OpenStack Identity (keystone)

ldap delete_user fails to cleanup all group membership

Bug #1590584 reported by Matthew Edmonds
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Low
Matthew Edmonds
OpenStack Identity (keystone) newton-2 "n2"

Bug Description

When an LDAP user is deleted, keystone removes it from groups that match the group_filter conf setting, but fails to remove it from any other groups. It should remove it from all groups.

OpenStack Infra (hudson-openstack)
Changed in keystone:
assignee: nobody → Matthew Edmonds (edmondsw)
status: New → In Progress
Revision history for this message
Matthew Edmonds (edmondsw) wrote :

proposed https://review.openstack.org/#/c/327358/

Revision history for this message
Steve Martinelli (stevemar) wrote :

marking this as low since write support for ldap is deprecated.

Changed in keystone:
importance: Undecided → Low
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/327358
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=907ee2d15ede024e2b32472fdfb163edc413bbd8
Submitter: Jenkins
Branch: master

commit 907ee2d15ede024e2b32472fdfb163edc413bbd8
Author: Matthew Edmonds <email address hidden>
Date: Wed Jun 8 17:46:15 2016 -0400

    fix ldap delete_user group member cleanup

    When an LDAP user is deleted, keystone was removing it from groups that
    matched the group_filter conf setting, but not from other groups. This
    change fixes it to remove the user from all groups.

    Closes-Bug: #1590584
    Change-Id: Icca09d2782b4adf9519a24d1713adcb8b3e2a27c

Changed in keystone:
status: In Progress → Fix Released
Steve Martinelli (stevemar)
Changed in keystone:
milestone: none → newton-2
Revision history for this message
Davanum Srinivas (DIMS) (dims-v) wrote : Fix included in openstack/keystone 10.0.0.0b2

This issue was fixed in the openstack/keystone 10.0.0.0b2 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.