[Openstack] Fwd: [keystone] Support domain-specific Identity Backends

2013-08-19 Thread Dolph Mathews
On Mon, Aug 19, 2013 at 6:09 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: > Hello Dolph, > > We have recently been looking for a way to access multiple LDAP servers > from a single Keystone server. It looks like the code you just finished > provides this functionality. Am I correct?

[Openstack] python-keystoneclient v0.3.2 released

2013-08-22 Thread Dolph Mathews
python-keystoneclient v0.3.2 is now available on pypi [1]. This release notably includes Python lib support for managing & consuming delegated authorization & impersonation via the Identity API v3 trusts extension [2], along with numerous small improvements and bug fixes [3]. [1]: https://pypi.py

[Openstack] python-keystoneclient 0.7.0 (and 0.7.1) released to PyPi

2014-03-27 Thread Dolph Mathews
Hello, everyone! python-keystoneclient 0.7.0 and 0.7.1 were both released in the past 24 hours. v0.7.0 [1] contains a pair of critical fixes, one of which is security related. The highlights include: - Fixed a critical security vulnerability (OSSA 2014-007 [2]) as detailed in bug 1282865 [3] and

Re: [Openstack] python-keystoneclient 0.7.0 (and 0.7.1) released to PyPi

2014-03-27 Thread Dolph Mathews
On Thu, Mar 27, 2014 at 10:13 AM, Dolph Mathews wrote: > Hello, everyone! > > python-keystoneclient 0.7.0 and 0.7.1 were both released in the past 24 > hours. > > v0.7.0 [1] contains a pair of critical fixes, one of which is security > related. The highlights include: &

Re: [Openstack] [OSSA 2014-007] Potential context confusion in Keystone middleware (CVE-2014-0105)

2014-03-27 Thread Dolph Mathews
Peter Feiner from Gridcentric, Inc. deserves special mention for independently reporting the same underlying error: https://bugs.launchpad.net/python-keystoneclient/+bug/1289074 He also suggested an approach to fix the error which closed the security vulnerability as well. Thanks, Peter! On Th

Re: [Openstack] Federated Authn & ldap/saml

2014-04-14 Thread Dolph Mathews
On Fri, Apr 11, 2014 at 1:57 PM, Adam Lawson wrote: > Hi Michael, > KS Federation was originally planned for Icehouse RC2 but was later > postponed until the Juno release with priority since there was a > disagreement re approach. Or something along those lines. But it won't be > included with Ic

[Openstack] python-keystoneclient 0.8.0 released

2014-04-16 Thread Dolph Mathews
python-keystoneclient 0.8.0 has been released and is now available on pypi [1]. Given the recency of the 0.7 series, this a relatively small release. However, 0.8.0 notably fixes a race condition in keystoneclient.middleware.auth_token for PKI deployments [2], which is closely related to an issue