Ask Your Question
0

openstack federation problem

asked 2015-11-26 03:46:09 -0500

daryana gravatar image

I installed two separate openstack (juno release) on centos 7 and now I want to federate them.

I copy wsgi-keystone.conf to etc/httpd/conf.d/ to add virtual host and shib configuration. This is the file:

<Location "/keystone">
    NSSRequireSSL
    Authtype none
</Location>

<VirtualHost *:5000>
   WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1
</VirtualHost>

<Location /Shibboleth.sso>
  SetHandler shib
</Location>

<Location /v3/OS-FEDERATION/identity_providers/idp_1/protocols/saml2/auth>
  ShibRequestSetting requireSession 1
  ShibRequestSetting applicationId idp_1
  AuthType shibboleth
  ShibExportAssertion Off
  Require valid-user
  <IfVersion < 2.4>
     ShibRequireSession On
     ShibRequireAll On
 </IfVersion>
</Location>

but when I restart httpd service I get this error :

Invalid command 'NSSRequireSSL', perhaps misspelled or defined by a module not included in the ser...guration

can I comment NSSRequierSSL in the file (I don't want to active ssl)? Or other solutions?

Thanks.

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
1

answered 2015-11-27 06:25:11 -0500

Please refer this blog on Keystone to keystone federation in Kilo. This might give you some idea on this.

edit flag offensive delete link more

Comments

@jayaprakash, thanks. but I do by the same manual in Juno.

daryana gravatar imagedaryana ( 2015-11-28 06:31:14 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-11-26 03:46:09 -0500

Seen: 117 times

Last updated: Nov 27 '15