7 Commits

Author SHA1 Message Date
Matt Fischer
f8e3ed7fdd Fix deprecated LDAP config options
In Juno, the tenant_* LDAP related options are deprecated in favor of
project_*. See Table 7.38 here:
http://docs.openstack.org/trunk/config-reference/content/keystone-conf-changes-juno.html

Change-Id: I6da58559478d92df8facab1bf8191fdb2b44259b
2015-01-08 14:25:05 -07:00
Rich Megginson
99fd7bf3cb support the ldap user_enabled_invert parameter
The ldap backend has a new parameter called user_enabled_invert.
This should be supported by puppet.

Closes-Bug: #1383779
Change-Id: I6d10408b15fa56610e25b37d3962067e8361da5c
2014-11-20 08:34:37 -05:00
Aleksandr Didenko
8548a52295 Fix config options deprecated in Juno
http://docs.openstack.org/juno/config-reference/content/keystone-conf-changes-juno.html

Change-Id: I7ba69ca616bd7ae772b0a45a9fda5910fd66071c
2014-11-11 18:32:34 +02:00
Matt Fischer
cca5483237 Add python-ldappool as a requirement for LDAP
The latest LDAP code requires the python-ldappool module.

Change-Id: I36ba8082c6340b1f43fa384e28f3efebd432cf91
2014-10-23 10:00:15 -06:00
Matt Fischer
579e8ca624 Fixing several errors in the LDAP module
- The same attribute was mistakenly written to incorrect fields
 - A few tenant_ attributes were missing
 - The test was incomplete
 - The tenant_mail_attribute was mistakenly included, it doesn't exist

Change-Id: I57a05bce9b9246036f586bc80bc0b0c7f8b4694a
2014-03-28 14:04:26 -06:00
Matt Fischer
6fd675a2fe Full support for Keystone LDAP integration
Adding full support for integrating Keystone via LDAP. Enables
support for managing all LDAP related Keystone options.

 - Add two examples of LDAP configuration, although LDAP environments
   are highly variable, these will help get everyone started
 - Modify the keystone::ldap class to support all LDAP related options
 - Check sane defaults in the keystone::ldap class to hopefully reduce mistakes
 - Add a dependency on the python-ldap package
 - Modify the LDAP test to match the new class
 - Make the default-tenant optional since some LDAP backends do not
   support this

Change-Id: Ie6879eb4816fd2b906f72cac8deb3b62bd4b2430
2014-03-25 15:50:16 -06:00
Dan Bode
18a6c6a99f Move keystone ldap class to correct file.
The dirname did not match the class namespace.

Now it does. And I added some tests so that its actually
being tested for stuff like this.
2012-11-06 14:54:08 -08:00