[plugin ldap] Active Directory requres additional parameter chase_referrals

[Roman Sokolkov]

Environment: MOS 7.0

This plugin https://github.com/openstack/fuel-plugin-ldap should also have configurable "chase_referrals" parameter.

Which is required in case Active Directory. Usually it should be set to "chase_referrals=0".

By default (if no chase_referrals specified) we'r getting following error:
In order to perform this operation a successful bind must be completed on the connection.

[Irina Povolotskaya (ipovolotskaya)]

Ilya, I wonder why customer used the self-built plugin - we got LDAP validated and it's so far published.
Anyway, I've assigned the bug to Max, the plugin maintainer.

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/329659

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/329659
Committed: https://git.openstack.org/cgit/openstack/fuel-plugin-ldap/commit/?id=6707739fbe8d2257857fc1fc3a71b5a8812cb86a
Submitter: Jenkins
Branch: master

commit 6707739fbe8d2257857fc1fc3a71b5a8812cb86a
Author: Maksym Yatsenko <email address hidden>
Date: Wed Jun 15 14:13:20 2016 +0300

    Add 'chase_referrals' parameter.

    its used for overriding the system's default
    referral chasing behavior for queries.

    Change-Id: Icc207bcc4180b7249e5bf415ce7e661fdaf7ee21
    Related-Bug: #1532803

[Alexander Petrov (apetrov-n)]

I have checked the fix. The parameter has been added to configuration.
Now we can define this parameter in LDAP settings in Fuel Web. But it does not affect my current AD-domain at all. We have env with AD-domain and it works with and without this parameter.
So I need more detailed test case (or steps to reproduce) to make sure that this parameter works.

[Dmitry Dmitriev (dmdmitriev)]

I have done a small research about referrals in AD. Additional details can be found here:

https://mirantis.jira.com/browse/PDT-55

My conclusion: customer has a very specific AD configuration which affects Keystone with default chase_referrals option.