[openstack-dev] Keystone user creation question

Naveen Joy (najoy) najoy at cisco.com
Tue Aug 14 23:55:23 UTC 2012


It's valid for the same username to exist across multiple tenants and should be only unique for a  tenant. Keystone today is enforcing uniqueness for a name  and prevents creation of the same user across tenants. Is there a plan to use (tenantID, name) as a composite key instead of just the name?.

Conflict occurred attempting to store user. (IntegrityError) (1062, "Duplicate entry 'admin' for key 'name'") 'INSERT INTO user (id, name, extra) VALUES (%s, %s, %s)' ('697addf1c62a4eaea33d6c99076269d6', 'admin', '{"password": "$6$rounds=40000$SGj4.DyRasD5jy7l$uZNGjWvUkgJkqrGb4B/4uXga.FjFy7VMCkHKcWHJkXVkHUgtF.D1SDz9RwO3aazvGhyGUQK/isK3jwNprSpVD.", "enabled": true, "email": null, "tenantId": "0f8423b5c8a74ffc91c0ccf1c7015aa3"}') (HTTP 409)

desc user;
+-------+-------------+------+-----+---------+-------+
| Field | Type        | Null | Key | Default | Extra |
+-------+-------------+------+-----+---------+-------+
| id    | varchar(64) | NO   | PRI | NULL    |       |
| name  | varchar(64) | NO   | UNI | NULL    |       |
| extra | text        | YES  |     | NULL    |       |
+-------+-------------+------+-----+---------+-------+
3 rows in set (0.00 sec)


Cheers,
Naveen

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20120814/ca220096/attachment.html>


More information about the OpenStack-dev mailing list