Keystone/diablo+

What is Keystone for Diablo+?

Diablo+ is a tag in github that was created on 10/28/2011 to adress the many bugs reported against Keystone Diablo.bugs

What bugs were fixed?

https://bugs.launchpad.net/keystone/+bugs?field.tag=diablo-backport

What operations are still not supported?

Extension Name: OS-KSADM

Credential Operations:

POST v2.0/users/{userId}/OS-KSADM/credentials Adds a credential to a user.

GET v2.0/users/{userId}/OS-KSADM/credentials?marker=string&limit=int List credentials.
POST v2.0/users/{userId}/OS-KSADM/credentials/{credential-type} Update credentials.
DELETE v2.0/users/{userId}/OS-KSADM/credentials/{credential-type} Delete credentials.
GET v2.0/users/{userId}/OS-KSADM/credentials/{credential-type} Get user credentials.

Workaround:

Create user call also takes an attribute password.The username and the password could be used as the passwordCredentials as of now.

Password is kept mandatory.The existing ec2Credentials have not been changed.They would also change as per API in the future.
They were never documented earlier.

This is how a create user call is in the system.

POST v2.0/users Adds a user. .  .  Body

{

"user": {
"username": "jqsmith",
"email": ["john.smith@example.org"],
"enabled": true,
"password": "secret" => Additional password attribute.
}
} Role Operations:

GET v2.0/users/{userId}/roles/OSKSADM/{roleId} Get information about a global role that belongs to a user.

GET v2.0/tenants/{tenantId}/users?roleId=string&marker=string&limit=int Lists all the users for a tenant.
GET v2.0/tenants/{tenantId}/OS-KSADM/roles?marker=string&limit=int Lists all the roles for a tenant.
These are just additional convenience calls.