OpenStack Identity (keystone)

  1. Bug #1589993
  2. Comment #12

Comment 12 for bug 1589993

Revision history for this message
Lance Bragstad (lbragstad) wrote : Re: Murano cannot deploy with federated user

In response to comment #10. Keystone has merged a spec that will allow deployers to define more descriptive mappings [0]. This should mitigate #1 from comment #10.

Since using a direct role assignment works around this bug, we can track the progress of the mapping engine with the blueprint [1].

[0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/ocata/shadow-mapping.html
[1] https://blueprints.launchpad.net/keystone/+spec/shadow-mapping