Re: [openstack-dev] [keystone] Liberty - problem with assignment LDAP backend - Groups

On 04/20/2016 09:10 PM, Dmitry Sutyagin wrote: Another correction - the issue is observed in Kilo, not Liberty, sorry for messing this up. (though this part of the code is identical in L) On Wed, Apr 20, 2016 at 5:50 PM, Dmitry Sutyagin >

Re: [openstack-dev] [keystone] Liberty - problem with assignment LDAP backend - Groups

Another correction - the issue is observed in Kilo, not Liberty, sorry for messing this up. (though this part of the code is identical in L) On Wed, Apr 20, 2016 at 5:50 PM, Dmitry Sutyagin wrote: > Correction: > > group_dns = [u'CN=GroupX,OU=Groups,OU=SomeOU,DC=zzz'] >

Re: [openstack-dev] [keystone] Liberty - problem with assignment LDAP backend - Groups

Correction: group_dns = [u'CN=GroupX,OU=Groups,OU=SomeOU,DC=zzz'] ra.user_dn.upper() = 'CN=GROUPX,OU=GROUPS,OU=SOMEOU,DC=ZZZ' So this could work if only: - string in group_dns was str, not unicode - text was uppercase Now the question is - should it be so? On Wed, Apr 20, 2016 at 5:41 PM,

[openstack-dev] [keystone] Liberty - problem with assignment LDAP backend - Groups

Hi everybody, I am observing the following issue: LDAP backend is enabled for identity and assignment, domain specific configs disabled. LDAP section configured - users, groups, projects and roles are mapped. I am able to use identity v3 api to list users, groups, to verify that a user is in a