yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => icehouse-2

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1259426

Title:
  LDAP list group users crash when no member in the group

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  Using the LDAP identity backend,
  If there is no member in the group and using GET http://{IP}:35357/v3/groups/{group_id}/users to get the user list
  Keystone will return 500.

  The traceback as below:

  [-] 'member'
  Traceback (most recent call last):
    File "/usr/lib/python2.7/dist-packages/keystone/common/wsgi.py", line 238, in __call__
      result = method(context, **params)
    File "/usr/lib/python2.7/dist-packages/keystone/common/controller.py", line 200, in wrapper
      return f(self, context, filters, **kwargs)
    File "/usr/lib/python2.7/dist-packages/keystone/identity/controllers.py", line 700, in list_users_in_group
      domain_scope=self._get_domain_id_for_request(context))
    File "/usr/lib/python2.7/dist-packages/keystone/identity/core.py", line 177, in wrapper
      return f(self, *args, **kwargs)
    File "/usr/lib/python2.7/dist-packages/keystone/identity/core.py", line 441, in list_users_in_group
      user_list = driver.list_users_in_group(group_id)
    File "/usr/lib/python2.7/dist-packages/keystone/identity/backends/ldap.py", line 162, in list_users_i
  n_group
      for user_dn in self.group.list_group_users(group_id):
    File "/usr/lib/python2.7/dist-packages/keystone/identity/backends/ldap.py", line 352, in list_group_users
      user_dns = member[self.member_attribute] #if member else []
  KeyError: 'member'

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1259426/+subscriptions