keystone/releasenotes/notes/bug-1760205-87dedd6d8812db3f.yaml
wangxiyuan 3b701cdf70 Invalidate the shadow user cache when deleting a user
When deleting a user, the cache for the related shadow user should
be invalidated as well. Otherwise the federation authentication
will not work well and will raise 404 UserNotFound error.

This patch fixes the bug and adds a new function for shadow backend
to get the shadow user information.

Change-Id: I3882f0dc6e8f8f618bb89ebd699736bc4b352261
Closes-bug: #1760205
2018-04-25 11:39:29 +08:00

15 lines
575 B
YAML

---
fixes:
- |
[`bug 1760205 <https://bugs.launchpad.net/keystone/+bug/1760205>`_]
When deleting a shadow user, the related cache info is not invalidated so
that Keystone will raise 404 UserNotFound error when authenticating with
the previous federation info. This bug has been fixed now.
other:
- |
A new interface called `list_federated_users_info` is added to shadow
backend. It's used to get the shadow user information internally. If you
are maintaining any out-tree shadow backends, please implement this
function for them as well.