yahoo-eng-team team mailing list archive

[OpenStack Infra <1637135@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/391077
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=339d6a619766d5593bf75153f25a16fd7fab79f8
Submitter: Jenkins
Branch:    master

commit 339d6a619766d5593bf75153f25a16fd7fab79f8
Author: Dave Chen <wei.d.chen@xxxxxxxxx>
Date:   Thu Oct 27 17:13:55 2016 +0800

    Don't deprecate the LDAP property which is still needed
    
    `user_attribute_ignore` or `group_attribute_ignore` are both needed
    by identity ldap backend to judge whether a specific attribute could
    be returned for read user or group operations.
    
    Closes-Bug: #1637135
    Change-Id: If623e1e4d3c827d00f17203652f33b74ac138d62


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1637135

Title:
  *_attribute_ignore is deprecated for removal even ldap backend read
  operations depends on it

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  `user_attribute_ignore` or `group_attribute_ignore` are both needed
  by identity ldap backend to judge whether a specific attributes should
  be returned for read user or group operations.

  We cannot deprecated those property as keystone still support read
  operations with ldap backend.

  One occurence could be found from [1] where the logic is implemented
  in `_ldap_res_to_model` method.

  [1]
  https://github.com/openstack/keystone/blob/093d14fa9196c42f859d4a399bb2e423934a9972/keystone/identity/backends/ldap/common.py#L1921

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1637135/+subscriptions