We are jazzed to announce the release of: keystone 11.0.4: OpenStack Identity This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 11.0.4 ^^^^^^ Bug Fixes ********* * [bug 1704205 (https://bugs.launchpad.net/keystone/+bug/1704205)] All users and groups are required to have a name. Prior to this fix, Keystone was not properly enforcing this for LDAP users and groups. Keystone will now ignore users and groups that do not have a value for the LDAP attribute which Keystone has been configured to use for that entity's name. * [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)] Fixes a regression where deleting a domain with users in it caues a server error. This bugfix restores the previous behavior of deleting the users namespaced in the domain. This only applies when using the SQL identity backend. Other Notes *********** * [bug 1718747 (https://bugs.launchpad.net/keystone/+bug/1718747)] As part of solving a regression in the identity SQL backend that prevented domains containing users from being deleted, a notification callback was altered so that users would only be deleted if the identity backend is SQL. If you have a custom identity backend that is not read-only, deleting a domain in keystone will not delete the users in your backend unless your driver has an is_sql property that evaluates to true. Changes in keystone 11.0.3..11.0.4 ---------------------------------- ade177a Reduce duplication in federated auth APIs b6a0092 Delete SQL users before deleting domain 5c34cb4 Fix the s3tokens endpoint e1a94f3 Fix ec2tokens validation in v2 after regression in metadata_ref removal 16d8f0d Filter users and groups in ldap Diffstat (except docs and test files) ------------------------------------- keystone/contrib/ec2/controllers.py | 58 +++--- keystone/contrib/s3/core.py | 12 +- keystone/federation/controllers.py | 19 +- keystone/identity/backends/ldap/common.py | 65 +++++-- keystone/identity/core.py | 21 ++- keystone/notifications.py | 1 + keystone/resource/core.py | 3 + .../notes/bug-1704205-bc0570feeb3ec5c4.yaml | 9 + .../notes/bug-1718747-50d39fa87bdbb12b.yaml | 17 ++ 13 files changed, 445 insertions(+), 70 deletions(-)