Federaton extension fails due to missing pysaml2 library

Bug #1369986 reported by Marek Denis
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Invalid
Medium
Marek Denis

Bug Description

When enabling federation extension on my fresh devstack setup I noticed Keystone failed due to missing pysaml2 library.
It is probably due to the fact that pysaml2 is present in test-requirements.txt file and absent in requirements.txt.

I think the solution is to ad pysaml2 to the requirements.txt file.

Changed in keystone:
assignee: nobody → Marek Denis (marek-denis)
Revision history for this message
Marek Denis (marek-denis) wrote :

Tempoary workaround is to manually install the pysaml2 library:

# pip install pysaml2

Changed in keystone:
importance: Undecided → Medium
milestone: none → juno-rc1
Changed in keystone:
status: New → In Progress
Revision history for this message
Dolph Mathews (dolph) wrote :

devstack should install test reqs... something else must be wrong?

Changed in keystone:
status: In Progress → Incomplete
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on keystone (master)

Change abandoned by Marek Denis (<email address hidden>) on branch: master
Review: https://review.openstack.org/121878
Reason: Abandoning after Steve's explanation.

Revision history for this message
Morgan Fainberg (mdrnstm) wrote :

Based on comments on the review this is not an open bug.

Changed in keystone:
milestone: juno-rc1 → none
status: Incomplete → Invalid
Revision history for this message
Steve Martinelli (stevemar) wrote :

This came up again, as I just wanted to play with openid connect, and was forced to install pysaml2 if I had the federation extension enabled. This was discussed in IRC, and we determined that we could either a) attempt to import the pysaml2 modules where it's used, and catch import errors, like in https://review.openstack.org/#/c/145697/1 or b) force the user to install all federation related libraries. I think we are leaning toward b) as it's a more complete solution.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.