openstack
/
keystone
Code Issues Proposed changes

Don't deprecate the LDAP property which is still needed 

`user_attribute_ignore` or `group_attribute_ignore` are both needed
by identity ldap backend to judge whether a specific attribute could
be returned for read user or group operations.

Closes-Bug: #1637135
Change-Id: If623e1e4d3c827d00f17203652f33b74ac138d62
This commit is contained in:
Dave Chen 2016-10-27 17:13:55 +08:00
parent b8435cc152
commit 339d6a6197
1 changed files with 4 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
keystone/conf/ldap.py
View File

@ -247,12 +247,9 @@ userAccountControl`.
user_attribute_ignore = cfg.ListOpt(
'user_attribute_ignore',
default=['default_project_id'],
deprecated_for_removal=True,
deprecated_reason=_DEPRECATED_LDAP_WRITE,
deprecated_since=versionutils.deprecated.MITAKA,
help=utils.fmt("""
List of user attributes to ignore on create and update. This is only used for
write operations.
List of user attributes to ignore on create and update, or whether a specific
user attribute should be filtered for list or show user.
"""))
user_default_project_id_attribute = cfg.StrOpt(
@ -394,12 +391,9 @@ The LDAP attribute mapped to group descriptions in keystone.
group_attribute_ignore = cfg.ListOpt(
'group_attribute_ignore',
default=[],
deprecated_for_removal=True,
deprecated_reason=_DEPRECATED_LDAP_WRITE,
deprecated_since=versionutils.deprecated.MITAKA,
help=utils.fmt("""
List of group attributes to ignore on create and update. This is only used for
write operations.
List of group attributes to ignore on create and update. or whether a specific
group attribute should be filtered for list or show group.
"""))
group_allow_create = cfg.BoolOpt(