Getting Keystone to integrate wtih LDAP is easy in a lab scenario with a few users and groups, but what about integrating Keystone into your Corporate Active Directory with thousands of users and groups, Nested groups, policies, and security. This session will explore what you need to know about integrating Keystone into large-scale LDAP/AD environments and the challenges that lie ahead.
This presentation is based on experience from the field in integrating Keystone into very large (thousands of objects) Active Directory and other LDAP-based centralized authentication systems. Users will learn the capabilities and limitations of Keystone / LDAP integration, what to avoid, and how to optimize authentication.