Andrew Bogott has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/268949

Change subject: Fix ldap_user_name_attribute in keystone config
......................................................................

Fix ldap_user_name_attribute in keystone config

Previously we were telling keystone that username and uid were
the same.  The 'name' should actually be the 'sn' which is the
on-wiki name.

Change-Id: I7e4d5d84998735957890cece9c73f1d3ac2d3acc
---
M hieradata/codfw/labtest.yaml
M hieradata/common.yaml
2 files changed, 2 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/49/268949/1

diff --git a/hieradata/codfw/labtest.yaml b/hieradata/codfw/labtest.yaml
index 971338f..fe6bf48 100644
--- a/hieradata/codfw/labtest.yaml
+++ b/hieradata/codfw/labtest.yaml
@@ -78,7 +78,7 @@
   ldap_user_dn: 'uid=novaadmin,ou=people,dc=wikimedia,dc=org'
   ldap_user_id_attribute: 'uid'
   ldap_tenant_id_attribute: 'cn'
-  ldap_user_name_attribute: 'uid'
+  ldap_user_name_attribute: 'sn'
   ldap_tenant_name_attribute: 'cn'
   ldap_proxyagent : 'cn=proxyagent,ou=profile,dc=wikimedia,dc=org'
   auth_protocol: 'http'
diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 123b9b8..bff64e6 100644
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -313,7 +313,7 @@
   ldap_user_dn: 'uid=novaadmin,ou=people,dc=wikimedia,dc=org'
   ldap_user_id_attribute: 'uid'
   ldap_tenant_id_attribute: 'cn'
-  ldap_user_name_attribute: 'uid'
+  ldap_user_name_attribute: 'sn'
   ldap_tenant_name_attribute: 'cn'
   ldap_proxyagent : 'cn=proxyagent,ou=profile,dc=wikimedia,dc=org'
   auth_protocol: 'http'

-- 
To view, visit https://gerrit.wikimedia.org/r/268949
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7e4d5d84998735957890cece9c73f1d3ac2d3acc
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to