We are happy to announce the release of: keystone 10.0.1: OpenStack Identity This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 10.0.1 ^^^^^^ New Features * [bug 1638603 (https://bugs.launchpad.net/keystone/+bug/1638603)] Support nested groups in Active Directory. A new boolean option "[ldap] group_ad_nesting" has been added, it defaults to "False". Enable the option is using Active Directory with nested groups. This option will impact the "list_users_in_group", "list_groups_for_user", and "check_user_in_group" operations. Changes in keystone 10.0.0..10.0.1 ---------------------------------- 0f6e92c Catch potential SyntaxError in federation mapping 074f9bf Fix the usage of tempest.client.Manager class e217fe3 Add structure for Devstack plugin 8467908 Imported Translations from Zanata 16a7b07 Make bootstrap idempotent when it needs to be 0d9a51e Expose idempotency issue with bootstrap 08ff2a4 Support nested groups in Active Directory 3609439 Create default role as a part of bootstrap 18d6eb7 Remove password history validation from admin password resets Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 44 ++++++++ keystone/assignment/core.py | 36 +++---- keystone/cmd/cli.py | 50 ++++++--- keystone/conf/ldap.py | 9 ++ keystone/federation/utils.py | 2 +- keystone/identity/backends/ldap/core.py | 41 ++++++-- keystone/identity/backends/sql.py | 2 - keystone/identity/backends/sql_model.py | 4 + keystone/locale/ko_KR/LC_MESSAGES/keystone.po | 17 ++- keystone_tempest_plugin/clients.py | 4 +- releasenotes/notes/bug-1638603-354ee4167e6e.yaml | 9 ++ tox.ini | 2 +- 18 files changed, 428 insertions(+), 107 deletions(-)