Bug 1041904

Summary: [RFE][keystone]: Extend filtering into the identity backends wherever possible to improve scaling and performance
Product: Red Hat OpenStack Reporter: RHOS Integration <rhos-integ>
Component: openstack-keystoneAssignee: RHOS Maint <rhos-maint>
Status: CLOSED ERRATA QA Contact: Ami Jeain <ajeain>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aberezin, ayoung, breeler, markmc, nkinder, ukalifon, yeylon
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: 5.0 (RHEL 7)   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/keystone/+spec/filtering-backend-support
Whiteboard: upstream_milestone_icehouse-3 upstream_status_implemented upstream_definition_pending-approval
Fixed In Version: openstack-keystone-2014.1-4.el7ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-07-08 15:24:18 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description RHOS Integration 2013-12-12 19:59:42 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/filtering-backend-support.

Description:

Filtering is currently done at the controller level, which means that for larger collections, the entire set of entities must be retrieved from the backend before filtering can occur.  This leads to serious performance problems.

Filtering should be enabled in those backends that can use the underlying store (e.g. SQL, LDAP) to filter-at-source. 

Specification URL (additional information):

https://etherpad.openstack.org/filtering
Comment 9 errata-xmlrpc 2014-07-08 15:24:18 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0854.html