Ask Your Question

openstack federation problem

asked 2015-11-26 03:46:09 -0500

daryana gravatar image

I installed two separate openstack (juno release) on centos 7 and now I want to federate them.

I copy wsgi-keystone.conf to etc/httpd/conf.d/ to add virtual host and shib configuration. This is the file:

<Location "/keystone">
    Authtype none

<VirtualHost *:5000>
   WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1

<Location /Shibboleth.sso>
  SetHandler shib

<Location /v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth>
  ShibRequestSetting requireSession 1
  ShibRequestSetting applicationId idp_1
  AuthType shibboleth
  ShibExportAssertion Off
  Require valid-user
  <IfVersion < 2.4>
     ShibRequireSession On
     ShibRequireAll On

but when I restart httpd service I get this error :

Invalid command 'NSSRequireSSL', perhaps misspelled or defined by a module not included in the ser...guration

can I comment NSSRequierSSL in the file (I don't want to active ssl)? Or other solutions?


edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2015-11-27 06:25:11 -0500

Please refer this blog on Keystone to keystone federation in Kilo. This might give you some idea on this.

edit flag offensive delete link more


@jayaprakash, thanks. but I do by the same manual in Juno.

daryana gravatar imagedaryana ( 2015-11-28 06:31:14 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-11-26 03:46:09 -0500

Seen: 188 times

Last updated: Nov 27 '15