openstack client user password set is hardcoded to use public interface

Bug #1503459 reported by Haneef Ali
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-keystoneclient
Fix Released
Medium
Steve Martinelli

Bug Description

openstack client user password set is hardcoded to use public interface in keystoneclient client.

Due to this

openstack client --os-interface admin user password set and
openstack client --os-interface internal user password set doesn't work.

In production envirionment, public , internal, admin networks are different. We can't expect access to public network from every where

Haneef Ali (haneef)
Changed in python-keystoneclient:
assignee: nobody → Haneef Ali (haneef)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-keystoneclient (master)

Fix proposed to branch: master
Review: https://review.openstack.org/231749

Changed in python-keystoneclient:
status: New → In Progress
Revision history for this message
Guang Yee (guang-yee) wrote :

To reproduce this bug, purposely set your Keystone public endpoint to a bogus URL and run

openstack client --os-interface internal user password set

Changed in python-keystoneclient:
assignee: Haneef Ali (haneef) → Guang Yee (guang-yee)
Changed in python-keystoneclient:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-keystoneclient (stable/liberty)

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/251505

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-keystoneclient (stable/kilo)

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/251506

Changed in python-keystoneclient:
assignee: Guang Yee (guang-yee) → Steve Martinelli (stevemar)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-keystoneclient (master)

Reviewed: https://review.openstack.org/231749
Committed: https://git.openstack.org/cgit/openstack/python-keystoneclient/commit/?id=8380f3f2a843f40892bb3171bda4aaa0332f04f9
Submitter: Jenkins
Branch: master

commit 8380f3f2a843f40892bb3171bda4aaa0332f04f9
Author: Haneef Ali <email address hidden>
Date: Tue Oct 6 15:51:12 2015 -0700

    Remove hardcoded endpoint filter for update password

    User password update hardcoded the endpoint_filter to always use the public
    endpoint. This will break deployments where services behind the firewall have
    no access to the public endpoint. Endpoint selection should be allowed
    by the end user (i.e. openstack --os-interface internal user password set).

    Closes-Bug: 1503459

    Change-Id: Ib11d60cd8e81b99aedb27f1cbbf6b79218045cf0

Changed in python-keystoneclient:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-keystoneclient (stable/liberty)

Reviewed: https://review.openstack.org/251505
Committed: https://git.openstack.org/cgit/openstack/python-keystoneclient/commit/?id=6125040fca54e7fb6483114bbbe3e60f69ebb057
Submitter: Jenkins
Branch: stable/liberty

commit 6125040fca54e7fb6483114bbbe3e60f69ebb057
Author: Haneef Ali <email address hidden>
Date: Tue Oct 6 15:51:12 2015 -0700

    Remove hardcoded endpoint filter for update password

    User password update hardcoded the endpoint_filter to always use the public
    endpoint. This will break deployments where services behind the firewall have
    no access to the public endpoint. Endpoint selection should be allowed
    by the end user (i.e. openstack --os-interface internal user password set).

    Closes-Bug: 1503459

    Change-Id: Ib11d60cd8e81b99aedb27f1cbbf6b79218045cf0
    (cherry picked from commit d47da3b59c581dd3bb6bd4d75de819d0fd734fa5)

tags: added: in-stable-liberty
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/python-keystoneclient 2.0.0

This issue was fixed in openstack/python-keystoneclient 2.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to python-keystoneclient (stable/kilo)

Reviewed: https://review.openstack.org/251506
Committed: https://git.openstack.org/cgit/openstack/python-keystoneclient/commit/?id=e81856f4963d768fa286a9b2d2a40a6663810f6d
Submitter: Jenkins
Branch: stable/kilo

commit e81856f4963d768fa286a9b2d2a40a6663810f6d
Author: Haneef Ali <email address hidden>
Date: Tue Oct 6 15:51:12 2015 -0700

    Remove hardcoded endpoint filter for update password

    User password update hardcoded the endpoint_filter to always use the public
    endpoint. This will break deployments where services behind the firewall have
    no access to the public endpoint. Endpoint selection should be allowed
    by the end user (i.e. openstack --os-interface internal user password set).

    Closes-Bug: 1503459

    Change-Id: Ib11d60cd8e81b99aedb27f1cbbf6b79218045cf0
    (cherry picked from commit d47da3b59c581dd3bb6bd4d75de819d0fd734fa5)

tags: added: in-stable-kilo
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/python-keystoneclient 1.3.4

This issue was fixed in the openstack/python-keystoneclient 1.3.4 release.

Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/python-keystoneclient 1.7.3

This issue was fixed in the openstack/python-keystoneclient 1.7.3 release.

Changed in python-keystoneclient:
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-keystoneclient 1.3.4

This issue was fixed in the openstack/python-keystoneclient 1.3.4 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.