Upgrading from folsom to grizzly results in all tenants/users being disabled
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
High
|
Dolph Mathews | ||
Grizzly |
Fix Released
|
High
|
Dolph Mathews | ||
Ubuntu Cloud Archive |
Fix Released
|
Undecided
|
Unassigned | ||
keystone (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Hi there,
I tested a Folsom to Grizzly upgrade using stock packages on Ubuntu 12.04 and noticed that upon completion of the upgrade that there was a new 'enabled' column in `user`/ `project` tables and that all records within these tables had enabled set to 0. This resulted in authentication failure on users which were working prior to the upgrade. Once I ran the following, users could authenticate again:
# mysql keystone -e "update user set enabled=1"
# mysql keystone -e "update project set enabled=1"
For anyone else reading this, I knew all my users/tenants were enabled so didn't have to worry about the above statements, however in some environments there are likely to be disabled users/tenants which you'd need to take note of. You can determine this by looking at the text in the `extra` column within these two tables.
-Matt
Related branches
CVE References
Changed in keystone: | |
assignee: | nobody → Dolph Mathews (dolph) |
status: | New → In Progress |
Changed in keystone: | |
importance: | Undecided → High |
tags: | added: grizzly-backport-potential |
tags: | removed: grizzly-backport-potential |
tags: |
added: verification-done removed: verification-needed |
tags: |
added: verification-needed removed: verification-done |
Changed in keystone: | |
milestone: | none → havana-1 |
status: | Fix Committed → Fix Released |
Changed in cloud-archive: | |
status: | New → Fix Released |
Changed in keystone: | |
milestone: | havana-1 → 2013.2 |
Reviewed: https:/ /review. openstack. org/26627 github. com/openstack/ keystone/ commit/ 61629c30ae4bc53 26bcf6cc6ffeb51 6473130097
Committed: http://
Submitter: Jenkins
Branch: master
commit 61629c30ae4bc53 26bcf6cc6ffeb51 6473130097
Author: Dolph Mathews <email address hidden>
Date: Wed Apr 10 10:04:16 2013 -0500
Use is_enabled() in folsom->grizzly upgrade (bug 1167421)
Change-Id: Iddc10167c94dea cec07cab7ec9316 849263fb462