failed to create user from domain scoped token

[Matthias Runge]

current tests are reporting
.Failed to create user from domain scoped token.
2015-12-18 10:15:46.894 | .Failed to create user from domain scoped token.
2015-12-18 10:15:46.919 | ..Failed to create user from domain scoped token.
2015-12-18 10:15:46.925 | .Failed to create user from domain scoped token.
2015-12-18 10:15:46.942 | .Failed to create user from domain scoped token.
2015-12-18 10:15:46.997 | .Failed to create user from domain scoped token.

but still passing
E.g this one here:
http://logs.openstack.org/13/259013/3/check/gate-horizon-tox-py27dj18/dac7716/console.html

[Paul Karikh (pkarikh)]

Looks like it happens frist time in openstack_dashboard/test/api_tests/policy_rest_tests.py:AdminPolicyRestTestCase and in PolicyRestTestCase too. And looks like the exception is
`'Mock' object has no attribute '__getitem__'`
And it fails on this line: https://github.com/openstack/django_openstack_auth/blob/master/openstack_auth/policy.py#L205. My guess that it fails on `auth_user.Token(domain_auth_ref)`.

[Paul Karikh (pkarikh)]

Actually it fails on keystone_cms.is_asn1_token(self.id) here:
https://github.com/openstack/django_openstack_auth/blob/master/openstack_auth/user.py#L88-L89

auth_user.Token(domain_auth_ref) calls keystone_cms.is_asn1_token(self.id) and it fails.

[Itxaka Serrano (itxaka)]

Isnt the problem with this that a exception is being raised but nothing is done about it?

So instead of a log.error a log.debug should be in place as it does not seem to affect anything?

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/277320

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/277320
Committed: https://git.openstack.org/cgit/openstack/django_openstack_auth/commit/?id=0be06b415792935a7c9012298d3b68092bf2fb7c
Submitter: Jenkins
Branch: master

commit 0be06b415792935a7c9012298d3b68092bf2fb7c
Author: Itxaka <email address hidden>
Date: Mon Feb 8 09:43:57 2016 +0100

    Change log.error to log.warning

    Looks like the actual repercussion from this "error" is
    nothing at all, so the log should be changed to a warning
    as _domain_to_credentials returns even if an exception is
    raised.

    So when a function like this works even if an exception is
    raised, the log level should be a warning at best, as the rest
    of the code depending on this still seems to work no matter
    what is returned.

    Change-Id: I8ea690923010674351d45ef5122bb046ee5e46b5
    Closes-Bug: #1527575

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/django_openstack_auth 2.2.0 release.

[Paul Karikh (pkarikh)]

Checked with current master and looks like issue is fixed now. Issue was fiexed in DOA 2.2.0, as Doug said. Horizon installs in venv django_openstack_auth==2.2.0 now. So, I think, we can close it for Horizon as invalid.