Public bug reported: `user_attribute_ignore` or `group_attribute_ignore` are both needed by identity ldap backend to judge whether a specific attributes should be returned for read user or group operations.
We cannot deprecated those property as keystone still support read operations with ldap backend. One occurence could be found from [1] where the logic is implemented in `_ldap_res_to_model` method. [1] https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py#L1921 ** Affects: keystone Importance: Undecided Assignee: Dave Chen (wei-d-chen) Status: In Progress -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1637135 Title: *_attribute_ignore is deprecated for removal even ldap backend read operations depends on it Status in OpenStack Identity (keystone): In Progress Bug description: `user_attribute_ignore` or `group_attribute_ignore` are both needed by identity ldap backend to judge whether a specific attributes should be returned for read user or group operations. We cannot deprecated those property as keystone still support read operations with ldap backend. One occurence could be found from [1] where the logic is implemented in `_ldap_res_to_model` method. [1] https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/common.py#L1921 To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1637135/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp

