BaseLDAP builds tree_dn backwards
Bug #980209 reported by
Adam Young
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Low
|
Unassigned |
Bug Description
If the configuration file specifies only the suffix, the code to build the base DN prepends the suffix instead of appending it, so the DN looks like
cn=example,
instead of
ou=Users,
Changed in keystone: | |
status: | In Progress → Confirmed |
Changed in keystone: | |
status: | Confirmed → In Progress |
status: | In Progress → Confirmed |
Changed in keystone: | |
importance: | Undecided → Low |
Changed in keystone: | |
status: | Confirmed → In Progress |
Changed in keystone: | |
milestone: | none → folsom-2 |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | folsom-2 → 2012.2 |
To post a comment you must log in.
The fix is 9b98dde62597156 aafa1e68a0
[ayoung@ayoung ldap]$ git show
commit f9238e29a3e8398
Author: Adam Young <email address hidden>
Date: Thu Apr 12 15:19:54 2012 -0400
Correct Tree DN
diff --git a/keystone/ common/ ldap/core. py b/keystone/ common/ ldap/core. py common/ ldap/core. py common/ ldap/core. py
self. suffix = self.DEFAULT_SUFFIX
self. tree_dn = (getattr(conf.ldap, dn)
index 72647c2..43a33d7 100644
--- a/keystone/
+++ b/keystone/
@@ -83,7 +83,7 @@ class BaseLdap(object):
dn = '%s_tree_dn' % self.options_name
- or '%s,%s' % (self.suffix, self.DEFAULT_OU))
+ or '%s,%s' % (self.DEFAULT_OU, self.suffix))
idatt = '%s_id_attribute' % self.options_name
self. id_attr = getattr(conf.ldap, idatt) or self.DEFAULT_ ID_ATTR