<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:14px"><div id="yui_3_16_0_1_1439498432321_3148"><span>Hi</span></div><div id="yui_3_16_0_1_1439498432321_3148"><span><br></span></div><div id="yui_3_16_0_1_1439498432321_3148"><span id="yui_3_16_0_1_1439498432321_3364">I am setting up three keystones to be federated, getting a federated token with a federated token.</span></div><div id="yui_3_16_0_1_1439498432321_3148"><span><br></span></div><div id="yui_3_16_0_1_1439498432321_3148"><span id="yui_3_16_0_1_1439498432321_3481">I have three devstack kilo instances as:</span></div><div id="yui_3_16_0_1_1439498432321_3148"><span><br></span></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><span>kilo1 (IdP) -----> kilo2 (SP / IdP) </span>-----> kilo3 (SP)</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">1. get a federated scoped token for a project in kilo2.</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">2. use this federated token and get federated scoped token for kilo3.</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">The issue is when a SP is setup to be idp as well service provider (for kilo3) in kilo2, then i get http 500 internal server error.</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">The responses up to the error is in the following link:</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><a href="http://paste.openstack.org/show/412951/" id="yui_3_16_0_1_1439498432321_3369">http://paste.openstack.org/show/412951/</a></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">I realized if remove service provider (form kilo2) then it works fine, service provider is in line 18 of the results.</div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr"><br></div><div id="yui_3_16_0_1_1439498432321_3148" dir="ltr">Thank you </div><div id="yui_3_16_0_1_1439498432321_3148"><span><br></span></div><div id="yui_3_16_0_1_1439498432321_3148"><span><br></span></div><div></div><div id="yui_3_16_0_1_1439498432321_3147"> </div><div class="signature" id="yui_3_16_0_1_1439498432321_2960"><div style="PADDING-BOTTOM:0px;LINE-HEIGHT:1.2em;MARGIN:0px;OUTLINE-STYLE:none;PADDING-LEFT:0px;PADDING-RIGHT:0px;DISPLAY:block;FONT-FAMILY:arial, helvetica, clean, sans-serif;FONT-SIZE:14px;PADDING-TOP:0px;" class="yiv1742282870MsoNormal"><b></b></div>
<div style="PADDING-BOTTOM:0px;LINE-HEIGHT:1.2em;MARGIN:0px;OUTLINE-STYLE:none;PADDING-LEFT:0px;PADDING-RIGHT:0px;DISPLAY:block;FONT-SIZE:14px;PADDING-TOP:0px;" class="yiv1742282870MsoNormal" id="yui_3_16_0_1_1439498432321_3015"><font class="Apple-style-span" color="#434343" face="'times new roman', 'new york', times, serif">--------</font></div>
<div style="PADDING-BOTTOM:0px;LINE-HEIGHT:1.2em;MARGIN:0px;OUTLINE-STYLE:none;PADDING-LEFT:0px;PADDING-RIGHT:0px;DISPLAY:block;FONT-SIZE:14px;PADDING-TOP:0px;" class="yiv1742282870MsoNormal" id="yui_3_16_0_1_1439498432321_3016"><b><font class="Apple-style-span" color="#434343" face="'times new roman', 'new york', times, serif">Navid Pustchi</font></b></div>
<div style="PADDING-BOTTOM:0px;LINE-HEIGHT:1.2em;MARGIN:0px;OUTLINE-STYLE:none;PADDING-LEFT:0px;PADDING-RIGHT:0px;DISPLAY:block;FONT-SIZE:14px;PADDING-TOP:0px;" class="yiv1742282870MsoNormal" id="yui_3_16_0_1_1439498432321_3018"><br></div>
<div style="PADDING-BOTTOM:0px;LINE-HEIGHT:1.2em;MARGIN:0px;OUTLINE-STYLE:none;PADDING-LEFT:0px;PADDING-RIGHT:0px;DISPLAY:block;FONT-FAMILY:arial, helvetica, clean, sans-serif;FONT-SIZE:14px;PADDING-TOP:0px;" class="yiv1742282870MsoNormal" id="yui_3_16_0_1_1439498432321_2959"><br></div></div></div></body></html>