Re: [Openstack] PAM authentication for Folsom Keystone

I tried setting up httpd fronting keystone but wasn't able to figure out how to get it to work. I configured Apache to require LDAP authentication for keystone tokens. One problem is that keystone clients today aren't doing http basic authentication. e.g., if you run "nova --os-username=admin --os-

Re: [Openstack] [Keystone] Policy settings not working correctly

Heiko -- Guang's response provides the hint that could get you where you want to go -- try using the V3 Identity API rather than the V2 admin API. The V2 admin API essentially ignores policy and only allows admin role. Here's docs on the V3 API: https://github.com/openstack/identity-api/blob/maste