keystone/keystone/identity/shadow_backends
Adam Young cbcccb9eca Replace UUID with id_generator for Federated users
The LDAP code has long had a swappable backend to generate
the user IDs that map from LDAP to SQL.  THe Federated code
was supposed to use the same mechanism, but it ended up
generating a UUID for the userid instead.  This is a backwards
compatible change that converts the Federated UserIDs to a
sha256 hash of the same 3 pieces of data that LDAP now uses:
the domain_id, the unique ID from the Federated backend, and
the entity type (User).

This code is tested via
tox -e py35 -- keystone.tests.unit.test_shadow_users

Longer IDs show up in some of the Federation tests

closes-bug: 1641639

Change-Id: Ica21c54c1fcc9b44e4935718c8903237d0857120
2019-04-03 21:13:20 +00:00
..
__init__.py Shadow users - Shadow federated users 2016-02-29 21:05:54 -05:00
base.py Invalidate the shadow user cache when deleting a user 2018-04-25 11:39:29 +08:00
sql.py Replace UUID with id_generator for Federated users 2019-04-03 21:13:20 +00:00