Comment 18 for bug 1231488

Revision history for this message
Dolph Mathews (dolph) wrote :

Matt: I'm wondering if everything here is (mostly?) behaving as intended, but those intentions don't quite match everyone's expectations. It's a lot to read through, but the only misbehavior I can see is that "user list" is not reporting the ID correctly, although it seems that auth is generally unaffected.

In your specific use case, we don't support a "display name" that's distinct from "name", although you could perhaps use the "description" attribute of users. It sounds like you want user_id_attribute = cn and user_name_attribute = displayName. Users can authenticate with either, depending on the interface to keystone (not sure if Horizon supports anything beyond user_name, but it could).