Comment 5 for bug 1217017

Revision history for this message
Mark Miller (mark-m-miller) wrote : Re: dependency injection fails to init domain-specific identity drivers

This problem occurs during run time. All I have to do to reproduce this problem is to attempt to get a project scoped token for a user who is defined in the LDAP domain but not the SQL domain. To get a token the Keystone code must authenticate the user against the read-only LDAP domain and then retrieve the project/role information from the Keystone SQL domain. The code fails to go back to the LDAP server for the various "get_user" calls.