Bug 1991134 - [RFE] add OIDCPassClaimsAs , OIDCClaimsDelimiter, OIDCPassUseerInfoAs to enable-federation-openidc.yaml
Summary: [RFE] add OIDCPassClaimsAs , OIDCClaimsDelimiter, OIDCPassUseerInfoAs to enab...
Keywords:
Status: CLOSED DUPLICATE of bug 1590932
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 16.1 (Train)
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
: ---
Assignee: Brendan Shephard
QA Contact: Joe H. Rahme
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-08-07 14:36 UTC by Cristian Muresanu
Modified: 2023-08-06 21:50 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-03-17 18:14:12 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 803868 0 None None None 2021-08-09 02:59:51 UTC
OpenStack gerrit 803869 0 None None None 2021-08-09 02:59:51 UTC
Red Hat Issue Tracker OSP-14031 0 None None None 2022-03-17 18:30:07 UTC
Red Hat Issue Tracker OSP-6896 0 None None None 2021-11-18 15:02:16 UTC

Description Cristian Muresanu 2021-08-07 14:36:41 UTC
Description of problem:

We'd like to be able to add the following vars to enable-federation-openidc.yaml
- OIDCPassClaimsAs 
- OIDCClaimsDelimiter 
- OIDCPassUseerInfoAs 

That will help with future installations of OIDC for Openstack

Version-Release number of selected component (if applicable):


Additional info:

> Workaround:

Add to the keystone file under the file
 vi /var/lib/config-data/puppet-generated/keystone/etc/httpd/conf.d/10-keystone_wsgi.conf  
################################################################
##   added                                          ############
################################################################
  OIDCClaimDelimiter ";"
  OIDCPassUserInfoAs "claims"
  OIDCPassClaimsAs "both"

After adding the above vars to the file location on each controller I restart the keystone container 

#sudo podman restart keystone

Comment 2 Dave Wilde 2022-03-17 18:14:12 UTC

*** This bug has been marked as a duplicate of bug 1590932 ***


Note You need to log in before you can comment on or make changes to this bug.