OpenStack Identity (keystone)

LDAP dumb user is not filtered when listing role assignments

Bug #1280965 reported by Nathan Kinder
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Medium
Nathan Kinder
OpenStack Identity (keystone) 2014.1 "icehouse"

Bug Description

When the LDAP assignment driver is used and the "use_dumb_member" configuration option is enabled, the dumb member is listed when listing the role assignments. This can be seen by running the live LDAP tests, as the "test_list_role_assignments_unfiltered" test will fail due to the additional role assignments for the dumb member.

We should be filtering out the dumb member in RoleApi.list_role_assignments(), as we already do inRoleApi. get_role_assignments().

Nathan Kinder (nkinder)
Changed in keystone:
assignee: nobody → Nathan Kinder (nkinder)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/73935

Dolph Mathews (dolph)
Changed in keystone:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/73935
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=aa89e074f7ccc67882875394f9d054246b71b9e8
Submitter: Jenkins
Branch: master

commit aa89e074f7ccc67882875394f9d054246b71b9e8
Author: Nathan Kinder <email address hidden>
Date: Sun Feb 16 22:28:17 2014 -0800

    Filter LDAP dumb member when listing role assignments

    When the LDAP assignment driver is used and the "use_dumb_member"
    configuration option is enabled, the dumb member is listed when
    listing the role assignments. This can be seen by running the live
    LDAP tests, as the "test_list_role_assignments_unfiltered" test will
    fail due to the additional role assignments for the dumb member.

    This patch filters out the LDAP dumb member when listing role
    assignments.

    Change-Id: I585d54847778f02621b8201644ec9285495a63aa
    Closes-Bug: 1280965

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → icehouse-rc1
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: icehouse-rc1 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.