authenticating with kerberos (via openstack token issue) reports Error with "Success" followed by non-ascii chracters

[Kindjal]

This is openstack client 1.5.0 with the kerberos plugin commit 4b3ce88f9538cad669cd89e40e1aa79e0bbd0872 talking to an openstack Juno cluster.

$ openstack token issue
ERROR: requests_kerberos.kerberos_ generate_request_header(): authGSSClientStep() failed:
Traceback (most recent call last):
  File "/opt/boxen/pyenv/versions/ostack-2.7.10/lib/python2.7/site-packages/requests_kerberos/kerberos_.py", line 123, in generate_request_header
    _negotiate_value(response))
GSSError: (('A parameter was malformed Miscellaneous failure (see text)', 51183616), ('Success\x80', 0))
ERROR: openstack Attempted to authenticate with an unsupported method. (Disable debug mode to suppress these details.) (HTTP 401)

Notice that "\x80" after the word "Success" in the GSSError string. Repeated runs show different characters after the Success:

$ openstack token issue
ERROR: requests_kerberos.kerberos_ generate_request_header(): authGSSClientStep() failed:
Traceback (most recent call last):
  File "/opt/boxen/pyenv/versions/ostack-2.7.10/lib/python2.7/site-packages/requests_kerberos/kerberos_.py", line 123, in generate_request_header
    _negotiate_value(response))
GSSError: (('A parameter was malformed Miscellaneous failure (see text)', 51183616), ('Success`\xf4\x95\x9e\x8b\xf9\x07', 0))
ERROR: openstack Attempted to authenticate with an unsupported method. (Disable debug mode to suppress these details.) (HTTP 401)

$ openstack token issue
ERROR: requests_kerberos.kerberos_ generate_request_header(): authGSSClientStep() failed:
Traceback (most recent call last):
  File "/opt/boxen/pyenv/versions/ostack-2.7.10/lib/python2.7/site-packages/requests_kerberos/kerberos_.py", line 123, in generate_request_header
    _negotiate_value(response))
GSSError: (('A parameter was malformed Miscellaneous failure (see text)', 51183616), ('Success\xe0\xa1W\xb4[\xf8\x07', 0))
ERROR: openstack Attempted to authenticate with an unsupported method. (Disable debug mode to suppress these details.) (HTTP 401)

[Steve Martinelli (stevemar)]

moving this to keystoneauth

[Adam Young (ayoung)]

Not enough information to reproduce. Please provide full config etc, but looks to be a problem in the Kerberos setup for Apache, not in Keystoneauth

[Jamie Lennox (jamielennox)]

yea, please provide the openrc/env variables you are providing.

keystoneauth doesn't manipulate kerberos directly, it uses the requests-kerberos plugin so my first guess is that your environment is set up incorrectly - and there are a whole bunch of reasons this could be unfortunately.