Open Stack

It turns out this problem crept in along with an update to keystoneclient which slightly altered the way the management_url attribute on the client was set during unscoped authentication. I issued some new patches to the django_openstack_auth package (now version 1.0.6 on PyPI) which bring compatibility into line with the most recent keystoneclient. Just thought I'd let everyone know.

All the best,

    - Gabriel

> -----Original Message-----
> From: Rahul Sharma [mailto:rsharma at contrailsystems.com]
> Sent: Thursday, November 29, 2012 4:49 PM
> To: OpenStack Development Mailing List
> Subject: [openstack-dev] [horizon] Project Switcher not working
> 
> Hi,
> I recently updated my complete setup using devstack. With this keystone
> was also updated. Subsequently, I noticed that the project switcher is not
> working.
> 
> Somehow the authorised_tenants from openstack_auth/users.py is not
> populated with tenant_list giving an exception. It seems that the token is not
> accepted by keystone.
> 
> tenant_list does work from projects page though.
> 
> Mimicking what happens in authorised_tenants list setter:
> 
> curl -d '{"auth":{"passwordCredentials":{"username": "admin", "password":
> "admins"}}}' -H "Content-type: application/json"
> http://localhost:35357/v2.0/tokens
> 
> {"access": {"token": {"issued_at": "00:39:08.647947", "expires": "2012-12-
> 01T00:39:08Z", "id":
> "MIICOAYJKoZIhvcNAQcCoIICKTCCAiUCAQExCTAHBgUrDgMCGjCCAREGCSq
> GSIb3DQEHAaCCAQIEgf97ImFjY2VzcyI6IHsidG9rZW4iOiB7Imlzc3VlZF9hdCI6IC
> IwMDozOTowOC42NDc5NDciLCAiZXhwaXJlcyI6ICIyMDEyLTEyLTAxVDAwOjM
> 5OjA4WiIsICJpZCI6ICJwbGFjZWhvbGRlciJ9LCAic2VydmljZUNhdGFsb2ciOiB7fS
> wgInVzZXIiOiB7InVzZXJuYW1lIjogImFkbWluIiwgInJvbGVzX2xpbmtzIjogW10sI
> CJpZCI6ICIzNzY4NjJkMjI1NWE0NjVjYmY3YzI1YjljN2ZlYjA2NSIsICJyb2xlcyI6IFtd
> LCAibmFtZSI6ICJhZG1pbiJ9fX0xgf8wgfwCAQEwXDBXMQswCQYDVQQGEwJV
> UzEOMAwGA1UECBMFVW5zZXQxDjAMBgNVBAcTBVVuc2V0MQ4wDAYDVQ
> QKEwVVbnNldDEYMBYGA1UEAxMPd3d3LmV4YW1wbGUuY29tAgEBMAcGBS
> sOAwIaMA0GCSqGSIb3DQEBAQUABIGAG86SH5VMuHo-
> v0sPEuAjdQvZQquEzxrdMeRdykiMdR1mhISm9D2F+fkLOi+Y3Owt6oI3vsdeZ
> mGP6BMF21w5KJmDIeatKroGJ-
> nsCoZHnycQZSOOtsqoV4ux8h5PIWuEvvKX3XUmffUuSyHtkA+9w8oWYZSz-
> 7qhD57GSyAHurQ="}, "serviceCatalog": {}, "user": {"username": "admin",
> "roles_links": [], "id": "376862d2255a465cbf7c25b9c7feb065", "roles": [],
> "name": "admin"}}}
> 
> 
> curl -H  "X-Auth-
> Token:MIICOAYJKoZIhvcNAQcCoIICKTCCAiUCAQExCTAHBgUrDgMCGjCCARE
> GCSqGSIb3DQEHAaCCAQIEgf97ImFjY2VzcyI6IHsidG9rZW4iOiB7Imlzc3VlZF9hd
> CI6ICIwMDozOTowOC42NDc5NDciLCAiZXhwaXJlcyI6ICIyMDEyLTEyLTAxVDAw
> OjM5OjA4WiIsICJpZCI6ICJwbGFjZWhvbGRlciJ9LCAic2VydmljZUNhdGFsb2ciOi
> B7fSwgInVzZXIiOiB7InVzZXJuYW1lIjogImFkbWluIiwgInJvbGVzX2xpbmtzIjog
> W10sICJpZCI6ICIzNzY4NjJkMjI1NWE0NjVjYmY3YzI1YjljN2ZlYjA2NSIsICJyb2xlc
> yI6IFtdLCAibmFtZSI6ICJhZG1pbiJ9fX0xgf8wgfwCAQEwXDBXMQswCQYDVQQ
> GEwJVUzEOMAwGA1UECBMFVW5zZXQxDjAMBgNVBAcTBVVuc2V0MQ4wD
> AYDVQQKEwVVbnNldDEYMBYGA1UEAxMPd3d3LmV4YW1wbGUuY29tAgEB
> MAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUABIGAG86SH5VMuHo-
> v0sPEuAjdQvZQquEzxrdMeRdykiMdR1mhISm9D2F+fkLOi+Y3Owt6oI3vsdeZ
> mGP6BMF21w5KJmDIeatKroGJ-
> nsCoZHnycQZSOOtsqoV4ux8h5PIWuEvvKX3XUmffUuSyHtkA+9w8oWYZSz-
> 7qhD57GSyAHurQ=" http://localhost:35357/v2.0/tenants
> {"error": {"message": "The request you have made requires authentication.",
> "code": 401, "title": "Not Authorized"}}
> 
> 
> While if I pick up token id from Horizon logs and use it for keystone, then it
> works from shell and also horizon itself.
> 
> -
> Rahul
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev