47fe909d54
This patch adds support for using mod_auth_openidc instead of shibboleth for supporting users who have a preference to use oidc for federation. A new variable called apache_mod is added to keystone_sp allowing the auth library to be selected. If left undefined shibboleth auth module will continue to be installed by default maintaining backward compatibility. This patch does not support simultaneous use of shibboleth and mod_auth_openidc primarily because shib2 depends on libcurl3 but mod_auth_openidc depends on libcurl4 which cannot coexist on Ubuntu. This can be resolved when there is a shib3 package available in a future release of Ubuntu. Change-Id: I80031f7d3f0fcc2029cd6861dcb6687e8a9f0a2e |
||
---|---|---|
.. | ||
.placeholder | ||
add-security-headers-e46c205b42b9598b.yaml | ||
app-credentials-709e7ae0573b4955.yaml | ||
capping_keystone_workers-e284a47fc4dcea38.yaml | ||
deprecated-memcached-and-backend-caching-vars-88c48117b232b37e.yaml | ||
extra-headers-e54a672d3a78dd89.yaml | ||
git-sourced-config-change-5b445d3ce26d29c1.yaml | ||
journal-log-ccbb504642b49611.yaml | ||
keystone_init_time_settings-62a1aab4bcfc9779.yaml | ||
keystone-endpoints-urls-679748dec6ee6dd7.yaml | ||
keystone-init-config-overrides-1857d5e5bc5a905f.yaml | ||
keystone-nginx-default-e9d91affd646f379.yaml | ||
keystone-service-setup-host-cd3ee3346af823e6.yaml | ||
keystone-upstream-config-files-d16f27fc1332ed83.yaml | ||
mod-auth-openidc-102bd253b677f3fc.yaml | ||
openstack-distribution-packages-d42a426bb57f76b1.yaml | ||
os_keystone-centos7-support-0a5d97f81ac42e44.yaml | ||
os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml | ||
os-keystone-apache-log-format-support-7232177f835222ee.yaml | ||
os-keystone-apache-mpm-tunable-support-1c72f2f99cd502bc.yaml | ||
os-keystone-only-install-venv-b766568ee8d40354.yaml | ||
os-keystone-remove-service-user-f2100fa3127c7c2e.yaml | ||
os-keystone-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml | ||
os-keystone-zero-downtime-upgrade-5f19ab84183490b9.yaml | ||
oslo-messaging-separate-backends-e68c98d4f9d9a79c.yaml | ||
package-list-name-changes-007cacee4faf8ee6.yaml | ||
package-state-711a1eb4814311cc.yaml | ||
primary-container-rebuild-a2f4d7f33d66c843.yaml | ||
remove_rpc_backend-187132a35223d295.yaml | ||
remove-requirements-git-bdf5691b8390ed7c.yaml | ||
sso-callback-template-cf720ab7f6fc2461.yaml | ||
tls12-only-75222cbe8c32ad57.yaml |