Open Stack

We are jazzed to announce the release of:

keystone 11.0.4: OpenStack Identity

This release is part of the ocata stable release series.

Download the package from:

    https://tarballs.openstack.org/keystone/

For more details, please see below.

11.0.4
^^^^^^


Bug Fixes
*********

* [bug 1704205 (https://bugs.launchpad.net/keystone/+bug/1704205)]
  All users and groups are required to have a name. Prior to this fix,
  Keystone was not properly enforcing this for LDAP users and groups.
  Keystone will now ignore users and groups that do not have a value
  for the LDAP attribute which Keystone has been configured to use for
  that entity's name.

* [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)]
  Fixes a regression where deleting a domain with users in it caues a
  server error. This bugfix restores the previous behavior of deleting
  the users namespaced in the domain. This only applies when using the
  SQL identity backend.


Other Notes
***********

* [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)]
  As part of solving a regression in the identity SQL backend that
  prevented domains containing users from being deleted, a
  notification callback was altered so that users would only be
  deleted if the identity backend is SQL. If you have a custom
  identity backend that is not read-only, deleting a domain in
  keystone will not delete the users in your backend unless your
  driver has an is_sql property that evaluates to true.

Changes in keystone 11.0.3..11.0.4
----------------------------------

ade177a Reduce duplication in federated auth APIs
b6a0092 Delete SQL users before deleting domain
5c34cb4 Fix the s3tokens endpoint
e1a94f3 Fix ec2tokens validation in v2 after regression in metadata_ref removal
16d8f0d Filter users and groups in ldap


Diffstat (except docs and test files)
-------------------------------------

keystone/contrib/ec2/controllers.py                |  58 +++---
keystone/contrib/s3/core.py                        |  12 +-
keystone/federation/controllers.py                 |  19 +-
keystone/identity/backends/ldap/common.py          |  65 +++++--
keystone/identity/core.py                          |  21 ++-
keystone/notifications.py                          |   1 +
keystone/resource/core.py                          |   3 +
.../notes/bug-1704205-bc0570feeb3ec5c4.yaml        |   9 +
.../notes/bug-1718747-50d39fa87bdbb12b.yaml        |  17 ++
13 files changed, 445 insertions(+), 70 deletions(-)