{"action":"created","comment":{"url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/comments/187965730","pull_request_review_id":119848977,"id":187965730,"diff_hunk":"@@ -0,0 +1,231 @@\n+\n+# Configure Openstack (Keystone) to use Elixir AAI via OpenID Connect\n+\n+## Introduction\n+\n+This document describes how to authenticate in Openstack via Elixir AAI using OpenID Connect (OIDC). \n+\n+### Prerequites\n+\n+This guide was testet against Openstack Newton on top of Ubuntu 16.04 LTS, but should also work with later Openstack versions and other operating systems (maybe with slightly modifications).\n+\n+- Openstack\n+\t- Keystone API 3 \n+\t- Authorization must be done in a separate step, users will not be added to a default project.\n+\n+- Elixir\n+\t- The Openstack Keystone endpoint is registered as service provider within Elixir AAI.\n+\n+## OpenID Connect\n+Since OpenID Connect is handled via an Apache module, we have to make sure that the neccessary Apache module is installed and enabled.\n+\n+```~bash\n+$ apt install libapache2-mod-auth-openidc\n+$ a2endmod auth_openidc\n+```\n+\n+## Keystone\n+\n+Keystone has two configuration files, its own (`/etc/keystone/keystone.conf`) and the Apache virtual host configuration (`/etc/apache/sites_available/keystone.conf`).\n+\n+### Virtual host configuration \n+\n+In the virtual host configuration the auth_openidc module must be loaded (*before* the VirtualHost section).\n+\n+```\n+...\n+LoadModule auth_openidc_module /usr/lib/apache2/modules/mod_auth_openidc.so\n+...\n+```\n+\n+In the virtual host section for the public keystone url we have to configure the OIDC access. The *oidc.provider_url* is in our case the Elixir oidc provivder (https://login.elixir-czech.org/oidc/). Replace *oidc.client_id* and *oidc.client_secret* with the values you got when register your Openstack(Keystone) instance as Elixir OIDC endpoint. \n+The *oidc.crypto_passphrase* can be freely chosen.","path":"wiki/Tutorials/Elixir_OIDC/Elixir_AAI_OIDC.md","position":42,"original_position":42,"commit_id":"f8065164b2eb628181ae258bf6cc3f63a52dafee","original_commit_id":"f8065164b2eb628181ae258bf6cc3f63a52dafee","user":{"login":"awalende","id":20296419,"avatar_url":"https://avatars1.githubusercontent.com/u/20296419?v=4","gravatar_id":"","url":"https://api.github.com/users/awalende","html_url":"https://github.com/awalende","followers_url":"https://api.github.com/users/awalende/followers","following_url":"https://api.github.com/users/awalende/following{/other_user}","gists_url":"https://api.github.com/users/awalende/gists{/gist_id}","starred_url":"https://api.github.com/users/awalende/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/awalende/subscriptions","organizations_url":"https://api.github.com/users/awalende/orgs","repos_url":"https://api.github.com/users/awalende/repos","events_url":"https://api.github.com/users/awalende/events{/privacy}","received_events_url":"https://api.github.com/users/awalende/received_events","type":"User","site_admin":false},"body":"The *oidc.crypto_passphrase* can be freely chosen, however it must be set.","created_at":"2018-05-14T14:07:19Z","updated_at":"2018-05-14T14:07:20Z","html_url":"https://github.com/deNBI/cloud-user-docs/pull/26#discussion_r187965730","pull_request_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26","author_association":"NONE","_links":{"self":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/comments/187965730"},"html":{"href":"https://github.com/deNBI/cloud-user-docs/pull/26#discussion_r187965730"},"pull_request":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26"}}},"pull_request":{"url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26","id":187832821,"html_url":"https://github.com/deNBI/cloud-user-docs/pull/26","diff_url":"https://github.com/deNBI/cloud-user-docs/pull/26.diff","patch_url":"https://github.com/deNBI/cloud-user-docs/pull/26.patch","issue_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/26","number":26,"state":"open","locked":false,"title":"feature elixir_oidc : Openstack -> Elixir AAI OIDC integration","user":{"login":"jkrue","id":8693573,"avatar_url":"https://avatars2.githubusercontent.com/u/8693573?v=4","gravatar_id":"","url":"https://api.github.com/users/jkrue","html_url":"https://github.com/jkrue","followers_url":"https://api.github.com/users/jkrue/followers","following_url":"https://api.github.com/users/jkrue/following{/other_user}","gists_url":"https://api.github.com/users/jkrue/gists{/gist_id}","starred_url":"https://api.github.com/users/jkrue/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jkrue/subscriptions","organizations_url":"https://api.github.com/users/jkrue/orgs","repos_url":"https://api.github.com/users/jkrue/repos","events_url":"https://api.github.com/users/jkrue/events{/privacy}","received_events_url":"https://api.github.com/users/jkrue/received_events","type":"User","site_admin":false},"body":"","created_at":"2018-05-14T13:47:26Z","updated_at":"2018-05-14T14:07:20Z","closed_at":null,"merged_at":null,"merge_commit_sha":"858e99b18ba71b3eb108cd6f1352053a19e128b8","assignee":null,"assignees":[],"requested_reviewers":[{"login":"pbelmann","id":8780236,"avatar_url":"https://avatars0.githubusercontent.com/u/8780236?v=4","gravatar_id":"","url":"https://api.github.com/users/pbelmann","html_url":"https://github.com/pbelmann","followers_url":"https://api.github.com/users/pbelmann/followers","following_url":"https://api.github.com/users/pbelmann/following{/other_user}","gists_url":"https://api.github.com/users/pbelmann/gists{/gist_id}","starred_url":"https://api.github.com/users/pbelmann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pbelmann/subscriptions","organizations_url":"https://api.github.com/users/pbelmann/orgs","repos_url":"https://api.github.com/users/pbelmann/repos","events_url":"https://api.github.com/users/pbelmann/events{/privacy}","received_events_url":"https://api.github.com/users/pbelmann/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26/commits","review_comments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26/comments","review_comment_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/26/comments","statuses_url":"https://api.github.com/repos/deNBI/cloud-user-docs/statuses/f8065164b2eb628181ae258bf6cc3f63a52dafee","head":{"label":"deNBI:feature/elixir_oidc","ref":"feature/elixir_oidc","sha":"f8065164b2eb628181ae258bf6cc3f63a52dafee","user":{"login":"deNBI","id":28150428,"avatar_url":"https://avatars2.githubusercontent.com/u/28150428?v=4","gravatar_id":"","url":"https://api.github.com/users/deNBI","html_url":"https://github.com/deNBI","followers_url":"https://api.github.com/users/deNBI/followers","following_url":"https://api.github.com/users/deNBI/following{/other_user}","gists_url":"https://api.github.com/users/deNBI/gists{/gist_id}","starred_url":"https://api.github.com/users/deNBI/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deNBI/subscriptions","organizations_url":"https://api.github.com/users/deNBI/orgs","repos_url":"https://api.github.com/users/deNBI/repos","events_url":"https://api.github.com/users/deNBI/events{/privacy}","received_events_url":"https://api.github.com/users/deNBI/received_events","type":"Organization","site_admin":false},"repo":{"id":105166125,"name":"cloud-user-docs","full_name":"deNBI/cloud-user-docs","owner":{"login":"deNBI","id":28150428,"avatar_url":"https://avatars2.githubusercontent.com/u/28150428?v=4","gravatar_id":"","url":"https://api.github.com/users/deNBI","html_url":"https://github.com/deNBI","followers_url":"https://api.github.com/users/deNBI/followers","following_url":"https://api.github.com/users/deNBI/following{/other_user}","gists_url":"https://api.github.com/users/deNBI/gists{/gist_id}","starred_url":"https://api.github.com/users/deNBI/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deNBI/subscriptions","organizations_url":"https://api.github.com/users/deNBI/orgs","repos_url":"https://api.github.com/users/deNBI/repos","events_url":"https://api.github.com/users/deNBI/events{/privacy}","received_events_url":"https://api.github.com/users/deNBI/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/deNBI/cloud-user-docs","description":null,"fork":false,"url":"https://api.github.com/repos/deNBI/cloud-user-docs","forks_url":"https://api.github.com/repos/deNBI/cloud-user-docs/forks","keys_url":"https://api.github.com/repos/deNBI/cloud-user-docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/deNBI/cloud-user-docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/deNBI/cloud-user-docs/teams","hooks_url":"https://api.github.com/repos/deNBI/cloud-user-docs/hooks","issue_events_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/events{/number}","events_url":"https://api.github.com/repos/deNBI/cloud-user-docs/events","assignees_url":"https://api.github.com/repos/deNBI/cloud-user-docs/assignees{/user}","branches_url":"https://api.github.com/repos/deNBI/cloud-user-docs/branches{/branch}","tags_url":"https://api.github.com/repos/deNBI/cloud-user-docs/tags","blobs_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/deNBI/cloud-user-docs/statuses/{sha}","languages_url":"https://api.github.com/repos/deNBI/cloud-user-docs/languages","stargazers_url":"https://api.github.com/repos/deNBI/cloud-user-docs/stargazers","contributors_url":"https://api.github.com/repos/deNBI/cloud-user-docs/contributors","subscribers_url":"https://api.github.com/repos/deNBI/cloud-user-docs/subscribers","subscription_url":"https://api.github.com/repos/deNBI/cloud-user-docs/subscription","commits_url":"https://api.github.com/repos/deNBI/cloud-user-docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/deNBI/cloud-user-docs/contents/{+path}","compare_url":"https://api.github.com/repos/deNBI/cloud-user-docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/deNBI/cloud-user-docs/merges","archive_url":"https://api.github.com/repos/deNBI/cloud-user-docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/deNBI/cloud-user-docs/downloads","issues_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues{/number}","pulls_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls{/number}","milestones_url":"https://api.github.com/repos/deNBI/cloud-user-docs/milestones{/number}","notifications_url":"https://api.github.com/repos/deNBI/cloud-user-docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/deNBI/cloud-user-docs/labels{/name}","releases_url":"https://api.github.com/repos/deNBI/cloud-user-docs/releases{/id}","deployments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/deployments","created_at":"2017-09-28T15:32:38Z","updated_at":"2018-05-09T14:22:29Z","pushed_at":"2018-05-14T13:47:27Z","git_url":"git://github.com/deNBI/cloud-user-docs.git","ssh_url":"git@github.com:deNBI/cloud-user-docs.git","clone_url":"https://github.com/deNBI/cloud-user-docs.git","svn_url":"https://github.com/deNBI/cloud-user-docs","homepage":null,"size":1767,"stargazers_count":3,"watchers_count":3,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"archived":false,"open_issues_count":6,"license":null,"forks":2,"open_issues":6,"watchers":3,"default_branch":"master"}},"base":{"label":"deNBI:master","ref":"master","sha":"1139986e319a612102608215bcde20f141d67559","user":{"login":"deNBI","id":28150428,"avatar_url":"https://avatars2.githubusercontent.com/u/28150428?v=4","gravatar_id":"","url":"https://api.github.com/users/deNBI","html_url":"https://github.com/deNBI","followers_url":"https://api.github.com/users/deNBI/followers","following_url":"https://api.github.com/users/deNBI/following{/other_user}","gists_url":"https://api.github.com/users/deNBI/gists{/gist_id}","starred_url":"https://api.github.com/users/deNBI/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deNBI/subscriptions","organizations_url":"https://api.github.com/users/deNBI/orgs","repos_url":"https://api.github.com/users/deNBI/repos","events_url":"https://api.github.com/users/deNBI/events{/privacy}","received_events_url":"https://api.github.com/users/deNBI/received_events","type":"Organization","site_admin":false},"repo":{"id":105166125,"name":"cloud-user-docs","full_name":"deNBI/cloud-user-docs","owner":{"login":"deNBI","id":28150428,"avatar_url":"https://avatars2.githubusercontent.com/u/28150428?v=4","gravatar_id":"","url":"https://api.github.com/users/deNBI","html_url":"https://github.com/deNBI","followers_url":"https://api.github.com/users/deNBI/followers","following_url":"https://api.github.com/users/deNBI/following{/other_user}","gists_url":"https://api.github.com/users/deNBI/gists{/gist_id}","starred_url":"https://api.github.com/users/deNBI/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deNBI/subscriptions","organizations_url":"https://api.github.com/users/deNBI/orgs","repos_url":"https://api.github.com/users/deNBI/repos","events_url":"https://api.github.com/users/deNBI/events{/privacy}","received_events_url":"https://api.github.com/users/deNBI/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/deNBI/cloud-user-docs","description":null,"fork":false,"url":"https://api.github.com/repos/deNBI/cloud-user-docs","forks_url":"https://api.github.com/repos/deNBI/cloud-user-docs/forks","keys_url":"https://api.github.com/repos/deNBI/cloud-user-docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/deNBI/cloud-user-docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/deNBI/cloud-user-docs/teams","hooks_url":"https://api.github.com/repos/deNBI/cloud-user-docs/hooks","issue_events_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/events{/number}","events_url":"https://api.github.com/repos/deNBI/cloud-user-docs/events","assignees_url":"https://api.github.com/repos/deNBI/cloud-user-docs/assignees{/user}","branches_url":"https://api.github.com/repos/deNBI/cloud-user-docs/branches{/branch}","tags_url":"https://api.github.com/repos/deNBI/cloud-user-docs/tags","blobs_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/deNBI/cloud-user-docs/statuses/{sha}","languages_url":"https://api.github.com/repos/deNBI/cloud-user-docs/languages","stargazers_url":"https://api.github.com/repos/deNBI/cloud-user-docs/stargazers","contributors_url":"https://api.github.com/repos/deNBI/cloud-user-docs/contributors","subscribers_url":"https://api.github.com/repos/deNBI/cloud-user-docs/subscribers","subscription_url":"https://api.github.com/repos/deNBI/cloud-user-docs/subscription","commits_url":"https://api.github.com/repos/deNBI/cloud-user-docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/deNBI/cloud-user-docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/deNBI/cloud-user-docs/contents/{+path}","compare_url":"https://api.github.com/repos/deNBI/cloud-user-docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/deNBI/cloud-user-docs/merges","archive_url":"https://api.github.com/repos/deNBI/cloud-user-docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/deNBI/cloud-user-docs/downloads","issues_url":"https://api.github.com/repos/deNBI/cloud-user-docs/issues{/number}","pulls_url":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls{/number}","milestones_url":"https://api.github.com/repos/deNBI/cloud-user-docs/milestones{/number}","notifications_url":"https://api.github.com/repos/deNBI/cloud-user-docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/deNBI/cloud-user-docs/labels{/name}","releases_url":"https://api.github.com/repos/deNBI/cloud-user-docs/releases{/id}","deployments_url":"https://api.github.com/repos/deNBI/cloud-user-docs/deployments","created_at":"2017-09-28T15:32:38Z","updated_at":"2018-05-09T14:22:29Z","pushed_at":"2018-05-14T13:47:27Z","git_url":"git://github.com/deNBI/cloud-user-docs.git","ssh_url":"git@github.com:deNBI/cloud-user-docs.git","clone_url":"https://github.com/deNBI/cloud-user-docs.git","svn_url":"https://github.com/deNBI/cloud-user-docs","homepage":null,"size":1767,"stargazers_count":3,"watchers_count":3,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"archived":false,"open_issues_count":6,"license":null,"forks":2,"open_issues":6,"watchers":3,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26"},"html":{"href":"https://github.com/deNBI/cloud-user-docs/pull/26"},"issue":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/26"},"comments":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/issues/26/comments"},"review_comments":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26/comments"},"review_comment":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/pulls/26/commits"},"statuses":{"href":"https://api.github.com/repos/deNBI/cloud-user-docs/statuses/f8065164b2eb628181ae258bf6cc3f63a52dafee"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"awalende"}}