OpenStack Identity (keystone)

  1. Bug #1434034
  2. Comment #5

Comment 5 for bug 1434034

Revision history for this message
Yukihiro KAWADA (warp-kawada) wrote : Re: Even if the user is disabled, can use the last token is validated

I'm using juno, uuid, sql, v2 and v3.
But these things would not matter.

Please try like this.
1. get foo's token (a) using keystone api.
2. user foo is disabled. (direct operation to mysql : keystone.user.enabled=0)
3. get new token using keystone api. then can't get new token. this is ok.
4. but foo CAN nova list api by token(a)

This issue is because token/provider.py does not check the status of the user or tenant.