keystone client cannot get users by id when ldap is used and id is not a hash (id == uid in posixAccount)

[Adam Tygart]

keystone user-get mozes
should return:
+----------+---------------+
| Property | Value |
+----------+---------------+
| email | <email address hidden> |
| enabled | True |
| id | mozes |
| name | Adam Tygart |
+----------+---------------+

instead returns:
No user with a name or ID of 'mozes' exists.

relevant keystone.conf entry:
[ldap]
use_dumb_member = True
user_allow_create = False
user_allow_update = False
user_allow_delete = False
user_mail_attribute = mail
user_id_attribute = uid
user_name_attribute = cn
user_objectclass = posixAccount

[alexius ludeman (lexinator)]

assignment/core.py:
    def _get_group_project_roles():
        ...
       metadata_ref = self._get_metadata(
                           group_id=x['id'],
                            domain_id=project_ref['domain_id'])

self._get_metadata() gets called with user_id=None

assignment/backends/ldap.py:
    def _get_metadata():
        ...
        if (not self.get_project(tenant_id) or
                user_id and not self.identity_api.get_user(user_id)):

self.identity_api.get_user(user_id) raises "user not found" since user_id = None

[alexius ludeman (lexinator)]

sorry I may have jumped the gun on this one. My comment does reveal a bug but I'm not sure it's the same exact code path described.

[Adam Tygart (mozes-7)]

I believe this is fixed with the code I just uploaded here https://review.openstack.org/#/c/38347/ , but I am not sure if I am familiar enough with the code to know if my "fix" breaks anything else.

[Brant Knudson (blk-u)]

Does this work on the unified CLI (openstack user show) already?

[Dolph Mathews (dolph)]

Adding openstackclient to raise awareness - I'm not sure whether this would be an issue there?

[Adam Young (ayoung)]

Belived this is fixed, but we need to confirm.

[Adam Young (ayoung)]

Fixed by https://review.openstack.org/#/c/43939/

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/76742

[Terry Howe (thowe-g)]

I abandoned my change because it was not necessary. If the UUID parse fails, it still tries to do a manager.get on the name_or_id:

https://github.com/openstack/python-openstackclient/blob/master/openstackclient/common/utils.py#L49