OpenStack Identity (keystone)

Getting domain roles for token missing in kvs/ldap backends

Bug #1131769 reported by Henry Nash on 2013-02-22

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Identity (keystone)	Fix Released	High	Henry Nash	OpenStack Identity (keystone) 2013.1 "grizzly"

Bug Description

When creating a token, the roles on a project or a domain are obtained by making calls to the identity backends. For Domain roles, this is only currently supported for SQL - support for kvs & LDAP should be added.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2013-02-23: Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/22769

Changed in keystone:
status:	New → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2013-03-11: Fix merged to keystone (master)

Reviewed: https://review.openstack.org/22769
Committed: http://github.com/openstack/keystone/commit/1e64378f423f288fadf1d1ec7db786236d9614d2
Submitter: Jenkins
Branch: master

commit 1e64378f423f288fadf1d1ec7db786236d9614d2
Author: Henry Nash <email address hidden>
Date: Fri Feb 22 15:34:58 2013 +0000

Make getting user-domain roles backend independant

    There is nothing backend specific in geting the list of roles
    for a user-domain, so we should move this function into backends
    core. This also has the affect of now ensuring that the kvs and ldap
    support will work, provided the specific backend supports roles on
    users and domains. This is true today for kvs, but support in ldap
    for domains is gated by other bugs.

Fixes bug #1131769

Change-Id: Id99accb33fd7cd8d6c37e64e140552c5bfe68349