change LDAP user filter

[dalo]

I want to change the ldap_user_filter on keystone after the deployment. I could do this in the keystone.conf on the controller, but a want a bit more sustainable solution, because this changes after a reconfigure or upgrade to the old value.

is there a config file on the management server to change this centrally?

Daniel

[mvoelker · Accepted solution]

Hi Daniel,

Check out:

VMware Integrated OpenStack 2.0.1 Release Notes

Specifically, the "Enhanced customizability" section.  You can use the custom.yml file to make the change permanent.  In a nutshell, the steps are:

1. Log in to the management server.
2. sudo mkdir -p /opt/vmware/vio/custom
3. sudo cp /var/lib/vio/ansible/custom/custom.yml.sample /opt/vmware/vio/custom/custom.yml
4. Edit the custom.yml file and uncomment the line for "ldap_user_filter".  Add the value you want.
5. Save the changes to the file.
6. sudo viocli deployment -v configure

[dalo]

Hi mvoelker,

Thank you, this is exactly what I'm looking for.

Daniel