keystone returns 500 on password change
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Invalid
|
Low
|
Vishakha Agarwal |
Bug Description
$ openstack user set --password-prompt demo
User Password:
Repeat User Password:
An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-175ea0bf-
$
Although there is an error, the password has been changed, though.
Traceback from keystone log:
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG keystone.
ed': True}) {{(pid=1804) _build_
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG keystone.
061b73c33112b05', 'roles': [u'admin'], 'user_domain_id': u'default', 'consumer_id': None, 'trustee_id': None, 'is_domain': False, 'is_admin_project': True, 'trustor_id': None, 'token': <KeystoneToken (audit_
at 0x7f7dc22b8990>, 'project_id': u'a42a75e7ca804
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG oslo_policy.policy [None req-175ea0bf-
icy.py:532}}
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG keystone.
d5b46d97acb72de
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: DEBUG keystone.
30f37144f2494fd
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: WARNING stevedore.named [None req-175ea0bf-
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
ror: (u'Unable to find %(name)r driver in %(namespace)r.', {'namespace': 'keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: ERROR keystone.
Sep 04 11:36:44 jh-devstack-02 <email address hidden>[1797]: [pid: 1804|app: 0|req: 4/7] 192.168.0.23 () {72 vars in 1467 bytes} [Mon Sep 4 11:36:44 2017] PATCH /identity/
ders in 196 bytes (2 switches on core 0)
Turns out that in contrast to the comments in keystone.conf, the [token]driver setting is not ignored when changing passwords. All other actions seem to be working fine, though.
[token]
provider = fernet
# DEPRECATED: Entry point for the token persistence backend driver in the
# `keystone.
# The `sql` option (default) depends on the options in your `[database]`
# section. If you're using the `fernet` `[token] provider`, this backend will
# not be utilized to persist tokens at all. (string value)
# This option is deprecated for removal since P.
# Its value may be silently ignored in the future.
#driver = sql
driver = blah
Originally noticed this when I still had an old "driver = memcache_pool" option in there after upgrade from Newton to Ocata, but the issue seems still to be present in master.
Changed in keystone: | |
assignee: | nobody → Vishakha Agarwal (vishakha.agarwal) |
Changed in keystone: | |
milestone: | none → queens-rc1 |
Changed in keystone: | |
status: | In Progress → Invalid |
I can recreate this:
http:// paste.openstack .org/show/ 620669/
Password for pwdtest user was updated in the database.