Validate token should always return service catalog

Bug #1010237 reported by Anthony Young
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Medium
Dolph Mathews

Bug Description

Right now, keystone's admin_api.validate_token call will return a service catalog for the token only if one specifies ?belongsTo= in the query param. Since the tenant_id of a token is always known for this call, we should always return the associated catalog.

This becomes important when, for example, nova wants to communicate with cinder/glance/quantum on behalf of a user.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/8313

Changed in keystone:
assignee: nobody → Anthony Young (sleepsonthefloor)
status: New → In Progress
Dolph Mathews (dolph)
Changed in keystone:
importance: Undecided → Medium
milestone: none → folsom-2
Changed in keystone:
assignee: Anthony Young (sleepsonthefloor) → Dolph Mathews (dolph)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/8313
Committed: http://github.com/openstack/keystone/commit/cc91786a5ba4d74480e5d5f582d6b17b2d382675
Submitter: Jenkins
Branch: master

commit cc91786a5ba4d74480e5d5f582d6b17b2d382675
Author: Anthony Young <email address hidden>
Date: Thu Jun 7 16:00:38 2012 -0700

    Pass serviceCatalog in auth_token middleware

     * This will allow for chained requests (novaclient -> nova -> cinder)
     * Fixes bug 1010237

    Change-Id: Iab126cb1f2fb01ca7da24fa9fe97ec81ee96e455

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: folsom-2 → 2012.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.