Comment 16 for bug 1281216

Revision history for this message
Openstack Gerrit (openstack-gerrit) wrote : Fix merged to keystone (stable/icehouse)

Reviewed: https://review.openstack.org/89898
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1716748df15443f1141f69ea620c4bc33758433d
Submitter: Jenkins
Branch: stable/icehouse

commit 1716748df15443f1141f69ea620c4bc33758433d
Author: Nathan Kinder <email address hidden>
Date: Wed Apr 9 18:24:21 2014 -0700

    Treat LDAP attribute names as case-insensitive

    LDAP attribute names are case-insensitive, and different LDAP
    server implementations behave differently when returning search
    results. Keystone attempts to use the attribute names as defined
    in the mapping configuration when checking for values in the dict
    that represents the search results. If the case doesn't match,
    we won't find the values which can lead to errors.

    This patch converts the dictionary keys to lowercase to allow us
    to perform a case-insensitive lookup when processing LDAP search
    results. When we create the model object, we still use the
    attribute name case as defined in the mapping to allow predictable
    lookups when we process the model object later.

    Change-Id: Ib9a03b912bc7652dc6a61b1c97a950e263a9c6fa
    Closes-bug: 1281216
    (cherry picked from commit 7c104e13fce919dd2563f06ce31c059f145beb77)