yahoo-eng-team team mailing list archive

[Marek Denis <marek.denis@xxxxxxx>]

Public bug reported:

Federation mapping engine doesn't work correctly when a rule to be directly mapped has special keywords (any_one_of or not_any_of). 
For instance: 

rules = [  
{
    "local": [
        {
            "user": {
                "name": "{0}"
            }
        },
        {
            "group": {
                "id": "abc"
            }
        }
    ],
    "remote": [
        {
            "type": "openstack_user",
            "any_one_of": [
                "user1",
                "admin"
            ]
        }
    ]
}
]

user['name'] will not map "openstack_user" value as a keyword
"any_one_of" is present in that remote rule. No validation error will be
raised and direct value "{0}" will be used.

Mapping engine should validate such cases and preferably allow for
direct mapping.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1401057

Title:
  Direct mapping in mapping rules don't work with keywords

Status in OpenStack Identity (Keystone):
  New

Bug description:
  Federation mapping engine doesn't work correctly when a rule to be directly mapped has special keywords (any_one_of or not_any_of). 
  For instance: 

  rules = [  
  {
      "local": [
          {
              "user": {
                  "name": "{0}"
              }
          },
          {
              "group": {
                  "id": "abc"
              }
          }
      ],
      "remote": [
          {
              "type": "openstack_user",
              "any_one_of": [
                  "user1",
                  "admin"
              ]
          }
      ]
  }
  ]

  user['name'] will not map "openstack_user" value as a keyword
  "any_one_of" is present in that remote rule. No validation error will
  be raised and direct value "{0}" will be used.

  Mapping engine should validate such cases and preferably allow for
  direct mapping.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1401057/+subscriptions