After reviewing these tests, I think I can say with confidence that they are not testing code that we support any longer. External plugins work fine, including Kerberos. These tests were Kerberos specific, but we no longer support a specific Kerberos plugin, only the External one. They were testing that the remote domain was or was not set, but that is really logic from the mod_auth_gssapi configuration of the apache server, and not needed for now. We can revisit if we start seeing problems with LDAP+Kerberos, but we would probably write new, better tests if that were ever to happen.
** Changed in: keystone Importance: Medium => Wishlist ** Changed in: keystone Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1793756 Title: remote user tests disabled Status in OpenStack Identity (keystone): Won't Fix Bug description: in keystone/tests/unit/test_v3_auth.py there are two tests that have been commented out because they are unrunnable: test_remote_user_with_realm and test_remote_user_with_default_domain These support the External auth mechanism which should be avaialable to people with the LDAP identity backend enabled . To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1793756/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp