yahoo-eng-team team mailing list archive

[OpenStack Infra <1229093@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/236103
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=33860b31fcbf7dc8a6ffdcbc1c0e131e652cdcff
Submitter: Jenkins
Branch:    master

commit 33860b31fcbf7dc8a6ffdcbc1c0e131e652cdcff
Author: henriquetruta <henrique@xxxxxxxxxxxxxxx>
Date:   Fri Oct 16 18:02:10 2015 -0300

    Improves domain name case sensitivity tests
    
    The old domain name case sensitivity test only tested if we were able to
    create a domain, but did not test the get_domain_by_name resource_api
    call case sensitivity
    
    Change-Id: I2df8611d4e4f983ad91b32c41168ffe2e082e532
    Closes-Bug: 1229093


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1229093

Title:
  the domain name is case insensitive with keystone v3

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  
  I found the domain name is case insensitive when i use keystone /v3/auth/tokens which means 

  i can use the "default", "deFault" as domain name to get the valid
  token.

  When i checked the code , i found the keystone uses database query to
  get the domain by name  ,  if my database

  is mysql with default configuration then it is case insensitive, but
  the postgres is case sensitive by default.

  This is not a consistent API behavior. I would like to get the same
  output no matter what kind of db in backend.

  I  propose to use case sensitive due to security reason.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1229093/+subscriptions