Abstract:

Based on the analysis of the interactive process between the OpenStack’s platform structure, generating process, security mechanism and other service components, an improved ID authentication project is proposed to solve the deficiency of fine-grained authentication, low-usage of database and security flaw of data. This project integrates the LDAP(Lightweight Directory Access Protocol), RBAC(Role-Based Access Control), and SSL/ TLS(Secure Sockets Layer/ Transport Layer Security) into Keystone service, which strengthens the performance of Opentack‘s cloud platform in the aspect of the extension and security of ID management.

Key words: OpenStack, Keystone service, role-based access control(RBAC), lightweight directory access protocol(LDAP), authentication mechanism