| 2015-11-26 18:31:02 |
Edward Hope-Morley |
bug |
|
|
added bug |
| 2015-11-26 18:32:29 |
Edward Hope-Morley |
description |
We are not configuring nss as part of the rgw installation when relating with keystone. The consequence is that the RGW is unable to retrieve a list of revoked tokens from keystone and thus cannot remove revoked tokens from its cache. Keystone always encodes and signs the response from .../v2.0/tokens/revoked so we need to configure the 'nss db path'.
More info at http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-tokens-revoked
Also at http://docs.ceph.com/docs/v0.80/radosgw/config/#integrating-with-openstack-keystone |
We are not configuring nss as part of the rgw installation when relating with keystone. The consequence is that the RGW is unable to retrieve a list of revoked tokens from keystone and thus cannot remove revoked tokens from its cache. Keystone always encodes and signs the response from .../v2.0/tokens/revoked so we need to configure the 'nss db path'.
More info at http://docs.openstack.org/developer/keystone/api_curl_examples.html#get-tokens-revoked
Also at http://docs.ceph.com/docs/v0.80/radosgw/config/#integrating-with-openstack-keystone
This results in a load of the following in /var/log/ceph/radosgw.log
...
2015-11-26 17:47:39.614313 7f631f7fe700 0 ERROR: signer 0 status = SigningCertNotFound
2015-11-26 17:47:39.614685 7f631f7fe700 0 ERROR: problem decoding
2015-11-26 17:47:39.615043 7f631f7fe700 0 ceph_decode_cms returned -22
2015-11-26 17:47:39.615577 7f631f7fe700 0 ERROR: keystone revocation processing returned error r=-22
... |
|
| 2015-11-28 17:52:18 |
Nobuto Murata |
bug |
|
|
added subscriber Nobuto Murata |
| 2015-11-30 10:16:51 |
James Page |
ceph-radosgw (Juju Charms Collection): status |
New |
Triaged |
|
| 2015-11-30 11:52:03 |
Edward Hope-Morley |
bug task added |
|
keystone (Juju Charms Collection) |
|
| 2015-11-30 11:52:09 |
Edward Hope-Morley |
keystone (Juju Charms Collection): milestone |
|
16.01 |
|
| 2015-11-30 11:52:12 |
Edward Hope-Morley |
keystone (Juju Charms Collection): importance |
Undecided |
High |
|
| 2015-11-30 11:52:15 |
Edward Hope-Morley |
keystone (Juju Charms Collection): status |
New |
Triaged |
|
| 2015-11-30 12:47:29 |
Edward Hope-Morley |
ceph-radosgw (Juju Charms Collection): assignee |
|
Edward Hope-Morley (hopem) |
|
| 2015-11-30 12:47:32 |
Edward Hope-Morley |
keystone (Juju Charms Collection): assignee |
|
Edward Hope-Morley (hopem) |
|
| 2015-11-30 12:47:34 |
Edward Hope-Morley |
keystone (Juju Charms Collection): status |
Triaged |
In Progress |
|
| 2015-11-30 12:47:36 |
Edward Hope-Morley |
ceph-radosgw (Juju Charms Collection): status |
Triaged |
In Progress |
|
| 2015-11-30 17:20:34 |
Edward Hope-Morley |
branch linked |
|
lp:~hopem/charms/trusty/keystone/lp1520339 |
|
| 2015-11-30 17:20:46 |
Edward Hope-Morley |
branch linked |
|
lp:~hopem/charms/trusty/ceph-radosgw/lp1520339 |
|
| 2015-12-01 04:44:38 |
Janghoon-Paul Sim |
bug |
|
|
added subscriber Janghoon-Paul Sim |
| 2016-01-11 11:53:57 |
Edward Hope-Morley |
ceph-radosgw (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
| 2016-01-11 11:54:00 |
Edward Hope-Morley |
keystone (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
| 2016-01-13 15:02:40 |
Mick Gregg |
tags |
openstack sts |
canonical-bootstack openstack sts |
|
| 2016-01-28 14:06:03 |
James Page |
ceph-radosgw (Juju Charms Collection): status |
Fix Committed |
Fix Released |
|
| 2016-01-28 14:06:04 |
James Page |
keystone (Juju Charms Collection): status |
Fix Committed |
Fix Released |
|
