Hello all,

I investigated the case.
My issue arises from group_members_are_ids ignored for user_enabled_emulation_use_group_config.
I reported a bug in keystone: https://bugs.launchpad.net/keystone/+bug/1839133
and will submit a patch.
Hopefully it helps someone else as well.

Kind regards,
Radek

sob., 3 sie 2019 o 20:56 Radosław Piliszek <radoslaw.piliszek@gmail.com> napisał(a):
Hello all,

I have an issue using user_enabled_emulation with my LDAP solution.

I set:
user_tree_dn = ou=Users,o=UCO
user_objectclass = inetOrgPerson
user_id_attribute = uid
user_name_attribute = uid
user_enabled_emulation = true
user_enabled_emulation_dn = cn=Users,ou=Groups,o=UCO
user_enabled_emulation_use_group_config = true
group_tree_dn = ou=Groups,o=UCO
group_objectclass = posixGroup
group_id_attribute = cn
group_name_attribute = cn
group_member_attribute = memberUid
group_members_are_ids = true

Keystone properly lists members of the Users group but they all remain disabled.
Did I misinterpret something?

Kind regards,
Radek