yahoo-eng-team team mailing list archive

[OpenStack Infra <1827431@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/656898
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=c9c655a1e1e865a1f4e274c0aaea1749acc8a53b
Submitter: Zuul
Branch:    master

commit c9c655a1e1e865a1f4e274c0aaea1749acc8a53b
Author: Pavlo Shchelokovskyy <shchelokovskyy@xxxxxxxxx>
Date:   Thu May 2 16:50:56 2019 -0600

    Add ignore_user_inactivity user option
    
    this option allows to override the
    [security_compliance]disable_user_account_days_inactive setting from
    config on per-user basis.
    
    Co-Authored-By: Vishakha Agarwal <agarwalvishakha18@xxxxxxxxx>
    
    Change-Id: Ida360e215426184195687bee2a800877af33af04
    Closes-Bug: #1827431


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1827431

Title:
  add user option to ignore user inactivity period

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Heat's bug: https://storyboard.openstack.org/#!/story/2005210

  Heat creates service users in its dedicated domain on the fly. These
  are crucial in situations that require deferred authentications, for
  example autoscaling.

  While it is currently possible to ignore some settings in
  [security_compliance] sections of Keystone for specific users, there's
  no way to ignore the "disable_user_account_days_inactive" setting.

  It is proposed to add such user option (similar to those already
  existing ones) to ignore this setting for a given user

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1827431/+subscriptions