OpenStack Identity (keystone)

  1. Bug #1589993
  2. Comment #13

Comment 13 for bug 1589993

Revision history for this message
György Szombathelyi (gyurco) wrote : Re: Murano cannot deploy with federated user

Still the same with keystone 10.0.0 final:

2016-10-25 10:00:55.205 11842 DEBUG keystone.middleware.auth [req-12241e76-3bc1-43de-8343-60c637e4a1ec 2168f89338624e2abe8f2aa30b415c90 aab8cd701f76426a9316e8715e2f6e7c - Federated default] RBAC: auth_context: {'is_delegated_auth': False, 'access_token_id': None, 'user_id': '2168f89338624e2abe8f2aa30b415c90', 'roles': [u'_member_', u'_member_'], 'user_domain_id': 'Federated', 'consumer_id': None, 'trustee_id': None, 'is_domain': False, 'trustor_id': None, 'token': <KeystoneToken (audit_id=lNaiJ_o3SOGBJ2JKL3gfTQ, audit_chain_id=lNaiJ_o3SOGBJ2JKL3gfTQ) at 0x7f7fc076d990>, 'group_ids': [], 'project_id': u'aab8cd701f76426a9316e8715e2f6e7c', 'trust_id': None, 'project_domain_id': u'default'} fill_context /usr/lib/python2.7/dist-packages/keystone/middleware/auth.py:243

The _member_ role is duplicated, so there'll be an error storing the trust:

2016-10-25 09:53:51.110 11838 WARNING keystone.common.wsgi [req-e57d996d-b5a7-428b-86b3-72e2d4c13250 2168f89338624e2abe8f2aa30b415c90 aab8cd701f76426a9316e8715e2f6e7c - Federated default] Conflict occurred attempting to store trust - Duplicate Entry