openstack client role doesn't treat case insensitive users correctly starting v7.3.0
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| python-openstackclient |
New
|
Undecided
|
Unassigned | ||
Bug Description
Historically Openstack treated some types of users, e.g. LDAP users as case-insensitive.
Starting release 2025.1 openstack client stopped doing so.
e.g. I have a LDAP user M012345.
Before 2025.1 it was possible to use the commands below and they both would work interchangeably:
`
openstack role add --user m012345 --user-domain somedomain --domain somedomain somegroup
openstack role add --user M012345 --user-domain somedomain --domain somedomain somegroup
`
but starting 2025.1 when openstack switched for that command from keystone-client to openstacksdk, e.g. [1],
it doesn't work for m012345, but works for M012345.
here is the part of the logs with trace [2] of the command with smaller letter and --debug.
It can be seen that Keystone still returns the user M012345 even though m012345 was requested, but it's just this version of openstack client can't find the user.
[1]
https:/
[2]
GET call to identity for https://<keystone-
REQ: curl -g -i -X GET "https://<keystone-
https://<keystone-url>:443 "GET /v3/users?
RESP: [200] Connection: keep-alive Content-Length: 498 Content-
RESP BODY: {"users": [{"id": "39a0b83de97a94
GET call to identity for https://<keystone-
Traceback (most recent call last):
File "/var/lib/
resource = find_command(
File "/var/lib/
return self._find(
File "/var/lib/
return resource_type.find(
File "/var/lib/
raise exceptions.
openstack.