[openstack-dev] Problem using Keystone split backend
Henry Nash
henryn at linux.vnet.ibm.com
Fri Aug 9 07:21:50 UTC 2013
Yep, agreed, certainly my code....if you can provide as much info in the bug as possible, and I'll get straight on it.
Henry
On 9 Aug 2013, at 00:14, Adam Young wrote:
> On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:
>>
>> Hi all,
>>
>> I’m using the Keystone split backend code (H2) with both identity and assignment using SQL drivers. During the process of authentication thru Horizon, I’m getting the following error in the log:
>>
>> Traceback (most recent call last):
>> File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 240, in __call__
>> result = method(context, **params)
>> File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 80, in authenticate
>> context, auth)
>> File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 257, in _authenticate_local
>> user_id, tenant_id)
>> File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 371, in _get_project_roles_and_ref
>> user_id, tenant_id)
>> File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 123, in get_roles_for_user_and_project
>> user_id, tenant_id)
>> File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 125, in get_roles_for_user_and_project
>> user_role_list = _get_user_project_roles(user_id, project_ref)
>> File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 107, in _get_user_project_roles
>> metadata_ref.get('roles', {}), False)
>> File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 44, in _wrapper
>> return f(*args, **kw)
>> File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 216, in _roles_from_role_dicts
>> if ((not d.get('inherited_to') and not inherited) or
>
>
> This looks like a bug, and, if I guess correctly, Henry Nash's inheritance change is to blame.
>
> commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
> " Implement role assignment inheritance (OS-INHERIT extension)"
>
> Please file it in Launchpad,
>
>
> There are known issues with Unicode and LDAP, and I suspect you are tripping over that.
>
>
>> AttributeError: 'unicode' object has no attribute 'get'
>>
>>
>> I’m using a fresh tenant/role/user that were created using the V2.0. Has anybody faced this problem too?
>>
>> Thanks.
>>
>>
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130809/a81c0ff8/attachment.html>
More information about the OpenStack-dev
mailing list