yahoo-eng-team team mailing list archive

[Adam Young <1285136@xxxxxxxxxxxxxxxxxx>]

There are no global roles.  Only domain scoped roles.

** Changed in: keystone
       Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1285136

Title:
  Cannot create global roles in LDAP assignment backend

Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  When using the ldap assignment backend, there is no possibility to assign a role to a user without a tenant  (global role)
  This behavior is completely different to SQL that allows that functionality. In LDAP it just simply fails requiring a tenant_id.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1285136/+subscriptions