3.3. Configure authentication and authorization

There are different methods of authentication for the OpenStack Compute project, including no authentication. The preferred system is the OpenStack Identity service, code-named Keystone.

To customize authorization settings for Compute, use the configuration options documented in Table 3.11, “Description of authentication configuration options”.

To customize certificate authority settings for Compute, use the configuration options documented in Table 3.15, “Description of CA and SSL configuration options”.

To customize Compute and the Identity service to use LDAP as a backend, refer to the configuration options documented in Table 3.32, “Description of LDAP configuration options”.