Comment 6 for bug 1254619

Revision history for this message
Jeremy Stanley (fungi) wrote : ExternalDefault authentication plugin only considers leftmost part of the REMOTE_USER splited by "@"

It's entirely possible that a more targeted security fix could be
needed to address this, independent of (or in place of)
https://review.openstack.org/50362 but hopefully Dolph and other
Keystone developers will be able to make that determination.