Openstack Keystone

Administrator need to minimally define the following to link the project and user

Keystone is an OpenStack project that provides the following (check all those apply)

Keystone in general retrieves additional information from the token such as user name, user id, project name, project id, roles

Default installation of Keystone, before you can use the REST API, you need to define an authorization token (admin_token) in keystone.conf file

Administrator need to minimally define the following to link the project and user

PKI stands for

Unscoped tokens contains

Primary use case of unscoped token is simply prove your identity without repeatedly presenting your original credentials.

To prove idenitity to keystone without repeatedly presenting your original credentials keystone uses

You must specify authorization scope in your authentication request to receive unscoped token

To receive a unscoped token you must not have "default project" associated with it

Which token expresses your authorization to operate in specific tenancy/project

Which token contains service catalog, a set of roles and details of the projects upon which you have authorization

Which token provider is 32bit long and must be persisted in a keystone database

Which of these token providers contains authentication context and service catalog

Which token are persistent in keystone databases causing it to bloat and need pruning of expired tokens from token database

Domains in Identity service are collection of

Which of the below statement you use to to automate the task of user creation in default domain

End point in openstack can be