yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1205506] Re: get_group_project_roles() asks same ldap query for all groups associated with user

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Russell Bryant <1205506@xxxxxxxxxxxxxxxxxx>
Date: Thu, 24 Jul 2014 12:11:14 -0000
Reply-to: Bug 1205506 <1205506@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => juno-2

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1205506

Title:
  get_group_project_roles() asks same ldap query for all groups
  associated with user

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  in assignment/core.py:_get_group_project_roles() iterators over all my
  ldap user groups and calls self._get_metadata(group_id=x['id'],
  tenant_id=project_ref['id'])

  in assignment/backends/ldap.py:_get_metadata() has a parameter
  group_id but it not used in the function.

  this effectively calls ldap for every group with the identical question: 
      2013-07-26 21:50:32,026 (keystone.common.ldap.core): DEBUG core search_s LDAP search: dn=cn=groups,dc=bogus,dc=com, scope=1, query=(&(cn=OS_TENANT_NAME)(objectClass=posixGroup)), attrs=['enabled', 'cn', 'businessCategory', 'description']

  where OS_TENANT_NAME is shell environment variable.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1205506/+subscriptions