yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #75019
[Bug 1753585] Re: LDAP user name attribute is case sensitive
Reviewed: https://review.openstack.org/603345
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=816b472a9d20e4e7cfe33f2f40ef5daae590795e
Submitter: Zuul
Branch: master
commit 816b472a9d20e4e7cfe33f2f40ef5daae590795e
Author: Vishakha Agarwal <agarwalvishakha18@xxxxxxxxx>
Date: Tue Sep 18 15:17:07 2018 +0530
LDAP attribute names non-case-sensitive
keystone was not able to find any users while
the LDAP user name attribute was configured to
"samaccountname", but could find users when
reconfigured to use "sAMAccountName". LDAP is
not supposed to be case-sensitive, so either
should work.
This patch addresses the above problem by making
both the attributes into lower case. Also updated
the ldap_result example supporting python3.
Change-Id: I51813ac41489baed04f3cadbccd748e03025313e
Closes-Bug: #1753585
** Changed in: keystone
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1753585
Title:
LDAP user name attribute is case sensitive
Status in OpenStack Identity (keystone):
Fix Released
Bug description:
keystone was not able to find any users while the LDAP user name
attribute was configured to "samaccountname", but could find users
when reconfigured to use "sAMAccountName". LDAP is not supposed to be
case-sensitive, so either should work.
This appears to be a result of
https://github.com/openstack/keystone/blob/12.0.0.0rc2/keystone/identity/backends/ldap/common.py#L1403
looking for that attribute in a case-sensitive manner, though there
may be other places as well.
found in: Pike
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1753585/+subscriptions
References