Ask Your Question
1

Can LDAP and SQL authentication be used together

asked 2016-12-20 13:43:19 -0600

xdaxdb gravatar image

I'd like to have users be able to authenticate using their LDAP credentials, but have admin authentication remain in SQL only. I do not want to use LDAP groups for authorization.

Is this a common configuration? So far I get the impression it is not.

edit retag flag offensive close merge delete

2 answers

Sort by » oldest newest most voted
2

answered 2016-12-21 03:23:48 -0600

albertomolina gravatar image

updated 2016-12-29 04:37:09 -0600

Yes, it's a common configuration and it can be solved easily with keystone v3 that allows you to define domains and you can use a different authentication method to each domain.

This blog post can help you:

https://adam.younglogic.com/2015/02/adding-an-ldap-backed-domain-to-a-packstack-install/

edit flag offensive delete link more

Comments

I'm not seeing an example of creating a sql driver domain anywhere.

xdaxdb gravatar imagexdaxdb ( 2016-12-24 02:01:36 -0600 )edit

Actually I get it now, you don't need to make a sql domain you just leave the existing non-domain config as is and your LDAP config within the domain config file. The openstack docs were detailed on this also I just wasn't catching this particular detail.

xdaxdb gravatar imagexdaxdb ( 2016-12-24 02:19:08 -0600 )edit
1

answered 2016-12-20 17:57:06 -0600

Would this help: http://www.mattfischer.com/blog/?p=576. "[a solution] where service accounts live in Keystone’s SQL backend and if users fail to authenticate there they fallback to LDAP"

edit flag offensive delete link more

Comments

Does the linked solution pre-date keystone v3? It seems clever, but a configuration that requires a third-party script feels a bit hacky to me. Difficult to document. I'll keep it in mind though.

xdaxdb gravatar imagexdaxdb ( 2016-12-24 02:13:19 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-12-20 13:43:19 -0600

Seen: 389 times

Last updated: Dec 29 '16