Open Stack

On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:
>
> Hi all,
>
> I'm using the Keystone split backend code (H2) with both identity and 
> assignment using SQL drivers. During the process of authentication 
> thru Horizon, I'm getting the following error in the log:
>
> Traceback (most recent call last):
>
>   File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", 
> line 240, in __call__
>
>     result = method(context, **params)
>
>   File 
> "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
> 80, in authenticate
>
>     context, auth)
>
>   File 
> "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
> 257, in _authenticate_local
>
>     user_id, tenant_id)
>
>   File 
> "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
> 371, in _get_project_roles_and_ref
>
>     user_id, tenant_id)
>
>   File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", 
> line 123, in get_roles_for_user_and_project
>
>     user_id, tenant_id)
>
>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", 
> line 125, in get_roles_for_user_and_project
>
>     user_role_list = _get_user_project_roles(user_id, project_ref)
>
>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", 
> line 107, in _get_user_project_roles
>
> metadata_ref.get('roles', {}), False)
>
> File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", 
> line 44, in _wrapper
>
>     return f(*args, **kw)
>
>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", 
> line 216, in _roles_from_role_dicts
>
>     if ((not d.get('inherited_to') and not inherited) or
>


This looks like a bug, and, if I guess correctly, Henry Nash's 
inheritance change is to blame.

commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
" Implement role assignment inheritance (OS-INHERIT extension)"

Please file it in Launchpad,


There are known issues with Unicode and LDAP, and I suspect you are 
tripping over that.


> AttributeError: 'unicode' object has no attribute 'get'
>
> I'm using a fresh tenant/role/user that were created using the V2.0. 
> Has anybody faced this problem too?
>
> Thanks.
>
>
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130808/5823482c/attachment.html>