I am using OpenStack with a Windows Active Directory Server, such that the [LDAP] chase referrals attribute is set to True. The LDAP search flow reaches the convert_ldap_result(ldap_result) function inside https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py and the search returns one or more referrals as well. The flow logs the below:
https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py#L180-L182
if at_least_one_referral:
LOG.debug('Referrals were returned and ignored. Enable referral '
'chasing in keystone.conf via [ldap] chase_referrals')
In my case, the above statement does get logged but the log statement is either incorrect or misleading. There are 2 problems here >>
1. Why does the ldap search bother to search and return referrals if they are going to be ignored anyway?
2. The above message also leads us to believe that the referrals were ignored because the value of chase referrals was False, which is clearly not the case here.
Fix proposed to branch: master
Review: https:/