Andrew Bogott has submitted this change and it was merged. Change subject: Fix ldap_user_name_attribute in keystone config ......................................................................
Fix ldap_user_name_attribute in keystone config Previously we were telling keystone that username and uid were the same. The 'name' should actually be the 'sn' which is the on-wiki name. Change-Id: I7e4d5d84998735957890cece9c73f1d3ac2d3acc --- M hieradata/codfw/labtest.yaml M hieradata/common.yaml 2 files changed, 2 insertions(+), 2 deletions(-) Approvals: Andrew Bogott: Looks good to me, approved jenkins-bot: Verified diff --git a/hieradata/codfw/labtest.yaml b/hieradata/codfw/labtest.yaml index 971338f..fe6bf48 100644 --- a/hieradata/codfw/labtest.yaml +++ b/hieradata/codfw/labtest.yaml @@ -78,7 +78,7 @@ ldap_user_dn: 'uid=novaadmin,ou=people,dc=wikimedia,dc=org' ldap_user_id_attribute: 'uid' ldap_tenant_id_attribute: 'cn' - ldap_user_name_attribute: 'uid' + ldap_user_name_attribute: 'sn' ldap_tenant_name_attribute: 'cn' ldap_proxyagent : 'cn=proxyagent,ou=profile,dc=wikimedia,dc=org' auth_protocol: 'http' diff --git a/hieradata/common.yaml b/hieradata/common.yaml index 123b9b8..bff64e6 100644 --- a/hieradata/common.yaml +++ b/hieradata/common.yaml @@ -313,7 +313,7 @@ ldap_user_dn: 'uid=novaadmin,ou=people,dc=wikimedia,dc=org' ldap_user_id_attribute: 'uid' ldap_tenant_id_attribute: 'cn' - ldap_user_name_attribute: 'uid' + ldap_user_name_attribute: 'sn' ldap_tenant_name_attribute: 'cn' ldap_proxyagent : 'cn=proxyagent,ou=profile,dc=wikimedia,dc=org' auth_protocol: 'http' -- To view, visit https://gerrit.wikimedia.org/r/268949 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I7e4d5d84998735957890cece9c73f1d3ac2d3acc Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Andrew Bogott <[email protected]> Gerrit-Reviewer: Andrew Bogott <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
