Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1138462

Summary: [RFE] Correction Script for users effected by BZ 1083380
Product: OpenShift Container Platform Reporter: Eric Rich <erich>
Component: NodeAssignee: Luke Meyer <lmeyer>
Status: CLOSED CURRENTRELEASE QA Contact: libra bugs <libra-bugs>
Severity: high Docs Contact:
Priority: high    
Version: 2.0.0CC: adellape, bleanhar, charles_sheridan, erich, jkeck, jokerman, jshepherd, libra-bugs, libra-onpremise-devel, lmeyer, mmccomas, xiama
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 1083380 Environment:
Last Closed: 2015-08-14 19:35:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1083380    
Bug Blocks:    

Comment 3 Luke Meyer 2014-09-05 13:26:37 UTC
I started to create this utility. It is extremely easy to just change the names of existing users. It is far harder to deal with merging two or more users that would end up with the same normalized name, and so I got bogged down.

Would it be useful to have just the first part of that (normalize existing usernames if possible)? I'm not sure how to prioritize the second part.

Comment 4 Luke Meyer 2014-09-05 13:28:24 UTC
I guess a simplified "merge" could just offer the choice to nuke all but one of the duplicate users. That's not as hard.

Comment 5 Eric Rich 2014-09-05 13:41:45 UTC
I think the second part is more the priority. I would approach this by giving he admin an option. Merge, or Simply Normalize and Delete (the old / bad user). 

If you tie into what oo-app-info shows for each user you can provide the admin what hey need to make this decision.

Comment 6 Luke Meyer 2014-09-05 15:49:40 UTC
That's the approach I figured on. It's just hard so it's stalled.

Even nuking a user is a bit of work to do correctly (need to remove them and any ssh keys from teams/domains, destroy their apps, etc). In fact I should probably introduce that as an admin library function. As a side benefit, implementing oo-admin-ctl-user --destroy would be trivial.

Merging users is kind of another order of magnitude in difficulty.