Ubuntu SRU Details:

[Impact]
When using the keystone LDAP backend, changing user_id_attribute breaks group 
mapping. This is because the _dn_to_id() method only calculated the uid to be 
the first RDN of the DN. _dn_to_id() is updated in the fix to also deal with 
the case where the uid is set to a different attribute.

[Test Case]
See details in comment #5: 
https://bugs.launchpad.net/keystone/+bug/1782922/comments/5

[Regression Potential]
The patch takes a minimal approach to the fix and includes unit tests to help 
ensure the patched code doesn't regress. The patches have landed in all 
upstream releases back to stable/queens which helps get even more exposure with 
upstream reviews, gate testing and real deployments.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1782922

Title:
  LDAP: changing user_id_attribute bricks group mapping

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1782922/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to