but how can i INTEGRATE 2 authentication factors, in openstack using RCDevs Security Solutions?
You can refer to https://ask.openstack.org/en/question...
Keystone is in the process of finalizing OTP. Most probably it will be available in kilo release ( next release)
https://review.openstack.org/#/c/130376/
Update 1:
None of the services require any change. All the services operate on token and the roles assoicated with token. As long as you pass a valid token to the service, it will work. It doesn't matter how you got the token.
Pluggin is just an implementation of a interface. Look at Pasword auth at https://github.com/openstack/keystone... . Similarly you need to add one more class say OTPAuth and override the authenticate method to validate the OTP.
Next step is to register your class in the configuration file. Check the following line: https://github.com/openstack/keystone...
Similarly you need to register your OTP class there
The pluggin should be in keystone. We currently have pluggins for password, saml, oath authentication. Similarly you need to add one for OTP. Check this out https://github.com/openstack/keystone...
Thanks Haneef Ali,
i not have experience about the plugin writing but this isn't a problem: for me this is a new challenge.
Please,and i underline please: Can you illustrate me how to implement a plugin? Which are knowledge required (except python) to do a simple (t)otp plugin?
I suppose that this implementation is needed to public endpoint but for the other? I think that also all service like glance, neutron need of a otp...but this may be a complication (i want to do this, to my thesis and my knowledge)
What's you think about?
Thanks for your support
Asked: 2014-12-06 06:25:03 -0500
Seen: 1,240 times
Last updated: Apr 30 '18
