<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Yep, agreed, certainly my code....if you can provide as much info in the bug as possible, and I'll get straight on it.<div><br></div><div>Henry<br><div><div>On 9 Aug 2013, at 00:14, Adam Young wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
<div text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 08/08/2013 03:58 PM, Gaspareto,
Otavio wrote:<br>
</div>
<blockquote cite="mid:16AD01F8DFFDCE4CAD97D3AC11F247FD131247B2@G4W3228.americas.hpqcorp.net" type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1"><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Hi all,<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">I’m using the Keystone split backend code
(H2) with both identity and assignment using SQL drivers.
During the process of authentication thru Horizon, I’m getting
the following error in the log:<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Traceback (most recent call last):<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/common/wsgi.py",
line 240, in __call__<o:p></o:p></p><p class="MsoNormal"> result = method(context, **params)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py",
line 80, in authenticate<o:p></o:p></p><p class="MsoNormal"> context, auth)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py",
line 257, in _authenticate_local<o:p></o:p></p><p class="MsoNormal"> user_id, tenant_id)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py",
line 371, in _get_project_roles_and_ref<o:p></o:p></p><p class="MsoNormal"> user_id, tenant_id)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/identity/core.py",
line 123, in get_roles_for_user_and_project<o:p></o:p></p><p class="MsoNormal"> user_id, tenant_id)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 125, in get_roles_for_user_and_project<o:p></o:p></p><p class="MsoNormal"> user_role_list =
_get_user_project_roles(user_id, project_ref)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 107, in _get_user_project_roles<o:p></o:p></p><p class="MsoNormal"> <span lang="PT-BR">metadata_ref.get('roles',
{}), False)<o:p></o:p></span></p><p class="MsoNormal"><span lang="PT-BR"> </span>File
"/usr/lib/python2.6/site-packages/keystone/common/manager.py",
line 44, in _wrapper<o:p></o:p></p><p class="MsoNormal"> return f(*args, **kw)<o:p></o:p></p><p class="MsoNormal"> File
"/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 216, in _roles_from_role_dicts<o:p></o:p></p><p class="MsoNormal"> if ((not d.get('inherited_to') and not
inherited) or</p>
</div>
</blockquote>
<br>
<br>
This looks like a bug, and, if I guess correctly, Henry Nash's
inheritance change is to blame.<br>
<br>
commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb<br>
" Implement role assignment inheritance (OS-INHERIT extension)"<br>
<br>
Please file it in Launchpad,<br>
<br>
<br>
There are known issues with Unicode and LDAP, and I suspect you are
tripping over that. <br>
<br>
<br>
<blockquote cite="mid:16AD01F8DFFDCE4CAD97D3AC11F247FD131247B2@G4W3228.americas.hpqcorp.net" type="cite">
<div class="WordSection1"><p class="MsoNormal"><o:p></o:p></p><p class="MsoNormal">AttributeError: 'unicode' object has no
attribute 'get'<o:p></o:p></p><p class="MsoNormal"><o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">I’m using a fresh tenant/role/user that
were created using the V2.0. Has anybody faced this problem
too?<o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal">Thanks.<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
OpenStack-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</div>
_______________________________________________<br>OpenStack-dev mailing list<br><a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev<br></blockquote></div><br></div></body></html>