Ask Your Question
0

keystone active directory integration and domains?

asked 2016-09-26 22:23:43 -0600

anonymous user

Anonymous

updated 2016-09-26 22:26:58 -0600

Does anyone have any experience with AD - Keystone integration using keystone domains? We are integrating OpenStack keystone into an enterprise with hundreds of thousands of employees. Has anyone had issues with keystone domains or concerns? I know a user can only be in one domain. . . Are there other concerns? Other than being able to delegate some administrative functions are there benefits of using multi-domains in keystone?

Anything you might share is helpful.

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2017-02-09 16:43:21 -0600

tgehrke gravatar image

Problem was solved by using a single non-default domain for the AD integration. The default domain was maintained but only used for administrative tasks. The default domain still authenticates with basic keystone username and passwords

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-09-26 22:23:43 -0600

Seen: 80 times

Last updated: Feb 09 '17