Public bug reported: using the LDAP driver with user_filter, a GET /v3/users?name=<name> returns users that do not match the filter.
e.g.: user_filter = (|(uid=arc1_admin)(uid=arc1_stgmgr)) # openstack user list +----------------------------------------------------------------+-------------+ | ID | Name | +----------------------------------------------------------------+-------------+ | 91476076d6686143dff68d08e87358a29daf0725c549008f9c0852d2c7ab8e | arc1_admin | | 42 | | | 8c1beab95fc4c2b009383827f1ea1ec2880fa6eb5bbe42aebd43aab21ad685 | arc1_stgmgr | | b2 | | +----------------------------------------------------------------+-------------+ # openstack user show arc1_dep +-----------+------------------------------------------------------------------+ | Field | Value | +-----------+------------------------------------------------------------------+ | domain_id | default | | id | 631bbab78e33e554bc6c7fd53071c6e046fd37680b1b154261bd6183b123e8b0 | | name | arc1_dep | +-----------+------------------------------------------------------------------+ ** Affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1577804 Title: /v3/users?name=<name> bypasses user_filter for LDAP Status in OpenStack Identity (keystone): New Bug description: using the LDAP driver with user_filter, a GET /v3/users?name=<name> returns users that do not match the filter. e.g.: user_filter = (|(uid=arc1_admin)(uid=arc1_stgmgr)) # openstack user list +----------------------------------------------------------------+-------------+ | ID | Name | +----------------------------------------------------------------+-------------+ | 91476076d6686143dff68d08e87358a29daf0725c549008f9c0852d2c7ab8e | arc1_admin | | 42 | | | 8c1beab95fc4c2b009383827f1ea1ec2880fa6eb5bbe42aebd43aab21ad685 | arc1_stgmgr | | b2 | | +----------------------------------------------------------------+-------------+ # openstack user show arc1_dep +-----------+------------------------------------------------------------------+ | Field | Value | +-----------+------------------------------------------------------------------+ | domain_id | default | | id | 631bbab78e33e554bc6c7fd53071c6e046fd37680b1b154261bd6183b123e8b0 | | name | arc1_dep | +-----------+------------------------------------------------------------------+ To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1577804/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp