yahoo-eng-team team mailing list archive

[OpenStack Infra <1794527@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/605235
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=4cd99e7197f3abbdf800fa8ef392c24148d4c390
Submitter: Zuul
Branch:    master

commit 4cd99e7197f3abbdf800fa8ef392c24148d4c390
Author: Adam Young <ayoung@xxxxxxxxxx>
Date:   Tue Sep 25 17:09:02 2018 -0400

    Allow an explicit_domain_id parameter when creating a domain
    
    This allows domain_ids to match across distinct Keystone
    deployments The domain_id is used to create unique
    identifiers with the mapping backend.  When this
    option is used, mapped user identifiers can be
    consistant across different Keystone servers.
    
    closes-bug: 1794527
    
    Change-Id: I100bca162e71a9d394ed5787b976b13b1e57987f


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1794527

Title:
  RFE: Allow domain creation with a specific ID

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  When keeping two Keystone servers in sync, but avoiding Database
  replication, it is often necessary to hack the database to update the
  Domain ID so that entries match.  Domain ID is then used for LDAP
  mapped IDs, and if they don't match, the user IDs are different.  It
  should be possible to add a domain with an explicit ID, so that the
  two servers can match User IDs.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1794527/+subscriptions