marking as invalid, since the options are deprecated, let's just remove
them
** Changed in: keystone
Status: In Progress => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1336769
Title:
LDAP additional attribute mappings description do not specify that
they are for creation only
Status in OpenStack Identity (keystone):
Invalid
Bug description:
Additional attribute mappings can be used to map ldap attributes to
internal keystone attributes. This allows keystone to fulfill ldap
objectclass requirements. List of additional LDAP attributes used for
mapping additional attribute mappings for users (or projects).
Attribute mapping format is <ldap_attr>:<model_attr>, where ldap_attr
is the attribute in the LDAP entry and model_attr is the Identity API
attribute. (list value).
So far so good. Now, following next steps:
1- Apply this patch https://review.openstack.org/#/c/91490/
2- Add this parameter to keystone.conf file
tenant_additional_attribute_mapping = objectCategory:notexistingfield1,
whenChanged:notexistingfield2
3- Add 'objectCategory' and 'whenChanged' LDAP parameters to Project model
on keystone/common/models.py
class Project(Model):
required_keys = ('id', 'name', 'domain_id')
optional_keys = ('description', 'enabled', 'objectCategory',
'whenChanged')
4- Restart keystone
5- Execute this in command line:
curl -H "X-Auth-Token:admin_token" http://localhost:5000/v3/projects
Everything works perfectly!. you can see the info of 'objectCategory'
and 'whenChanged' LDAP parameters in the JSON string returned by
CURL... and it should not (I think) works, because "notexistingfield1"
and "notexistingfield2" are not real fields.
I have a mistake in the keystone.conf file and everything is working
properly.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1336769/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
