_dn_to_id ignores user_id_attribute

[Boris Kudryavtsev]

_dn_to_id is not affected when user_id_attribute is changed in keystone.conf.
https://github.com/openstack/keystone/blob/c3ca06ff47cced16ea9de3d6ef1a6c583bb3cf38/keystone/identity/backends/ldap/common.py#L1280

Considering the following LDAP directory:

...
# userid, Users, openstack.org
dn: cn=userid,ou=Users,dc=openstack,dc=org
objectClass: inetOrgPerson
userPassword:: e1NTSEF9Rit1bTlOS2FKdWM2bWFhWUtmRGQ5dmlBdEd6NEFydHY=
sn: 25cbd5b54da849128b89c3f7ab6e5bff
cn: userid

# test-group, UserGroups, openstack.org
dn: cn=test-group,ou=UserGroups,dc=openstack,dc=org
objectClass: groupOfNames
cn: test-group
ou: f44a7fbb9e174ba5823474c759d43643
member: cn=userid,ou=Users,dc=openstack,dc=org
...

keystone.conf:

...
user_id_attribute = sn
user_name_attribute = cn
...

This results in users unable to found in groups.
e.g. `openstack user list --domain default --group test-group`
Expected: User ID and Name are returned
+----------------------------------+---------------------+
| ID | Name |
+----------------------------------+---------------------+
| 25cbd5b54da849128b89c3f7ab6e5bff | userid |
+----------------------------------+---------------------+

Actual: Nothing is returned

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/466389

[Colleen Murphy (krinkle)]

Do you have debug logs you could post?

[Colleen Murphy (krinkle)]

As well as the rest of your [ldap] section? There are a lot of parameters that control the search filter that could be affecting your results.

[Lance Bragstad (lbragstad)]

Removing this as an rc1 candidate since we're awaiting more information.

[Lance Bragstad (lbragstad)]

Unassigning due to inactivity.

[Launchpad Janitor (janitor)]

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Gage Hugo <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/keystone/+/466389
Reason: Abandoning since there hasn't been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.