Deleting a domain group assignment using a non-domain-aware identity backend (e.g. LDAP) fails
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Critical
|
Henry Nash |
Bug Description
When deleting a domain group assignment using a not domain-aware backend, such as LDAP, we should get an exception like: 'NotImplemented: Domain metadata not supported by LDAP', as we have for user assignments.
However, trying to delete an assignment of such type, we get:
Traceback (most recent call last):
File "keystone/
domain_id):
File "keystone/
return f(self, *args, **kwargs)
File "keystone/
return f(self, *args, **kwargs)
File "keystone/
return f(self, *args, **kwargs)
File "keystone/
self.
File "keystone/
for filter in hints.filters:
AttributeError: 'str' object has no attribute 'filters'
Pointers to the code are [1][2][3].
This occurs because we pass the domain_id (of type str) as it was a hint (of type driver_hints.Hints) on [1].
A patch to this bug should create a driver_
[1] https:/
[2] https:/
[3] https:/
Changed in keystone: | |
assignee: | nobody → Samuel de Medeiros Queiroz (samuel-z) |
summary: |
- Wrong exception when deleting a domain group assignment using a not - domain-aware backend + Deleting a domain group assignment using a non-domain-aware identity + backend (e.g. LDAP) fails |
Changed in keystone: | |
importance: | High → Critical |
Changed in keystone: | |
assignee: | Samuel de Medeiros Queiroz (samuel-z) → Henry Nash (henry-nash) |
Changed in keystone: | |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | juno-rc1 → 2014.2 |
Fix proposed to branch: master /review. openstack. org/123585
Review: https:/