[Bug 1798184] Re: [SRU] PY3: python3-ldap does not allow bytes for DN/RDN/field names

Corey Bryant corey.bryant at canonical.com
Wed Mar 13 14:49:52 UTC 2019

** Summary changed:

- PY3: python3-ldap does not allow bytes for DN/RDN/field names
+ [SRU] PY3: python3-ldap does not allow bytes for DN/RDN/field names

** Description changed:

+ [Impact]
+ Keystone LDAP backend doesn't work for PY3.
  Under Python 2, python-ldap uses bytes by default. Under Python 3 this
  is removed and bytes aren't allowed for DN/RDN/field names.
  More details are here: http://www.python-ldap.org/en/latest/bytes_mode.html#bytes-mode
  and here: https://github.com/python-ldap/python-ldap/blob/python-ldap-3.1.0/Lib/ldap/ldapobject.py#L111
  == initial traceback ==
  Here's the initial traceback from the failure:
  The last bit of the error is:
-   File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 314, in _ldap_call
-     result = func(*args,**kwargs)
+   File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 314, in _ldap_call
+     result = func(*args,**kwargs)
  TypeError: simple_bind() argument 1 must be str or None, not bytes
  A closer look at func shows:
  func=<built-in method simple_bind of LDAP object at 0x7f9d0177b760>
  args=(b'cn=admin,dc=test,dc=com', b'crapper', None, None)
  == keystone ldap backend use of python-ldap ==
  In simple_bind_s() of keystone's ldap backend, who and cred are encoded
  as byte strings:
  but that appears to no longer be valid use of python-ldap for py3.
+ [Test Case]
+ Run charm-keystone-ldap functional tests for OpenStack Rocky or above.
+ [Regression Potential]
+ The only regression potential would be for PY2 code paths. PY3 code paths never worked for keystone's LDAP backend. The approach to the patch have purposefully minimized amount of code required and therefore regression potential for PY2. Note that Rocky for Ubuntu supports PY2 but as of Stein Ubuntu has dropped PY2 support.

You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to python-ldappool in Ubuntu.

  [SRU] PY3: python3-ldap does not allow bytes for DN/RDN/field names

To manage notifications about this bug go to:

More information about the Ubuntu-server-bugs mailing list