Open Stack

Guys,

I filed a bug https://bugs.launchpad.net/keystone/+bug/1210590 to address this problem. Also, I posted a comment with the solution I found to bypass the problem.

Thanks,

--Otavio

From: Henry Nash [mailto:henryn at linux.vnet.ibm.com]
Sent: sexta-feira, 9 de agosto de 2013 04:22
To: OpenStack Development Mailing List
Subject: Re: [openstack-dev] Problem using Keystone split backend

Yep, agreed, certainly my code....if you can provide as much info in the bug as possible, and I'll get straight on it.

Henry
On 9 Aug 2013, at 00:14, Adam Young wrote:


On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:

Hi all,

I'm using the Keystone split backend code (H2) with both identity and assignment using SQL drivers. During the process of authentication thru Horizon, I'm getting the following error in the log:

Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 240, in __call__
    result = method(context, **params)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 80, in authenticate
    context, auth)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 257, in _authenticate_local
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 371, in _get_project_roles_and_ref
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 123, in get_roles_for_user_and_project
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 125, in get_roles_for_user_and_project
    user_role_list = _get_user_project_roles(user_id, project_ref)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 107, in _get_user_project_roles
    metadata_ref.get('roles', {}), False)
  File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 44, in _wrapper
    return f(*args, **kw)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 216, in _roles_from_role_dicts
    if ((not d.get('inherited_to') and not inherited) or


This looks like a bug, and, if I guess correctly, Henry Nash's inheritance change is to blame.

commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
" Implement role assignment inheritance (OS-INHERIT extension)"

Please file it in Launchpad,


There are known issues with Unicode and LDAP, and I suspect you are tripping over that.



AttributeError: 'unicode' object has no attribute 'get'


I'm using a fresh tenant/role/user that were created using the V2.0. Has anybody faced this problem too?

Thanks.




_______________________________________________

OpenStack-dev mailing list

OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130809/5ad94dc7/attachment.html>