Error: No such file or directory: '/etc/keystone/sso_callback_template.html'

[Sohan Sangwan]

The following error occurs when a user tries to login using Horizon Single Sign-On feature after the Idp authenticates the user and sends SAML assertion successfully :

{"error": {"message": "An unexpected error prevented the server from fulfilling your request: [Errno 2] No such file or directory: '/etc/keystone/sso_callback_template.html' (Disable debug mode to suppress these details.)", "code": 500, "title": "Internal Server Error"}}

I reproduced the above error while trying to configure Keystone for Federation taking TestShib.org as Idp and Keystone as SP.

I am using Security Assertion Markup Language(SAML) for configuring Keystone for federation.

The above error got fixed when I copied the sso_callback_template.html file to /etc/keystone directory.

cp /opt/stack/keystone/etc/sso_callback_template.html /etc/keystone/

I would recommend to add one more point(5) under Keystone changes as follows:

5. Copy the sso_callback_template.html file to /etc/keystone/ directory:
cp /opt/stack/keystone/etc/sso_callback_template.html /etc/keystone/

in the following documentation(Setup Web Single Sign-On (SSO):

http://docs.openstack.org/developer/keystone/federation/websso.html

[sandeep nandal (nandal)]

Hi sohan,

could you provide version info and the os platform, which you are using?
Because in normal installation of (openstack-mitaka) in CentOS and RHEL7.2, the installation setup does create sso_callback_template.html file in /etc/keystone directory.

[Sohan Sangwan (sohaninfo)]

Hi Sandeep,

Thank you for looking into it.

I am using Devstack (stable/liberty) in Ubuntu 14.04 virtual machine.

Not sure if it is related to Devstack installation only.

[sandeep nandal (nandal)]

Hi Sohan,

I have checked the issue, This bug is not related with the keystone module in openstack liberty.
On Liberty Keystone source code we can see the above file in /keystone/etc/sso_callback_template.html path.
And this issue is also not occurring when we use RPM packages, because in RPMs package of openstack-keystone also we find the file in /etc directory when we extract the RPM.

The issue is with the DEB package which is used by devstack, which we can see by extracting the openstack-keystone.deb package on ubuntu machine, and can see there is no file sso_callback_template.html in /etc directory of debian package.
This bug is related with debian package creation of keystone by ubuntu
Reference: https://launchpad.net/ubuntu/+source/keystone/

Therefore, I'm marking this as invalid here, because keystone has nothing to do to fix this issue,
and I'm filing a bug on https://launchpad.net/ubuntu/+source/keystone/ for the same, so that issue can be fixed.

[sandeep nandal (nandal)]

Reference of bug reported to ubuntu keystone package creation project :-
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/1578102