| 2015-12-18 22:01:34 |
Kris Lindgren |
bug |
|
|
added bug |
| 2015-12-19 01:13:40 |
Steve Martinelli |
tags |
|
kilo-backport-potential |
|
| 2016-01-05 22:00:19 |
Steve Martinelli |
description |
We recently upgraded from kilo.0 to kilo.2 in our dev environment and noticed that keystone tenant-list is always failing for the admin user.
Our config is as follows default domain is tied to read-only ldap (AD), a heat domain is created to use for trusts to handle the created heatstack users/passwords. Under kilo.0 everything was happy. UNder kilo0.2 we get the following error:
keystone tenant-list
The request you have made requires authentication. (HTTP 401) (Request-ID: req-d30289f0-778d-4577-8150-7ddd5438ad9c)
Looking at the differences between kilo.0 and kilo.2 it seems like: https://github.com/openstack/keystone/commit/9dfad21201251364c6d205e8e79813bfe78e6107 is the most likely culprit for this regression. However, I have not yet been able to test if reverting that change fixes the issue. |
We recently upgraded from kilo.0 to kilo.2 in our dev environment and noticed that keystone tenant-list is always failing for the admin user.
Our config is as follows default domain is tied to read-only ldap (AD), a heat domain is created to use for trusts to handle the created heatstack users/passwords. Under kilo.0 everything was happy. Under kilo0.2 we get the following error:
keystone tenant-list
The request you have made requires authentication. (HTTP 401) (Request-ID: req-d30289f0-778d-4577-8150-7ddd5438ad9c)
The main error message is:
2015-12-16 17:07:36.493 20386 WARNING keystone.common.wsgi [-] Authorization failed. Non-default domain is not supported (Disable debug mode to suppress these details.) (Disable debug mode to suppress these details.) from 10.224.48.132
Looking at the differences between kilo.0 and kilo.2 it seems like: https://github.com/openstack/keystone/commit/9dfad21201251364c6d205e8e79813bfe78e6107 is the most likely culprit for this regression. However, I have not yet been able to test if reverting that change fixes the issue. |
|
| 2016-01-08 20:07:29 |
OpenStack Infra |
keystone: status |
New |
In Progress |
|
| 2016-01-08 20:07:29 |
OpenStack Infra |
keystone: assignee |
|
Morgan Fainberg (mdrnstm) |
|
| 2016-01-11 22:01:18 |
OpenStack Infra |
keystone: status |
In Progress |
Fix Released |
|
| 2016-01-12 18:28:32 |
Matt Riedemann |
nominated for series |
|
keystone/kilo |
|
| 2016-01-12 18:28:32 |
Matt Riedemann |
nominated for series |
|
keystone/liberty |
|
| 2016-01-12 19:10:51 |
Steve Martinelli |
bug task added |
|
keystone/liberty |
|
| 2016-01-12 19:10:56 |
Steve Martinelli |
bug task added |
|
keystone/kilo |
|
| 2016-01-12 19:11:08 |
Steve Martinelli |
tags |
kilo-backport-potential |
kilo-backport-potential liberty-backport-potential |
|
| 2016-01-12 19:11:24 |
Steve Martinelli |
keystone: importance |
Undecided |
Medium |
|
| 2016-01-12 19:11:27 |
Steve Martinelli |
keystone/kilo: importance |
Undecided |
Medium |
|
| 2016-01-12 19:11:30 |
Steve Martinelli |
keystone/liberty: importance |
Undecided |
Medium |
|
| 2016-01-12 19:12:32 |
Steve Martinelli |
keystone/kilo: status |
New |
In Progress |
|
| 2016-01-12 19:12:34 |
Steve Martinelli |
keystone/liberty: status |
New |
In Progress |
|
| 2016-01-29 16:59:24 |
OpenStack Infra |
keystone/liberty: assignee |
|
Brant Knudson (blk-u) |
|
| 2016-01-29 17:07:45 |
Brant Knudson |
keystone/liberty: assignee |
Brant Knudson (blk-u) |
Morgan Fainberg (mdrnstm) |
|
| 2016-01-29 17:07:54 |
Brant Knudson |
keystone/kilo: assignee |
|
Morgan Fainberg (mdrnstm) |
|
| 2016-01-31 23:15:35 |
OpenStack Infra |
keystone/liberty: status |
In Progress |
Fix Committed |
|
| 2016-04-13 05:29:28 |
Morgan Fainberg |
keystone/kilo: status |
In Progress |
Won't Fix |
|
| 2017-01-17 19:54:53 |
Morgan Fainberg |
keystone/liberty: status |
Fix Committed |
Fix Released |
|
