yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1102358] Re: Filter LDAP attribute queries in existing LDAP infrastructures

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Thu, 21 Feb 2013 08:44:04 -0000
Reply-to: Bug 1102358 <1102358@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => grizzly-3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1102358

Title:
  Filter LDAP attribute queries in existing LDAP infrastructures

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  When using existing LDAP infrastructure, the query retrieves much more information than needed in keystone.
  It is extremely expensive when using AD as a backend (you receive much more useless information than the strictly required for keystone to run).

  The main idea is sending the attributes in the ldap query so the
  server only replies the attributes needed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1102358/+subscriptions