Hi,
I noticed that https://review.opendev.org/c/openstack/keystone/+/860118 is also linked from your bugzilla link.
I wasn't aware of the work in https://review.opendev.org/c/openstack/keystone/+/821086
I'm currently trying to fix the ldap breakage in keystone.
during the last keystone reviewathons it became clear that it would be better to solve this stuff in the ldappool library itself.
regarding the overall project status I guess it's fair to say that ldap support ist pretty dormant right now.
This is my first dive into the keystone codebase, so I guess it's save to say that additional people interested in ldap would be more than welcome.
But I guess the core keystone team can say more about this.
Having said all this, I guess this explains the general status of ldap related patches in keystone.
HTH & kind regards Am Mittwoch, dem 19.07.2023 um 14:55 +0000 schrieb Albert Braden:
We are experiencing the LDAP failover issue described in [1]. Redhat’s solution is to not bother fixing the bug, and to tell customers to put the LDAP server behind a load-balancer. According to Redhat, that is not a good solution for FreeIPA, as explained in [2] and further elucidated in the blog post [3] that it references. I see that the community has a bug open for this [4] and the bug is being worked on here [5] but there has been no activity since 10/22.
What is the status of this bugfix? Does it just need someone to review and merge it, or is there more work to be done? How are other FreeIPA users working around this problem?
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2024602#c3 [2] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/htm... [3] http://ssimo.org/blog/id_019.html [4] https://bugs.launchpad.net/keystone/+bug/1953622 [5] https://review.opendev.org/c/openstack/keystone/+/821086