Difference between revisions of "Keystone"
| Line 1: | Line 1: | ||
__NOTOC__ | __NOTOC__ | ||
| − | + | '''What is Keystone?''' | |
| + | |||
| + | Keystone is the identity service used by [[OpenStack]] for authentication (authN) and high-level authorization (authZ). It currently supports token-based authN and user-service authorization. It is scalable to include oAuth, SAML and openID in future versions. Out of the box, Keystone uses a SQLite DB as an identity store with the option to connect to external LDAP. | ||
| + | |||
| + | '''Doc''' | ||
| + | |||
| + | http://launchpad.net/keystone | ||
| + | |||
| + | '''Code''' | ||
| + | |||
| + | [http://github.com/rackspace/keystone http://github.com/openstack/keystone] | ||
| + | |||
| + | '''Releases''' | ||
| + | |||
| + | * Diablo | ||
| + | ** [https://blueprints.launchpad.net/keystone/+spec/identity-api Core functionality] (calls shared by all implementations) | ||
| + | ** [https://github.com/openstack/keystone/blob/master/keystone/content/service/RAX-KSGRP-service-devguide.pdf Extensions](calls that are specific to the implementation; ie: enabling company "ACME" user, role, and group structure) | ||
| + | * Essex (Keystone is part of [[OpenStack]] core for Essex) | ||
| + | ** Call for blueprints | ||
| + | *** [[Keystone-Essex-BP-UserStructure|User structure]] | ||
| + | *** [[Keystone-Essex-BP-AuthZ|AuthZ structure]] | ||
Revision as of 14:56, 2 September 2011
What is Keystone?
Keystone is the identity service used by OpenStack for authentication (authN) and high-level authorization (authZ). It currently supports token-based authN and user-service authorization. It is scalable to include oAuth, SAML and openID in future versions. Out of the box, Keystone uses a SQLite DB as an identity store with the option to connect to external LDAP.
Doc
Code
http://github.com/openstack/keystone
Releases
- Diablo
- Core functionality (calls shared by all implementations)
- Extensions(calls that are specific to the implementation; ie: enabling company "ACME" user, role, and group structure)
- Essex (Keystone is part of OpenStack core for Essex)
- Call for blueprints
