Domain admin user unable to navigate to domains panel

Bug #1706879 reported by Dmitriy Stremkovskiy
26
This bug affects 5 people
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
New
Undecided
Unassigned

Bug Description

“/identity/domains/” is not listed in Horizon UI and one cannot find any way to assign roles for domain users then.
However this location is working and accessible without a link.
Expected:
Link to “/identity/domains/” visible to domain admin user

Tags: keystone
Revision history for this message
Dmitriy Stremkovskiy (dstremkouski) wrote :

Attaching my local_settings.py

Revision history for this message
Ying Zuo (yingzuo) wrote :

The domains panel is not showing probably because of the absence of the domain_token. https://github.com/openstack/horizon/blob/master/openstack_dashboard/dashboards/identity/domains/panel.py#L37 It can be that the user doesn't have the right permission or something to do with the keystone policy.

tags: added: keystone
Revision history for this message
Marek Lyčka (mareklycka) wrote :

Hi,

we recently ran into this issue. After some digging we found out that the domain token was not being set because our session backend was set to signed cookies:

SESSION_ENGINE = 'django.contrib.sessions.backends.signed_cookies'

which is explicitly forbidden when OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT is set to true as per openstack_auth/backend.py.

Try changing your SESSION_ENGINE to one of the other options (https://docs.openstack.org/horizon/latest/admin/sessions.html) and see if it solves the issue.

Revision history for this message
Marek Lyčka (mareklycka) wrote :

I only just noticed you've posted your settings file and your settings are correct. Ignore my previous comment.

summary: - /identity/domains has no links
+ Domain admin user unable to navigate to domains panel
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.