heat-keystone-setup-domain authentication failure with keystonev3

Bug #1667795 reported by Sharmin Choksey
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
Medium
Sharmin Choksey

Bug Description

With Keystone configured for v3, heat-keystone-setup-domain fails with the following trace

2017-02-24 15:18:07.092 77 CRITICAL heat-keystone-setup-domain [-] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-82933fdc-9332-4c6f-ac37-474af6076884)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain Traceback (most recent call last):
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/bin/heat-keystone-setup-domain", line 171, in <module>
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain main()
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/bin/heat-keystone-setup-domain", line 121, in main
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain c.authenticate()
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain return wrapped(*args, **kwargs)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/keystoneclient/httpclient.py", line 578, in authenticate
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain resp = self.get_raw_token_from_identity_service(**kwargs)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/keystoneclient/v3/client.py", line 307, in get_raw_token_from_identity_service
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain return plugin.get_auth_ref(self.session)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v3/base.py", line 191, in get_auth_ref
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain authenticated=False, log=False, **rkwargs)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/keystoneclient/session.py", line 519, in post
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain return self.request(url, 'POST', **kwargs)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain return wrapped(*args, **kwargs)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain File "/usr/lib/python2.7/site-packages/keystoneclient/session.py", line 419, in request
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain raise exceptions.from_response(resp, method, url)
2017-02-24 15:18:07.092 77 ERROR heat-keystone-setup-domain Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-82933fdc-9332-4c6f-ac37-474af6076884)

Looks like client auth for v3 is missing user_domain_name and project_domain_name

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/438067

Changed in heat:
assignee: nobody → Sharmin Choksey (schoksey)
status: New → In Progress
Revision history for this message
Sharmin Choksey (schoksey) wrote :

Patch to address the issue - https://review.openstack.org/438067

Changed in heat:
assignee: Sharmin Choksey (schoksey) → Rico Lin (rico-lin)
Rico Lin (rico-lin)
Changed in heat:
importance: Undecided → Medium
Changed in heat:
assignee: Rico Lin (rico-lin) → Sharmin Choksey (schoksey)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/438067
Committed: https://git.openstack.org/cgit/openstack/heat/commit/?id=1745a9b950849fd5e8a2a13a5fab1c6be515b1d0
Submitter: Zuul
Branch: master

commit 1745a9b950849fd5e8a2a13a5fab1c6be515b1d0
Author: Sharmin Choksey <email address hidden>
Date: Fri Feb 24 12:29:24 2017 -0800

    Fixes heat-keystone-setup-domain authentication failures with v3

    With keystone v3 configured, attempting to create a heat domain
    and heat user fails with authentication errors

    Change-Id: Ieb1cb7a62b32e842d80020b4ab2870ef1394ba86
    Closes-Bug: #1667795

Changed in heat:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/heat 10.0.0.0b2

This issue was fixed in the openstack/heat 10.0.0.0b2 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.