keystone.identity.backends package

Submodules

keystone.identity.backends.ldap module

class keystone.identity.backends.ldap.GroupApi(conf)

Bases: keystone.common.ldap.core.BaseLdap

DEFAULT_ID_ATTR = 'cn'

DEFAULT_MEMBER_ATTRIBUTE = 'member'

DEFAULT_OBJECTCLASS = 'groupOfNames'

DEFAULT_OU = 'ou=UserGroups'

DEFAULT_STRUCTURAL_CLASSES = []

NotFound

alias of GroupNotFound

add_user(user_dn, group_id, user_id)

attribute_options_names = {'description': 'desc', 'name': 'name'}

create(values)

delete(group_id)

get_all_filtered(hints, query=None)

get_filtered(group_id)

get_filtered_by_name(group_name)

immutable_attrs = ['name']

list_group_users(group_id)

Return a list of user dns which are members of a group.

list_user_groups(user_dn)

Return a list of groups for which the user is a member.

list_user_groups_filtered(user_dn, hints)

Return a filtered list of groups for which the user is a member.

model

alias of Group

options_name = 'group'

remove_user(user_dn, group_id, user_id)

update(group_id, values)

class keystone.identity.backends.ldap.Identity(conf=None)

Bases: keystone.identity.core.IdentityDriverV8

add_user_to_group(user_id, group_id)

authenticate(user_id, password)

check_user_in_group(user_id, group_id)

create_group(group_id, group)

create_user(user_id, user)

delete_group(group_id)

delete_user(user_id)

generates_uuids()

get_group(group_id)

get_group_by_name(group_name, domain_id)

get_user(user_id)

get_user_by_name(user_name, domain_id)

is_domain_aware()

list_groups(hints)

list_groups_for_user(user_id, hints)

list_users(hints)

list_users_in_group(group_id, hints)

remove_user_from_group(user_id, group_id)

update_group(group_id, group)

update_user(user_id, user)

class keystone.identity.backends.ldap.UserApi(conf)

Bases: keystone.common.ldap.core.EnabledEmuMixIn, keystone.common.ldap.core.BaseLdap

DEFAULT_ID_ATTR = 'cn'

DEFAULT_OBJECTCLASS = 'inetOrgPerson'

DEFAULT_OU = 'ou=Users'

DEFAULT_STRUCTURAL_CLASSES = ['person']

NotFound

alias of UserNotFound

attribute_options_names = {'description': 'description', 'enabled': 'enabled', 'default_project_id': 'default_project_id', 'password': 'pass', 'email': 'mail', 'name': 'name'}

create(values)

filter_attributes(user)

get_all_filtered(hints)

get_filtered(user_id)

immutable_attrs = ['id']

is_user(dn)

Returns True if the entry is a user.

mask_enabled_attribute(values)

model

alias of User

options_name = 'user'

keystone.identity.backends.sql module

class keystone.identity.backends.sql.FederatedUser(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixin

attributes = ['id', 'user_id', 'idp_id', 'protocol_id', 'unique_id', 'display_name']

display_name

id

idp_id

protocol_id

unique_id

user_id

class keystone.identity.backends.sql.Group(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

attributes = ['id', 'name', 'domain_id', 'description']

description

domain_id

extra

id

name

class keystone.identity.backends.sql.Identity(conf=None)

Bases: keystone.identity.core.IdentityDriverV8

add_user_to_group(user_id, group_id)

authenticate(user_id, password)

check_user_in_group(user_id, group_id)

create_group(*args, **kwargs)

create_user(*args, **kwargs)

delete_group(group_id)

delete_user(user_id)

get_group(group_id)

get_group_by_name(group_name, domain_id)

get_user(user_id)

get_user_by_name(user_name, domain_id)

is_sql

list_groups(hints, *args, **kwargs)

list_groups_for_user(user_id, hints)

list_users(hints, *args, **kwargs)

list_users_in_group(group_id, hints)

remove_user_from_group(user_id, group_id)

update_group(*args, **kwargs)

update_user(*args, **kwargs)

class keystone.identity.backends.sql.LocalUser(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

attributes = ['id', 'user_id', 'domain_id', 'name']

domain_id

id

name

passwords

user_id

class keystone.identity.backends.sql.Password(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

attributes = ['id', 'local_user_id', 'password']

id

local_user_id

password

class keystone.identity.backends.sql.User(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

attributes = ['id', 'name', 'domain_id', 'password', 'enabled', 'default_project_id']

default_project_id

domain_id

enabled

extra

federated_users

id

local_user

name

password

to_dict(include_extra_dict=False)

class keystone.identity.backends.sql.UserGroupMembership(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

Group membership join table.

group_id

user_id

Module contents