LDAP fix for get_roles_for_user_and_project user=group ID
When there was a role assigned to a group with the same ID as a
user, the LDAP assignment backend would incorrectly return the
assignment to the group when requesting roles for the user via
the get_roles_for_user_and_project method.
With this change, assignments to a group with the same ID are not
returned for the user when calling get_roles_for_user_and_project.
Functions were added to compare DNs more accurately based on the
LDAP RFCs.
The fakeldap code was changed to normalize the values when
comparing values for checking if the values match the filter.
Co-Authored By: Nathan Kinder <email address hidden>
Co-Authored By: Adam Young <email address hidden>
Reviewed: https:/ /review. openstack. org/94470 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=729dcad7384 ba66ee749415496 9cdd7ae90d86ee
Committed: https:/
Submitter: Jenkins
Branch: master
commit 729dcad7384ba66 ee7494154969cdd 7ae90d86ee
Author: Brant Knudson <email address hidden>
Date: Wed May 21 17:30:42 2014 -0500
LDAP fix for get_roles_ for_user_ and_project user=group ID
When there was a role assigned to a group with the same ID as a for_user_ and_project method.
user, the LDAP assignment backend would incorrectly return the
assignment to the group when requesting roles for the user via
the get_roles_
With this change, assignments to a group with the same ID are not for_user_ and_project.
returned for the user when calling get_roles_
Functions were added to compare DNs more accurately based on the
LDAP RFCs.
The fakeldap code was changed to normalize the values when
comparing values for checking if the values match the filter.
Co-Authored By: Nathan Kinder <email address hidden>
Co-Authored By: Adam Young <email address hidden>
Change-Id: Ia6f1ae2e3af1e9 68f1a393bd4f2f3 8812a88a5d0
Closes-Bug: #1309228