Apache Fortress as a storage for assignments and roles
LDAP backend for roles and assignments was deprecated. Some operators were not happy about it. Fortress is a standards based and Open Source Identity Access Management SDK for LDAP v3 compliant systems. Fortress is 100% compliant with RBAC, ARBAC02 and IETF's password policy draft. It also has a REST interface. It can be used instead of the deprecated LDAP backend.
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Boris Bobrov
- Direction:
- Needs approval
- Assignee:
- Boris Bobrov
- Definition:
- Obsolete
- Series goal:
- None
- Implementation:
- Unknown
- Milestone target:
- None
- Started by
- Completed by
- Lance Bragstad
Related branches
Related bugs
Sprints
Whiteboard
Gerrit topic: https:/
Addressed by: https:/
Assignments in Apache Fortress
(lbragstad) 19-02-13: Based on the comments in the specification, it sounds like there is some functionality in oslo.policy that might help address this issue. I'm going to mark this blueprint as obsolete until we come to an agreement on the approach. If you'd like to continue pushing this forward, we can certainly restore the specification linked above.