HPC/openstack_dockers
8
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Added a shibboleth attribute

Browse Source
This commit is contained in:
Egon Rijpkema 2018-11-06 12:53:48 +01:00
parent e9e1778a30
commit ce60b19fd2
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
keystone/attribute-map.xml
View File

@ -10,6 +10,8 @@
<!-- Added for nikhef --> <!-- Added for nikhef -->
<Attribute name="openstackGroupEntitlements" id="openstackGroupEntitlements" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/> <Attribute name="openstackGroupEntitlements" id="openstackGroupEntitlements" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
<!-- Added after mail 18-10-2018 -->
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" id="eppn" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
<Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Shib-user"/> <Attribute name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Shib-user"/>
<Attribute name="urn:oid:2.5.4.4" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Shib-surName"/> <Attribute name="urn:oid:2.5.4.4" nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" id="Shib-surName"/>

3
keystone/keystone.conf
View File

@ -1,6 +1,7 @@
[DEFAULT] [DEFAULT]
verbose = true verbose = true
# debug = true
log_file = /var/log/keystone/keystone.log log_file = /var/log/keystone/keystone.log
[database] [database]
@ -13,7 +14,7 @@ provider = fernet
methods = password,token,mapped,openid,saml2 methods = password,token,mapped,openid,saml2
[federation] [federation]
trusted_dashboard = http://merlin.hpc.rug.nl/horizon/auth/websso/ trusted_dashboard = https://merlin.hpc.rug.nl/horizon/auth/websso/
sso_calback_template = /etc/keystone/sso_calback_template.html sso_calback_template = /etc/keystone/sso_calback_template.html
[mapped] [mapped]