Bug 1297798 - No LDAP user entry blacklist exists
Summary: No LDAP user entry blacklist exists
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: unspecified
Hardware: All
OS: All
unspecified
low
Target Milestone: ---
: ---
Assignee: Steve Kuznetsov
QA Contact: weiwei jiang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-01-12 13:45 UTC by Steve Kuznetsov
Modified: 2019-03-29 15:47 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-02-22 16:16:03 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Steve Kuznetsov 2016-01-12 13:45:57 UTC 
Description of problem:
There is no way to blacklist specific users from being synced if they are part of a group that is synced.

Version-Release number of selected component (if applicable):
OpenShift Origin 1.1
Comment 1 Steve Kuznetsov 2016-01-26 15:50:11 UTC 
In addition to adding support for blacklisting LDAP users, we are choosing to lower the severity of out-of-scope errors, logging them instead of failing immediately on them. That PR is here: https://github.com/openshift/origin/pull/6834
Comment 2 Steve Kuznetsov 2016-02-22 16:16:03 UTC 
User blacklists do not make sense as we require that LDAP is the system recording group membership. The specific issues that were being solved by using a user blacklist were solved by tolerating sync errors instead.
Note You need to log in before you can comment on or make changes to this bug.