OpenStack Identity (keystone)

  1. Bug #1302106
  2. Comment #3

Comment 3 for bug 1302106

Revision history for this message
Brant Knudson (blk-u) wrote :

OK, I was able to recreate this... keystone is generating a filter like

 (&(&(objectClass=groupOfNames)(member=cn=Doe\, John,ou=Users,dc=openstack,dc=org))(objectClass=groupOfNames))

which even ldapsearch doesn't like. It doesn't mind

  (&(&(objectClass=groupOfNames)(member=cn=Doe, John,ou=Users,dc=openstack,dc=org))(objectClass=groupOfNames))