Lance Bragstad

Related bugs

High

Confirmed

#968696 "admin"-ness not properly scoped

OpenStack Identity (keystone) 370

High

In Progress

#968696 "admin"-ness not properly scoped

Glance 370

High

Confirmed

#1641026 Keystone ldap tree_dn does not support Chinese

OpenStack Identity (keystone) 72

High

Fix Committed

#1691111 ec2tokens errors in v2 api after Ocata upgrade

OpenStack Identity (keystone) ocata 10

High

Fix Committed

#1718747 Unable to delete domain with users in it

OpenStack Identity (keystone) ocata 10

High

Confirmed

#1735250 Password column limit (128 char) in the Password table exceeded when using passwords exceeding 2000 characters （sqlalchemy<1.1.0）

OpenStack Identity (keystone) pike 12

High

Confirmed

#1735250 Password column limit (128 char) in the Password table exceeded when using passwords exceeding 2000 characters （sqlalchemy<1.1.0）

OpenStack Identity (keystone) queens 12

High

Fix Committed

#1749267 System role assignments exist after removing groups

OpenStack Identity (keystone) queens 6

High

Fix Committed

#1748970 Role assignment API doesn't prune system roles when querying role.id={role_id}

OpenStack Identity (keystone) queens 6

High

Fix Committed

#1749264 System role assignments exist after removing users

OpenStack Identity (keystone) queens 6

High

Fix Committed

#1749268 `keystone-manage bootstrap` doesn't handle system role assignments

OpenStack Identity (keystone) queens 6

High

In Progress

#1771581 Domain-level quota managements

OpenStack Public Cloud WG 6

High

In Progress

#1771586 Multi factor authentication support

OpenStack Public Cloud WG 18

High

Fix Committed

#1792047 keystone rbacenforcer not populating policy dict with view args

OpenStack Identity (keystone) rocky 6

High

Fix Committed

#1810393 shadow user cache is not cleaned when the related idp is deleted.

OpenStack Identity (keystone) rocky 6

High

Fix Committed

#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens

OpenStack Identity (keystone) stein 6

High

Fix Committed

#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens

OpenStack Identity (keystone) rocky 6

High

Fix Committed

#1843609 Domain-specific domain ID resolution breaks with system-scoped tokens

OpenStack Identity (keystone) queens 6

High

Triaged

#1853170 Need documentation on recommended operator workflow for deprecated policies

oslo.policy 8

High

Triaged

#1925684 [spec] X-Project-Id passthrough

keystonemiddleware 6

High

Triaged

#1925684 [spec] X-Project-Id passthrough

keystoneauth 6

High

New

#1926331 Allow cinderclient to handle system-scoped tokens

python-cinderclient 6

High

Triaged

#1926345 Horizon should use the authorization API in keystone to build authorization targets for users

OpenStack Dashboard (Horizon) 6

High

Triaged

#1926347 Add a configuration option so that horizon can be deployed to enforce scope

OpenStack Dashboard (Horizon) 6

Medium

Confirmed

#1210625 poor exception handling creates inaccurate user facing error messages

python-keystoneclient 16

Medium

Triaged

#1300208 os_collect_config.ec2 [...] Max retries exceeded with url: /latest/meta-data/ [...] Network is unreachable

OpenStack Core Infrastructure 6

Medium

Triaged

#1550357 keystonemiddleware is missing a dependency on memcache

keystonemiddleware 6

Medium

Triaged

#1579659 oauth login silently ignores scope

OpenStack Identity (keystone) 8

Medium

Triaged

#1583961 OpenID Connect support for authorization code seems to be incomplete

keystoneauth 34

Medium

Triaged

#1637146 RFE: Whitelisting (opt-in) users/projects/domains for PCI compliance

OpenStack Identity (keystone) 6

Medium

Triaged

#1658641 Moving/disabling LDAP users break Keystone queries depending on role ID

OpenStack Identity (keystone) 14

Medium

Triaged

#1667070 Mapping a federated user to a local user does not return concrete role assignments

OpenStack Identity (keystone) 6

Medium

In Progress

#1672713 Dependency between subsystems at the DB layer

OpenStack Identity (keystone) 6

Medium

Triaged

#1675523 _SamlAuth does not do any error checking on SAML messages

keystoneauth 12

Medium

Fix Committed

#1674415 keystone exception messages are not translating when locale is passed

OpenStack Identity (keystone) ocata 10

Medium

Fix Committed

#1687593 Create OAUTH request token gives 401 error when request url is admin endpoint

OpenStack Identity (keystone) 12

Medium

Triaged

#1688137 [OSSA-2021-003] Account name and UUID oracles in account locking (CVE-2021-38155)

OpenStack Identity (keystone) 268

Medium

Confirmed

#1689888 /v3/users is unproportionally slow

OpenStack Identity (keystone) 14

Medium

Fix Committed

#1693510 GET /v3/role_assignments?effective&include_names API is blocked with 404 error when a group doesn't exists in identity backend

OpenStack Identity (keystone) ocata 6

Medium

Confirmed

#1700852 Slow listing projects for user with many role assignments

OpenStack Identity (keystone) ocata 6

Medium

Triaged

#1701498 Failed to create OS::Heat::Stack

OpenStack Heat 6

Medium

Fix Committed

#1635389 keystone.contrib.ec2.controllers.Ec2Controller is untested

OpenStack Identity (keystone) ocata 6

Medium

Fix Committed

#1716792 Install and configure in keystone, Pike: nav button wrong

OpenStack Identity (keystone) pike 14

Medium

Confirmed

#1735554 policy cloudsample checks on is_admin_project

OpenStack Identity (keystone) 16

Medium

Confirmed

#1736902 ContentType is missing from implementation

pycadf 12

Medium

In Progress

#1737863 Lack of documentation for role inheritance

OpenStack Identity (keystone) 6

Medium

In Progress

#1742800 filter_kwargs adds extra _id to key

python-keystoneclient 6

Medium

Confirmed

#1745905 system scope doesn't work for the service which use project specified endpoint

OpenStack Identity (keystone) 20

Medium

Triaged

#1749727 Value comparisons are dependent on order

oslo.policy 6

Medium

Triaged

#1754438 keystone tests fail scope checking

OpenStack Identity (keystone) 6

Medium

Triaged

#1755728 Not all references of 'auth_uri' have been removed from openstack projects when we deprecated 'auth_uri' to bring 'www_authenticate_uri'

keystonemiddleware 6

Medium

Fix Committed

#1763824 JSON schema validator.nullable doesn't work with ENUMs

OpenStack Identity (keystone) pike 6

Medium

Fix Committed

#1763824 JSON schema validator.nullable doesn't work with ENUMs

OpenStack Identity (keystone) queens 6

Medium

Fix Committed

#1765144 [keystone_authtoken] auth_url = http://controller:35357 port error, it should be 5000

OpenStack Compute (nova) queens 26

Medium

In Progress

#1765748 webob-1.8.1 breaks projects

OpenStack Compute (nova) 10

Medium

In Progress

#1772988 Upgrade procedure performance issues

OpenStack Identity (keystone) 6

Medium

Triaged

#1774688 keystone-manage db_sync fails with MariaDB 10.3

OpenStack Identity (keystone) 24

Medium

In Progress

#1775094 Lack of documentation for role permutations and possibilities

OpenStack Identity (keystone) 8

Medium

Triaged

#1776532 LDAP backend should support python-ldap trace logging

OpenStack Identity (keystone) 10

Medium

Confirmed

#1776541 Enhance PCI-DSS compliance documentation

OpenStack Identity (keystone) 6

Medium

Confirmed

#1778949 Deprecating a policy is confusing

oslo.policy 6

Medium

Triaged

#1790931 RFE: ProjectClaims should support multiple resources

oslo.limit 8

Medium

Fix Committed

#1799384 cache guide is out of date

OpenStack Identity (keystone) 6

Medium

In Progress

#1793389 Upgrade to Ocata: Keystone Intermittent Missing 'options' Key

OpenStack Identity (keystone) 6

Medium

In Progress

#1800161 Policy names need to be updated for consistency

OpenStack Identity (keystone) 6

Medium

Confirmed

#1802901 Federation functional job failing on Bionic

OpenStack Identity (keystone) 6

Medium

Triaged

#1804041 Federation documentation should include examples for nginx

OpenStack Identity (keystone) 6

Medium

Fix Committed

#1810983 project admin unable to fetch it's own domain

OpenStack Identity (keystone) 8

Medium

Fix Committed

#1810983 project admin unable to fetch it's own domain

OpenStack Identity (keystone) rocky 8

Medium

In Progress

#1810983 project admin unable to fetch it's own domain

OpenStack Identity (keystone) queens 8

Medium

Confirmed

#1811351 support GET /v3/auth/system

python-keystoneclient 6

Medium

Triaged

#1813183 x509 authentication doesn't work with auto-provisioning

OpenStack Identity (keystone) 8

Medium

Triaged

#1813265 Documentation should use endpoints with path /identity instead of port 5000

OpenStack Identity (keystone) 8

Medium

Triaged

#1813336 Requesting a scoped token when using x509 authentication is redundant

OpenStack Identity (keystone) 8

Medium

Confirmed

#1814570 Tokenless auth does not support system scope

OpenStack Identity (keystone) 6