registry team mailing list archive

[Ryan Lane <681030@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Though requiring the nis or bis schema doesn't necessarily exclude
Active Directory, it adds an unneeded and bothersome requirement to
include the nis schema, and forces the use of the uid attribute.

It would be better if the schema defined novaUser as follows:

objectClass (
    novaOCs:1
    NAME 'novaUser'
    DESC 'access and secret keys'
    AUXILIARY
    MUST ( cn )
    MAY  ( accessKey $ secretKey $ isAdmin )
    )

This puts the requirement on person or inetorgperson instead, which is
mostly universally used for user entries.

The code should default to using cn, but the configuration should
default to using uid. Allowing this to be a configurable option allows
users to define which attribute their directory server should be using,
such as sAMAccountName in AD.

** Affects: nova
     Importance: Undecided
         Status: New

-- 
Nova's LDAP schema has an unneeded requirement on the nis or bis schema
https://bugs.launchpad.net/bugs/681030
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack.