Domain admin user unable to navigate to domains panel

Bug #1706879 reported by Dmitriy Stremkovskiy on 2017-07-27
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Undecided
Unassigned

Bug Description

“/identity/domains/” is not listed in Horizon UI and one cannot find any way to assign roles for domain users then.
However this location is working and accessible without a link.
Expected:
Link to “/identity/domains/” visible to domain admin user

Attaching my local_settings.py

Ying Zuo (yingzuo) wrote :

The domains panel is not showing probably because of the absence of the domain_token. https://github.com/openstack/horizon/blob/master/openstack_dashboard/dashboards/identity/domains/panel.py#L37 It can be that the user doesn't have the right permission or something to do with the keystone policy.

tags: added: keystone
Marek Lyčka (mareklycka) wrote :

Hi,

we recently ran into this issue. After some digging we found out that the domain token was not being set because our session backend was set to signed cookies:

SESSION_ENGINE = 'django.contrib.sessions.backends.signed_cookies'

which is explicitly forbidden when OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT is set to true as per openstack_auth/backend.py.

Try changing your SESSION_ENGINE to one of the other options (https://docs.openstack.org/horizon/latest/admin/sessions.html) and see if it solves the issue.

Marek Lyčka (mareklycka) wrote :

I only just noticed you've posted your settings file and your settings are correct. Ignore my previous comment.

summary: - /identity/domains has no links
+ Domain admin user unable to navigate to domains panel
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers