<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>There may be some other lingering v2-only auth issues, but my guess is that the nova/neutron one is towards the end of the remaining ones. </div><div><br></div><div>I'm looking at liberty as the release we finish any outstanding work to fully gate on v2 being disabled in a deployment. </div><div><br></div><div>--Morgan <br><br>Sent via mobile</div><div><br>On Apr 3, 2015, at 15:24, Fox, Kevin M <<a href="mailto:Kevin.Fox@pnnl.gov">Kevin.Fox@pnnl.gov</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Yeah. I'm curious too.<br>
<br>
Also, are you aware of any other issues in Juno with switching entirely over to v3? We'd like to have all of our service accounts in a non-default domain for kilo. With the nova+neutron bug fixed, thats the only one I know of preventing it.<br>
<br>
Thanks,<br>
Kevin<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF872645"><font color="#000000" face="Tahoma" size="2"><b>From:</b> Rich Megginson [<a href="mailto:rmeggins@redhat.com">rmeggins@redhat.com</a>]<br>
<b>Sent:</b> Friday, April 03, 2015 12:54 PM<br>
<b>To:</b> <a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> Re: [openstack-dev] Problem about Juno Keystone Identity V3<br>
</font><br>
</div>
<div></div>
<div>
<div class="moz-cite-prefix">On 04/03/2015 12:11 PM, Fox, Kevin M wrote:<br>
</div>
<blockquote type="cite">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">We've run into issues with nova+neutron and keystone v3 with Juno.<br>
<br>
Specifically this one:<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/nova/+bug/1424462" target="_blank">https://bugs.launchpad.net/nova/+bug/1424462</a><br>
<br>
But there may be others that I don't know about.<br>
</div>
</blockquote>
<br>
Yes, there are some problems with some components that don't use the keystone_authtoken section in their configs or otherwise can't use the latest python-keystonemiddleware.<br>
<br>
But I would like to know what steps worked to switch Keystone Identity from V2 to V3 in Icehouse that don't work for Juno.<br>
<br>
<blockquote type="cite">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt"><br>
Thanks,<br>
Kevin<br>
<br>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr tabindex="-1">
<div id="divRpF217355" style="direction:ltr"><font color="#000000" face="Tahoma" size="2"><b>From:</b> Rich Megginson [<a class="moz-txt-link-abbreviated" href="mailto:rmeggins@redhat.com" target="_blank">rmeggins@redhat.com</a>]<br>
<b>Sent:</b> Friday, April 03, 2015 10:52 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:openstack-dev@lists.openstack.org" target="_blank">
openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> Re: [openstack-dev] Problem about Juno Keystone Identity V3<br>
</font><br>
</div>
<div>
<div class="moz-cite-prefix">On 04/03/2015 09:09 AM, Amy Zhang wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi guys,
<div><br>
</div>
<div>I have done switching Keystone Identity V2 to V3 in Icehouse and it works perfect. However, I use the same way to switch Keystone Identity V2 to V3 in Juno, it doesn't work. It give me the error: "ERROR: openstack Internal Server Error (HTTP 500)".
<br>
</div>
</div>
</blockquote>
<br>
What steps did you follow? Links?<br>
<br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>I traced back to the code, find the error comes from apache, but it doesn't make any sense that apache has problem, it might be some problem of keystone which lead to error of apache. </div>
<div><br>
</div>
<div>Does any one have any idea of it? Thanks!</div>
<div>-- <br>
<div class="gmail_signature">Best regards,<br>
Amy (Yun Zhang)<br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader" target="_blank"></fieldset> <br>
<pre>__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader" target="_blank"></fieldset> <br>
<pre>__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
</div></blockquote><blockquote type="cite"><div><span>__________________________________________________________________________</span><br><span>OpenStack Development Mailing List (not for usage questions)</span><br><span>Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org">OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe</span><br><span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></span><br></div></blockquote></body></html>