yahoo-eng-team team mailing list archive

[OpenStack Infra <2112112@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/keystone/+/951282
Committed: https://opendev.org/openstack/keystone/commit/7830e89dfb57acf9b9a6857b7f4c58a03547277c
Submitter: "Zuul (22348)"
Branch:    master

commit 7830e89dfb57acf9b9a6857b7f4c58a03547277c
Author: Stephen Finucane <stephenfin@xxxxxxxxxx>
Date:   Thu May 29 14:14:51 2025 +0100

    api: Remove constraints on user IDs
    
    Per the comment added inline, this is not valid when LDAP is in use.
    
    Change-Id: Idcc0bdf7d0e73fa608ebf6b32d6e016c7b9a8997
    Signed-off-by: Stephen Finucane <stephenfin@xxxxxxxxxx>
    Closes-bug: #2112112


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/2112112

Title:
  Keystone 2025.1 rejecting users with underscores

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  The latest keystone has started erroring out whenever it encounters a
  user with an underscore in their name. For example:

  $ os role assignment list --project tools
  BadRequestException: 400: Client Error for url: https://openstack.eqiad1.wikimediacloud.org:25357/v3/role_assignments?scope.project.id=tools, Invalid input for field/attribute id. Value: danny_b. 'danny_b' does not match '^[a-zA-Z0-9-]+$'

  This is pretty serious regression for our cloud. Any new constraint
  like this needs to be switched off for legacy deployments.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/2112112/+subscriptions