Comment 18 for bug 1658641

Revision history for this message
Kristi Nikolla (knikolla) wrote :

Played around for a bit.

1. Created a user in ldap
2. Listed users in the domain Users, new user correctly showed
3. Assigned Member role to that user on project demo
4. Deleted the user directly in ldap
5. Cleaned mappings and restarted keystone to clear cache

http://paste.openstack.org/show/670540/

In the above paste, only the last command unexpectedly fails. That is because the `openstack user list --project <project>` command does the following:

1. It queries the API /role_assignment?scope.project.id=<project> # Works
2. From the list returned above it does /users?name=<user_id> # Works
3. For a user which doesn't exist, the above command will return an empty list # Works
4. If the above call returned an empty list, the openstackclient will throw an exception.