Keystone v3 user/tenant lookup by name via OpenStack CLI client fails

[Boris Bobrov]

We are running run into https://bugs.launchpad.net/keystone/+bug/1454309 on release 7.0 ISO. It was fixed in upstream liberty and kilo and should be backported to our repos.

Steps to reproduce the bug:
1. Setup ldap as identity backend;
2. Execute `openstack user show <username>`.

Expected: user with a name is shown
Actual: exception in keystone occurs

[Vitaly Sedelnik (vsedelnik)]

Keystone team, please review the fix and backport to 7.0 if applicable. If not, please update the status accordingly (Won't Fix or Invalid).

[Alexander Makarov (amakarov)]

Boris, please backport the fix

[Fuel Devops McRobotson (fuel-devops-robot)]

Reviewed: https://review.fuel-infra.org/12945
Submitter: Vitaly Sedelnik <email address hidden>
Branch: openstack-ci/fuel-7.0/2015.1.0

Commit: 17b5a03d690202f248e032555969bf51a2452fcc
Author: Edmund Rhudy <email address hidden>
Date: Tue Oct 27 09:09:35 2015

Make sure LDAP filter is constructed correctly

This fixes an issue where, when querying Keystone via the v3 API, you
would get back an invalid LDAP filter, because None was coerced to the
string "None" and inserted into the middle of the query.

Conflicts:
        keystone/tests/unit/common/test_ldap.py

The conflict is due to imports being reorganized in the same area as
this change.

Change-Id: I9d45a4dca265b69e261f134118bb30c8cd128166
Closes-Bug: 1503336
(cherry picked from commit 2c6db4a3bb9e1718744b0e5b03af050fd2866182)
(cherry picked from commit bc96d9f63db29137b4a7f8727dd6ec0d6c848736)

[Vitaly Sedelnik (vsedelnik)]

Fix Committed for 7.0.x, the review is https://review.fuel-infra.org/#/c/12945/

[Alexander Petrov (apetrov-n)]

Fix was verified on MOS-8.0 (build 233)

Command output example:

OS_IDENTITY_API_VERSION=3 OS_TOKEN=admin OS_URL=http://localhost:35357/v3/ openstack user show Administrator --domain ldap
+-----------+------------------------------------------------------------------+
| Field | Value |
+-----------+------------------------------------------------------------------+
| domain_id | ad5cbcc4ecb541308a5569303a137d4a |
| id | a8583f705ed67f24ffe57aa54eca87a4bb7d806c9104b8e5d9f9f93f53c632df |
| name | Administrator |
+-----------+------------------------------------------------------------------+