keystone/releasenotes/notes/bug-1801873-0eb9a5ec3e801190.yaml
Colleen Murphy 1b16725d06 Delete shadow users when domain is deleted
Without this change, when an admin tries to delete an LDAP-backed
domain, it fails due to the foreign key relationship in the users table.
Previously, we were assuming that LDAP users existed solely in the LDAP
directory, but this is not true with shadow users. This patch fixes the
logic to delete the shadow users upon domain deletion.

Change-Id: I12a08001e3aa08e4db9438cae425ad1a0a8070f7
Closes-bug: #1801873
2019-03-25 20:56:55 +01:00

7 lines
224 B
YAML

---
fixes:
- |
[`bug 1801873 <https://bugs.launchpad.net/keystone/+bug/1801873>`_]
This fixes an issue where an LDAP-backed domain could not be deleted due to
the existence of shadow users in the SQL database.