This manual details the implementation and deployment of OpenStack Keystone, authored by Steve Martinelli, Henry Nash, and Brad Topol. Keystone is OpenStack's Identity service, crucial for providing secure, controlled access to cloud resources by authenticating users and managing their authorization. This system is designed for environments requiring robust security at the Infrastructure-as-a-Service layer, supporting private, public, and dedicated clouds. Key features include its support for multiple token formats, integration with LDAP, and advanced capabilities for federated identity. The manual focuses on using Keystone's Identity API, specifically version v3, to establish and maintain a secure cloud environment.
The purpose of this manual is to provide comprehensive guidance on Identity, Authentication, and Access Management within OpenStack environments. It covers fundamental Keystone capabilities, basic operations with concrete examples, and detailed explanations of advanced features like LDAP and federated identity integration. This resource is intended for administrators, developers, and IT professionals seeking to understand and implement secure access controls for their OpenStack clouds. By following the step-by-step instructions and best practices outlined within, users can effectively safeguard their cloud's ongoing security and manage resource access efficiently.
Keystone—OpenStack's Identity service—provides secure controlled access to a cloud’s resources. In OpenStack environments, Keystone performs many vital functions, such as authenticating users and determining what resources users are authorized to access.
Whether the cloud is private, public, or dedicated, access to cloud resources and security is essential. This practical guide to using Keystone provides detailed, step-by-step guidance to creating a secure cloud environment at the Infrastructure-as-a-Service layer—as well as key practices for safeguarding your cloud's ongoing security.
- Learn about Keystone's fundamental capabilities for providing Identity, Authentication, and Access Management
- Perform basic Keystone operations, using concrete examples and the latest version (v3) of Keystone's Identity API
- Understand Keystone's unique support for multiple token formats, including how it has evolved over time
- Get an in-depth explanation of Keystone's LDAP support and how to configure Keystone to integrate with LDAP
- Learn about one of Keystone's most sought-after features—support for federated identity
Author: Martinelli, Steve
Author: Nash, Henry
Author: Topol, Brad
Publisher: O'Reilly Media
Illustration: n
Language: ENG
Title: Identity, Authentication, and Access Management in OpenStack: Implementing and Deploying Keystone
Pages: 00130 (Encrypted EPUB) / 00130 (Encrypted PDF)
On Sale: 2015-12-08
SKU-13/ISBN: 9781491941201
Category: Computers : Information Technology
Category: Computers : Software Development & Engineering - Systems Ana
Category: Computers : Software Development & Engineering - General
Keystone—OpenStack's Identity service—provides secure controlled access to a cloud’s resources. In OpenStack environments, Keystone performs many vital functions, such as authenticating users and determining what resources users are authorized to access.
Whether the cloud is private, public, or dedicated, access to cloud resources and security is essential. This practical guide to using Keystone provides detailed, step-by-step guidance to creating a secure cloud environment at the Infrastructure-as-a-Service layer—as well as key practices for safeguarding your cloud's ongoing security.
- Learn about Keystone's fundamental capabilities for providing Identity, Authentication, and Access Management
- Perform basic Keystone operations, using concrete examples and the latest version (v3) of Keystone's Identity API
- Understand Keystone's unique support for multiple token formats, including how it has evolved over time
- Get an in-depth explanation of Keystone's LDAP support and how to configure Keystone to integrate with LDAP
- Learn about one of Keystone's most sought-after features—support for federated identity
Author: Martinelli, Steve
Author: Nash, Henry
Author: Topol, Brad
Publisher: O'Reilly Media
Illustration: n
Language: ENG
Title: Identity, Authentication, and Access Management in OpenStack: Implementing and Deploying Keystone
Pages: 00130 (Encrypted EPUB) / 00130 (Encrypted PDF)
On Sale: 2015-12-08
SKU-13/ISBN: 9781491941201
Category: Computers : Information Technology
Category: Computers : Software Development & Engineering - Systems Ana
Category: Computers : Software Development & Engineering - General
