Bug 1388973

Summary:	Disable referrals in Keystone AD integration documentation
Product:	Red Hat OpenStack	Reporter:	nalmond
Component:	documentation	Assignee:	Martin Lopes <mlopes>
Status:	CLOSED CURRENTRELEASE	QA Contact:	RHOS Documentation Team <rhos-docs>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	9.0 (Mitaka)	CC:	mburns, mlopes, nalmond, panbalag, srevivo
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-08 02:16:09 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description nalmond 2016-10-26 15:23:21 UTC

Description of problem:
Section 1.8.2 Step 5b of https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/single/integrate-with-identity-service/ has the user create a keystone domain config file. This example config file should include the following in the [ldap] stanza to disable referral chasing:

# Override the system's default referral chasing behavior for
# queries. (boolean value)
chase_referrals = false

This is addressed in https://access.redhat.com/solutions/2309891

This also affects the documentation for RHOSP 7 and 8 (and likely 10):
https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/7/paged/integrate-with-identity-service/chapter-1-active-directory-integration
https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/integrate-with-identity-service/#sec-active-directory

Comment 5 Martin Lopes 2016-10-28 01:04:16 UTC

Peer review done with Don

Comment 6 Martin Lopes 2016-10-28 03:49:53 UTC

Republished updated guides:

* OSP9 - https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/single/integrate-with-identity-service/

* OSP8 - https://access.redhat.com/documentation/en/red-hat-openstack-platform/8/single/integrate-with-identity-service/

* OSP7 - https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/7/single/integrate-with-identity-service/

And confirmed that update is in the OSP10 draft build.