openstack-ansible-os_keystone/releasenotes/notes
Georgina 47fe909d54 Federated openid support using auth_mod_openidc
This patch adds support for using mod_auth_openidc instead of shibboleth for
supporting users who have a preference to use oidc for federation. A new
variable called apache_mod is added to keystone_sp allowing the auth library
to be selected. If left undefined shibboleth auth module will continue to be
installed by default maintaining backward compatibility.

This patch does not support simultaneous use of shibboleth and mod_auth_openidc
primarily because shib2 depends on libcurl3 but mod_auth_openidc depends on
libcurl4 which cannot coexist on Ubuntu. This can be resolved when there is a
shib3 package available in a future release of Ubuntu.

Change-Id: I80031f7d3f0fcc2029cd6861dcb6687e8a9f0a2e
2020-01-31 11:28:38 +00:00
..
.placeholder Add reno scaffolding for release notes management 2016-04-09 19:20:42 +01:00
add-security-headers-e46c205b42b9598b.yaml Add security headers to web accessable services. 2017-10-22 03:01:16 +00:00
app-credentials-709e7ae0573b4955.yaml Add application credentials as a default authentication method 2019-10-01 21:28:48 +01:00
capping_keystone_workers-e284a47fc4dcea38.yaml Cap the number of worker threads 2017-02-23 05:15:53 -05:00
deprecated-memcached-and-backend-caching-vars-88c48117b232b37e.yaml Fix memcache caching w/ multiple cache servers 2018-01-29 09:40:12 +00:00
extra-headers-e54a672d3a78dd89.yaml Add extra headers for Keystone 2017-08-17 14:44:44 -05:00
git-sourced-config-change-5b445d3ce26d29c1.yaml Use the venv contents instead of a git source for templates 2018-04-03 09:53:34 +01:00
journal-log-ccbb504642b49611.yaml Fix typo in release note 2018-10-27 16:08:21 +02:00
keystone_init_time_settings-62a1aab4bcfc9779.yaml Rename release note to unique hash 2017-04-28 11:39:09 +01:00
keystone-endpoints-urls-679748dec6ee6dd7.yaml Bootstrap Keystone with versionless endpoints 2017-05-16 16:29:37 +02:00
keystone-init-config-overrides-1857d5e5bc5a905f.yaml spelling error 2018-12-31 14:52:53 +08:00
keystone-nginx-default-e9d91affd646f379.yaml Switch to using Nginx/uWSGI by default 2017-06-29 16:42:36 +00:00
keystone-service-setup-host-cd3ee3346af823e6.yaml Execute service setup against a delegated host using Ansible built-in modules 2018-07-13 19:01:59 +00:00
keystone-upstream-config-files-d16f27fc1332ed83.yaml Source template files from git or deploy host 2017-04-04 09:51:09 +00:00
mod-auth-openidc-102bd253b677f3fc.yaml Federated openid support using auth_mod_openidc 2020-01-31 11:28:38 +00:00
openstack-distribution-packages-d42a426bb57f76b1.yaml Add support for using distribution packages for OpenStack services 2018-05-14 13:13:41 +01:00
os_keystone-centos7-support-0a5d97f81ac42e44.yaml Rename package lists (and related vars) appropriately 2016-08-30 20:05:21 +00:00
os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml Add note on admin_token_auth deprecation 2016-06-15 16:06:23 -07:00
os-keystone-apache-log-format-support-7232177f835222ee.yaml Add support for CustomLog format modification 2016-06-06 17:33:26 +06:00
os-keystone-apache-mpm-tunable-support-1c72f2f99cd502bc.yaml Add support to tune the keystone apache MPM settings 2016-05-04 11:50:06 -04:00
os-keystone-only-install-venv-b766568ee8d40354.yaml Only install to virtual environment 2016-07-06 18:42:09 -07:00
os-keystone-remove-service-user-f2100fa3127c7c2e.yaml Remove keystone service user 2018-10-18 09:56:05 -07:00
os-keystone-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml Allow Uwsgi configuration overrides 2016-09-01 07:20:12 +01:00
os-keystone-zero-downtime-upgrade-5f19ab84183490b9.yaml Replacing the HTTP protocal with HTTPS in jobs.yaml. 2018-11-14 00:47:31 +08:00
oslo-messaging-separate-backends-e68c98d4f9d9a79c.yaml releasenotes: oslo-messaging-separate-backends add project name 2018-10-15 16:57:13 +02:00
package-list-name-changes-007cacee4faf8ee6.yaml Rename package lists (and related vars) appropriately 2016-08-30 20:05:21 +00:00
package-state-711a1eb4814311cc.yaml Add ability to change apt/yum package state 2016-08-02 08:49:23 -05:00
primary-container-rebuild-a2f4d7f33d66c843.yaml Rebuild credential-key repo during keystone[0] rebuild 2017-03-04 02:46:39 +00:00
remove_rpc_backend-187132a35223d295.yaml Deprecate rpc_backend option 2017-06-17 11:49:07 +00:00
remove-requirements-git-bdf5691b8390ed7c.yaml Simplify pip options/constraints mechanism 2016-10-19 14:51:03 +00:00
sso-callback-template-cf720ab7f6fc2461.yaml Use correct variable for sso_callback_template deployment 2018-06-05 18:50:14 +01:00
tls12-only-75222cbe8c32ad57.yaml Force force-tlsv12 only 2018-12-06 10:22:23 -06:00