yahoo-eng-team team mailing list archive

[Dave Chen <wei.d.chen@xxxxxxxxx>]

Public bug reported:

`user_attribute_ignore` or `group_attribute_ignore` are both needed
by identity ldap backend to judge whether a specific attributes should
be returned for read user or group operations.

We cannot deprecated those property as keystone still support read
operations with ldap backend.

One occurence could be found from [1] where the logic is implemented
in `_ldap_res_to_model` method.

[1]
https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py#L1921

** Affects: keystone
     Importance: Undecided
     Assignee: Dave Chen (wei-d-chen)
         Status: In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1637135

Title:
  *_attribute_ignore is deprecated for removal even ldap backend read
  operations depends on it

Status in OpenStack Identity (keystone):
  In Progress

Bug description:
  `user_attribute_ignore` or `group_attribute_ignore` are both needed
  by identity ldap backend to judge whether a specific attributes should
  be returned for read user or group operations.

  We cannot deprecated those property as keystone still support read
  operations with ldap backend.

  One occurence could be found from [1] where the logic is implemented
  in `_ldap_res_to_model` method.

  [1]
  https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py#L1921

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1637135/+subscriptions