Websso link is contructed wrong in openstack_auth

Bug #1553422 reported by Andrey Grebennikov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mirantis OpenStack
Invalid
High
Andrey Grebennikov

Bug Description

Federation is set up in Keystone
Openstack_auth is responsible for constructing the URL in order to properly redirect user's browser to Horizon after successful authentication with IdP.
By default it uses "/auth/websso/" as the origin, while MOS requires it to be "/horizon/auth/websso/".
It happens because Horizon operates within webroot "/horizon/" and all the links should contain this prefix.

Revision history for this message
Andrey Grebennikov (agrebennikov) wrote :
tags: added: horizon keystone
Revision history for this message
Timur Sufiev (tsufiev-x) wrote :
Changed in mos:
importance: Undecided → High
assignee: nobody → Andrey Grebennikov (agrebennikov)
tags: added: area-horizon
removed: horizon
Changed in mos:
milestone: none → 9.0
status: New → Confirmed
Revision history for this message
Robert Duncan (rduncan-t) wrote :

I patched this is 8.0 with this:
https://review.openstack.org/#/c/173669/

works for me!

Revision history for this message
Andrey Grebennikov (agrebennikov) wrote :

MOS8.0 already should work properly, because it uses this:
url = utils.get_websso_url(request, auth_url, auth_type)

where utils.get_websso_url already uses WEBROOT var.

Changed in mos:
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.