For ldap, API wrongly reports user is in group

[Craig Jellick]

When the ldap identity backend is configured,
HEAD v3/groups/​{group_id}​/users/​{user_id}
always returns 200, regardless of whether or not the user is actually in the group.

Fix is simple:
keystone.identity.backends.ldap.check_user_in_group() should raise an exception if the user isn't in the group, rather than just return false

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/54032

[Dolph Mathews (dolph)]

Unassigning due to inactivity.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/80934

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: milestone-proposed
Review: https://review.openstack.org/85103

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/havana
Review: https://review.openstack.org/85104

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/80934
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=da006715840b665e8f07c042587ecd3d4bce1ff7
Submitter: Jenkins
Branch: master

commit da006715840b665e8f07c042587ecd3d4bce1ff7
Author: wanghong <email address hidden>
Date: Mon Mar 17 17:22:08 2014 +0800

    For ldap, API wrongly reports user is in group

    When the ldap identity backend is configured,
    HEAD v3/groups/​{group_id}​/users/​{user_id}
    always returns 200, even if the user is not actually in the group.
    This is because the sql and kvs backend will raise NotFound
    exception if the user is not in the group, but the ldap backend
    just return result.

    Change-Id: Ie1585c8aebe054091bd76fded666bf41125ff9ca
    Closes-Bug: 1245247

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/85103
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=628f383fbb14ae99679957ab05a02562a4d43d91
Submitter: Jenkins
Branch: milestone-proposed

commit 628f383fbb14ae99679957ab05a02562a4d43d91
Author: wanghong <email address hidden>
Date: Mon Mar 17 17:22:08 2014 +0800

    For ldap, API wrongly reports user is in group

    When the ldap identity backend is configured,
    HEAD v3/groups/​{group_id}​/users/​{user_id}
    always returns 200, even if the user is not actually in the group.
    This is because the sql and kvs backend will raise NotFound
    exception if the user is not in the group, but the ldap backend
    just return result.

    Change-Id: Ie1585c8aebe054091bd76fded666bf41125ff9ca
    Closes-Bug: 1245247