yahoo-eng-team team mailing list archive

[Steve Martinelli <1580053@xxxxxxxxxxxxxxxxxx>]

The federation docs were improved greatly over here:
https://github.com/openstack/keystone/commit/38f79a8edf624a12c06558d97602f54f8e4bd83a

** Changed in: keystone
       Status: Triaged => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1580053

Title:
  Configure Apache HTTPD for mod_shibboleth(WSGIScriptAliasMatch): steps
  for creating hard links are missing

Status in OpenStack Identity (keystone):
  Invalid

Bug description:
  In the section "Configure Apache HTTPD for mod_shibboleth":

  http://docs.openstack.org/developer/keystone/extensions/shibboleth.html
  #configure-apache-httpd-for-mod-shibboleth

  it is given that:

  Add WSGIScriptAlias directive to your vhost configuration:
  ----------------------------------------------------------

  WSGIScriptAliasMatch ^(/v3/OS-
  FEDERATION/identity_providers/.*?/protocols/.*?/auth)$
  /var/www/keystone/main/$1

  While the users try to configure, they actually see that the directory
  /var/www/keystone does not exist.

  It would be better to mention that create a directory
  /var/www/keystone if it does not exist and create the following hard
  links:

  For example:
  ln /opt/stack/keystone/httpd/keystone.py main
  ln /opt/stack/keystone/httpd/keystone.py admin

  It took me a while to understand the above steps while I was
  configuring the Keystone for federations.

  I would also recommend that we should call it WSGIScriptAliasMatch
  directive instead of WSGIScriptAlias directive since we are actually
  adding WSGIScriptAliasMatch directive. So the above underlined text
  should be read as follows:

  Add WSGIScriptAliasMatch directive to your vhost configuration:

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1580053/+subscriptions