ZZ00705: AUTHENTICATION MODELS NEED EXPLANATION IN THE ICO DOC.

APAR status

• Closed as documentation error.

Error description

• In the /etc/keystone/keystone.conf the external= option can be
  changed from
  external = keystone.auth.plugins.external.DefaultDomain
  to
  external = keystone.auth.plugins.external.Domain
  when integrating processes from an existing ICO system which
  was designed before the ICO with Keystone topology was
  implemented.
  

Local fix

• The following doc page will be amended:
  https://www.ibm.com/support/knowledgecenter/en/SS4KMC_2.5.0
  .6/co
  m.ibm.ico.doc_2.5/gs/c_createdomain.html
  to include further details about how these auth models differ,
  which is the default, and under which scenarios would be best
  to use either.
  

Problem summary

• In the /etc/keystone/keystone.conf the external= option can be
  changed from
  external = keystone.auth.plugins.external.DefaultDomain
  to
  external = keystone.auth.plugins.external.Domain
  when integrating processes from an existing ICO system which
  was designed before the ICO with Keystone topology was
  implemented.
  

Problem conclusion

• Infocenter updated with the multitenancy configurations
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels