Bug 1121846

Summary:	[RFE][keystone]: LDAP Authentication using compare() method
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	RFEs	Assignee:	RHOS Maint <rhos-maint>
Status:	CLOSED UPSTREAM	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	markmc, yeylon
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/keystone/+spec/ldap-authentication-using-compare-method
Whiteboard:	upstream_milestone_none upstream_definition_obsolete upstream_status_unknown
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-19 16:51:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description RHOS Integration 2014-07-22 04:06:29 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/ldap-authentication-using-compare-method.

Description:

Scenario: 
Enterprise utilises a centralised LDAP Direcory for SSO purposes. User management (creation, update, deletion etc... ) realised via  LDAP BUI app.   Keystone configured to authenticate against the Enterprise LDAP directory (read-only mode).  
To minimise ldap traffic & simplify the authentication process is it possible to implement a switch (in conf file) and update python code enabling keystone to use the compare() method for authentication purposes.

Specification URL (additional information):

None