service token does not work if user auth is token based

Bug #2006631 reported by Kiran Pawar
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
New
Undecided
David Wilde

Bug Description

To deal with long running operation service token is used alongwith user token. In this case user token is generated from password auth type and then service token wrapped alongwith user token is used for authentication, which allows to run operation upto 48 hours fine.
However if user token is used as token auth type and then service token wrapped alongwith user token, operation fails immediately when user token is expired. That service token is of no use in this case, this is bug and needs to fixed.

steps to reproduce -
https://paste.opendev.org/show/bAoAjwVMVCBxsNt6Z9kB/

Failure logs -
https://paste.opendev.org/show/bhAZ33JYpkhrbBLZzCdK/

Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

This looks like a keystone middleware issue to me ... you should check with the Keystone team about how this feature is supposed to work and whether it's a bug or a configuration problem.

Revision history for this message
kiran pawar (kpdev) wrote :

@d34dh0r53,
can you comment on this ?

David Wilde (dave-wilde)
Changed in keystone:
assignee: nobody → David Wilde (dave-wilde)
no longer affects: cinder
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.