
Some references to whitelisting and blacklisting was confusing in the
mapping documentation. This commit attempts to clarify the wording
and purpose for both whitelists and blacklists.
Change-Id: I09f4762f03824acc689600c8561fe99ea113ad9a
Closes-Bug: 1693690
Keystone was complaining about not being able to load the
remote_id_attribute in the mapped group [0]. Since moving
to uwsgi, restarting keystone is done separately from apache,
so the configuration file wasn't being reloaded. Added a line
to restart the keystone service.
Also added a line to restart apache after configuration.
[0] http://paste.openstack.org/show/616498/
Change-Id: I4e7c04241c5058152529f8c95963be6f05f51a51
Closes-Bug: 1700847
Now that the admin-guide lives within keystone, it should be home to
our performance documentation.
Change-Id: I522cf238a977e9cead384fcf993300e7f8c2a395
The admin-guide and configuration.rst both had separate sections
that detailed certificate documentation. Much of the documentation
was exactly the same. Now that keystone owns it's own admin-guide,
we can remove the duplication and simplify our docs.
Change-Id: I387902723637174c259ff421083a2933942f07fd
The operator documentation had a section specific to developing
authentication plugins. This type of documentation is better suited
to the contributor guide. This commit moves it there.
Change-Id: I74337e8b3d8c9031fa3cb7fb709cc41042161bb9
This change adds a missing comma to the
project-update-response sample json in order to have valid
json within the example response.
Change-Id: If4a70a5f99f2d3ac5f812272b2138f95adefe9ff
Merged the basic docs, keystone architecture and
external developers related docs to create separate
sections for the three.
Change-Id: I23b4ac709e0040e5580c451f4c7f54dc194a5529
The doc migration spec requires each sub directory
to have an index page which could be directly
referenced in the main openstack documentation under
the topic specific pages, along with other projects.
This patch validates that and adds new files where
they are absent.
Change-Id: I180952857db758482fd767aa9f5cf6343fec9c42
The development environment setup docs were duplicated in two
separate places. This commit remove it from the "Getting Started"
section and into the contributor guide.
Change-Id: If243fd9896be286f9d4c80139eb3cb86600f0052
* In shibboleth2.xml make the ENTITY_ID and METADATA_URL
configurable.
* Copy over an attribute map that includes support for
keystone as an idp attributes.
bp devstack-plugin
Change-Id: I40157b00e5d084dcc6bb5b1f4be7d9cd3a8a0fc7
For a better readability and flow, reorganised and
renamed various sections in developer documentation.
Change-Id: I23ac014701e0ca0984e23ff07192cfdf4d8fd4dd
In a previous change [0] when warning-is-error was
added, the sphinx todo extension was causing errors
with duplicate registration.
However with the recent changes between pbr and
sphinx, this extension no longer throws a duplicate
error when using warning-is-error and we can add
it back in.
[0] https://review.openstack.org/#/c/439674/
Change-Id: Ie28d87dfca8ee5cbea28616b32c471d848c50759
Keystone nows has it's own configuration guide, which means we no
longer need to maintain a separate configuration reference in the
operator guide.
Change-Id: Iadfb90db9f5f23798d57a442e372d35519332a49
As a part of reorganisation of developer docs, removed the
best practices documentation and made the subsections in it
as overall sections. More renaming and reorganisation will
be addressed in the following patches.
Change-Id: I21bf8fe3855fd1d441ec3dba342babc90516714d
