← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1753585] Re: LDAP user name attribute is case sensitive

 

Reviewed:  https://review.openstack.org/603345
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=816b472a9d20e4e7cfe33f2f40ef5daae590795e
Submitter: Zuul
Branch:    master

commit 816b472a9d20e4e7cfe33f2f40ef5daae590795e
Author: Vishakha Agarwal <agarwalvishakha18@xxxxxxxxx>
Date:   Tue Sep 18 15:17:07 2018 +0530

    LDAP attribute names non-case-sensitive
    
    keystone was not able to find any users while
    the LDAP user name attribute was configured to
    "samaccountname", but could find users when
    reconfigured to use "sAMAccountName". LDAP is
    not supposed to be case-sensitive, so either
    should work.
    
    This patch addresses the above problem by making
    both the attributes into lower case. Also updated
    the ldap_result example supporting python3.
    
    Change-Id: I51813ac41489baed04f3cadbccd748e03025313e
    Closes-Bug: #1753585


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1753585

Title:
  LDAP user name attribute is case sensitive

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  keystone was not able to find any users while the LDAP user name
  attribute was configured to "samaccountname", but could find users
  when reconfigured to use "sAMAccountName". LDAP is not supposed to be
  case-sensitive, so either should work.

  This appears to be a result of
  https://github.com/openstack/keystone/blob/12.0.0.0rc2/keystone/identity/backends/ldap/common.py#L1403
  looking for that attribute in a case-sensitive manner, though there
  may be other places as well.

  found in: Pike

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1753585/+subscriptions


References