← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1205150] Re: keystone user-get <user> fetches every user from Backend

 

[Expired for python-keystoneclient because there has been no activity
for 60 days.]

** Changed in: python-keystoneclient
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1205150

Title:
  keystone user-get <user> fetches every user from Backend

Status in OpenStack Identity (Keystone):
  Invalid
Status in Python client library for Keystone:
  Expired

Bug description:
  "keystone user-get ludeman" fetches all users from ldap rather than
  asking ldap for a specific user.

  I see the following:

  GET /v2.0/users/users/users/users HTTP/1.0
  Accept: */*
  Accept-Encoding: gzip, deflate, compress
  Content-Type: text/plain
  Host: keystone:35357
  User-Agent: python-keystoneclient

  which calls:
    keystone/keystone/identity/controllers.py: get_users()

  get_users() supports query_string, so it should probably pass it in in
  this context.

  if 'name' isn't in the query_string, it proceeds to get all users from ldap as follows:
    2013-07-26 01:13:45,599 (keystone.common.ldap.core): DEBUG core search_s LDAP search: dn=cn=users,dc=bogus,dc=com, scope=1, query=(&(objectClass=inetOrgPerson)), attrs=['businessCategory', 'userPassword', 'enabled', 'mail', 'uid']

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1205150/+subscriptions