This module allows authenticating against keystone as a pam module. E.g. to allow nginx or other system services to use keystone users.
It does not create an NSS module, so its for auth only.
To use, copy keystone-auth.py to /lib/security, chmod 555 it. Then add a line like
auth sufficient pam_python.so owa-auth.py
usually right before:
@include common-auth
in a pam service. You may need to change the AUTH url in the lib (I didn't make it an argument).
Example config. Place in /etc/pam.d/keystone:
# PAM configuration for the Secure Shell service
auth sufficient pam_python.so keystone-auth.py
auth requisite pam_deny.so
account sufficient pam_permit.so
session sufficient pam_permit.so