OpenStack Identity (keystone)

Inconsistent default ou naming of LDAP project and group

Bug #1191807 reported by Sahdev Zala
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Low
Sahdev Zala
OpenStack Identity (keystone) 2013.2 "havana"
devstack
Fix Released
Undecided
Brad Topol

Bug Description

Currently we have following defaults for Projects and Groups in the core,
ou=Groups
ou=UserGroups
respectively.

The devstack, if selected to set up LDAP backend, creates following for Projects and Groups,
ou=Projects
ou= Groups

I think we should make following changes,
1. In the LDAP core, change ou=Groups to ou=Projects
2. In the devstack, change ou=Groups to ou=UserGroups

(In our live LDAP test, we use ou=Projects and ou=UserGroups, which looks good. )

See original description
Sahdev Zala (spzala)
Changed in keystone:
assignee: nobody → Sahdev Zala (spzala)
Dolph Mathews (dolph)
description: updated
Changed in keystone:
status: New → Triaged
importance: Undecided → Low
Brad Topol (btopol)
Changed in devstack:
assignee: nobody → Brad Topol (btopol)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to devstack (master)

Fix proposed to branch: master
Review: https://review.openstack.org/33336

Changed in devstack:
status: New → In Progress
Changed in keystone:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/33337

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to devstack (master)

Reviewed: https://review.openstack.org/33336
Committed: http://github.com/openstack-dev/devstack/commit/e7a2ba45a72a838f47a1fafc67c855c159a269c0
Submitter: Jenkins
Branch: master

commit e7a2ba45a72a838f47a1fafc67c855c159a269c0
Author: Brad Topol <email address hidden>
Date: Mon Jun 17 15:13:49 2013 -0500

    Update the ou name of Group to be the new default of UserGroups

    This update sets the ou value for groups to be the new keystone
    ldap default of UserGroups

    Fixes Bug1191807

    Change-Id: I9b7383100045155ca35b04190f42be641a0c6ea8

Changed in devstack:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/33337
Committed: http://github.com/openstack/keystone/commit/96dea469c9de72a9ef6ee0c03833c4f3ff2f9f8f
Submitter: Jenkins
Branch: master

commit 96dea469c9de72a9ef6ee0c03833c4f3ff2f9f8f
Author: Sahdev Zala <email address hidden>
Date: Mon Jun 17 15:18:44 2013 -0500

    Set default 'ou' name for LDAP projects to Projects

    The default ou name for projects/tenants should be Projects, as we normally
    use in devstack and ldap live test. Since multiple LDAP objects can
    use groupOfNames, setting projects group to Groups is vague.

    Fixes Bug1191807

    Change-Id: I1718c76320da51a58abf6558a9b8560e908773cb

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → havana-2
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: havana-2 → 2013.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.