Browse code

Remove keystone configs for ldap read/write

Configuration options that toggle support for LDAP read/write
were deprecated and removed as of the Ocata release:

I13eada3d5c3a166223c3e3ce70b7054eaed1003a

This means we no longer need to clutter the domain-specific
configuration with these values since they are no longer used.

Change-Id: I23b5b994862f066c3d48ce524c396faecabf60f8

Lance Bragstad authored on 2017/08/12 04:37:07
Showing 1 changed files
... ...
@@ -626,12 +626,6 @@ function create_ldap_domain {
626 626
     iniset $KEYSTONE_LDAP_DOMAIN_FILE identity driver "ldap"
627 627
 
628 628
     # LDAP settings for Users domain
629
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap group_allow_delete "False"
630
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap group_allow_update "False"
631
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap group_allow_create "False"
632
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_allow_delete "False"
633
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_allow_update "False"
634
-    iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_allow_create "False"
635 629
     iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_tree_dn "ou=Users,$LDAP_BASE_DN"
636 630
     iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_objectclass "inetOrgPerson"
637 631
     iniset $KEYSTONE_LDAP_DOMAIN_FILE ldap user_name_attribute "cn"