Re: [Openstack] [Keystone] Quotas: LDAP Help

On 07/25/2012 05:32 PM, Adam Young wrote: On 07/25/2012 10:19 AM, Ionuț Arțăriși wrote: Hi, I just wanted to add a bit to this thread. We're currently working on a hybrid backend between LDAP and SQL. I have a working version for a specific setup in which the user accounts are stored in LDAP

Re: [Openstack] [Keystone] Quotas: LDAP Help

.bell=cern...@lists.launchpad.net [mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Ryan Lane Sent: 17 July 2012 20:43 To: Adam Young Cc: Joseph Heck; openstack Subject: Re: [Openstack] [Keystone] Quotas: LDAP Help I haven't been thinking about quotas, so bear with me here.

Re: [Openstack] [Keystone] Quotas: LDAP Help

.bell=cern...@lists.launchpad.net] On Behalf Of Ryan Lane Sent: 17 July 2012 20:43 To: Adam Young Cc: Joseph Heck; openstack Subject: Re: [Openstack] [Keystone] Quotas: LDAP Help I haven't been thinking about quotas, so bear with me here. A few thoughts: Certain deployments might not be ab

Re: [Openstack] [Keystone] Quotas: LDAP Help

On Tue, Jul 17, 2012 at 12:56 PM, Adam Young wrote: > Yes, it is possible to use LDAP for Identity and SQL for the other things, > like Tokens and Policy. Quotas could be done the same way. You just have > to extract the Quotas calls out of the Identity Provider. It might make > sense to go in

Re: [Openstack] [Keystone] Quotas: LDAP Help

chpad.net >> [mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf >> Of Ryan Lane >> Sent: 17 July 2012 20:43 >> To: Adam Young >> Cc: Joseph Heck; openstack >> Subject: Re: [Openstack] [Keystone] Quotas: LDAP Help >> >>> I haven't been think

Re: [Openstack] [Keystone] Quotas: LDAP Help

Young > Cc: Joseph Heck; openstack > Subject: Re: [Openstack] [Keystone] Quotas: LDAP Help > > > I haven't been thinking about quotas, so bear with me here. A few > thoughts: > > > > Certain deployments might not be able to touch the LDAP backend. I am > &g

Re: [Openstack] [Keystone] Quotas: LDAP Help

On 07/17/2012 02:42 PM, Ryan Lane wrote: I haven't been thinking about quotas, so bear with me here. A few thoughts: Certain deployments might not be able to touch the LDAP backend. I am thinking specifically where there is a corporate AD/LDAP server. I tried to keep the scheme dependency simp

Re: [Openstack] [Keystone] Quotas: LDAP Help

> I haven't been thinking about quotas, so bear with me here. A few thoughts: > > Certain deployments might not be able to touch the LDAP backend. I am > thinking specifically where there is a corporate AD/LDAP server. I tried to > keep the scheme dependency simple enough that it could be layered

Re: [Openstack] [Keystone] Quotas: LDAP Help

On 07/17/2012 11:18 AM, Everett Toews wrote: On Mon, Jul 16, 2012 at 7:20 PM, Adam Young > wrote: Usually a Quota is a limitation on a resource. I suspect that the problem here is we have not nailed down the resource objects that you would then apply a quo

Re: [Openstack] [Keystone] Quotas: LDAP Help

On Mon, Jul 16, 2012 at 7:20 PM, Adam Young wrote: > > Usually a Quota is a limitation on a resource. I suspect that the problem > here is we have not nailed down the resource objects that you would then > apply a quota to. If, for example, we were talking about disk quotas, we > could look at

Re: [Openstack] [Keystone] Quotas: LDAP Help

On 07/16/2012 07:31 PM, Everett Toews wrote: Hi All, I've got a working implementation of quotas in Keystone. However it's only working for the KVS and SQL backends right now and I need it to work with LDAP before submitting it for review. I have limited experience with LDAP and only from an

[Openstack] [Keystone] Quotas: LDAP Help

Hi All, I've got a working implementation of quotas in Keystone. However it's only working for the KVS and SQL backends right now and I need it to work with LDAP before submitting it for review. I have limited experience with LDAP and only from an ops perspective, I've never developed any applicat