Nova requires the deprecated X_USER header in auth mode

Bug #926372 reported by Gabe Westmaas on 2012-02-03
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Mark Washenberger

Bug Description

When using NovaKeystoneContext middleware, nova requires the use of the X_USER header instead of the X_USER_ID header. When using only the X_USER_ID header, client sees:

401 Unauthorized

This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.

In nova logs:
2012-02-03 15:20:50,038 DEBUG nova [-] X_USER not found in request from (pid=25727) __call__ /usr/lib/python2.6/dist-packages/nova/api/

user id in context should be set to X_USER_ID first and if that isn't there (in the case of an older client) X_USER.

Fix proposed to branch: master

Changed in nova:
assignee: nobody → Mark Washenberger (markwash)
status: New → In Progress

Submitter: Jenkins
Branch: master

commit f0a11485894f56aba337f65af5f92bede12ef17f
Author: Mark Washenberger <email address hidden>
Date: Fri Feb 3 17:31:35 2012 -0500

    X_USER is deprecated in favor of X_USER_ID

    Addressed bug 926372

    Eventually, we should stop supporting X_USER because it is *supposed* to
    be the user's login name rather than their id. But this change preserves
    the old behavior for stability.

    For more info checkout keystone/middleware/ in the keystone

    Change-Id: Ie837e73f9a592a903af71a426e202f8b6a9ac581

Changed in nova:
status: In Progress → Fix Committed
Brian Waldon (bcwaldon) on 2012-02-03
Changed in nova:
milestone: none → essex-4
importance: Undecided → Medium
Thierry Carrez (ttx) on 2012-02-29
Changed in nova:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2012-04-05
Changed in nova:
milestone: essex-4 → 2012.1
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers