If you use keystone-manage mapping_engine --engine-debug to test your rules (or when debug logging is on during run time) the diagnostic output fails to emit a piece of crucial information, the contents direct map array. What you'll get instead is this: direct_maps: <keystone.federation.utils.DirectMaps object at 0x7f7121887b00> That's because the DirectMaps class does not have a __str__() method and Python resorts to __ref__() in the absence of __str__() and all __ref__() does is print the class name and it's memory location, not very useful. This patch adds a __str__() method to the DirectMaps class so the debug output now includes the actual direct map data like this: direct_maps: [['jdoe@example.com'], ['Group1', 'Group3']] Co-Authored-By: Lance Bragstad <lbragstad@gmail.com> Change-Id: I07643fbe3e1e712b7eac716a7f671a2d513e920b Closes-Bug: 1841486 Signed-off-by: John Dennis <jdennis@redhat.com>
Team and repository tags
OpenStack Keystone
Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.
Developer documentation, the source of which is in
doc/source/
, is published at:
The API reference and documentation are available at:
The canonical client library is available at:
Documentation for cloud administrators is available at:
The source of documentation for cloud administrators is available at:
Information about our team meeting is available at:
Release notes is available at:
Bugs and feature requests are tracked on Launchpad at:
Future design work is tracked at:
Contributors are encouraged to join IRC
(#openstack-keystone
on freenode):
For information on contributing to Keystone, see
CONTRIBUTING.rst
.