Open Stack

On 06/21/2014 05:41 PM, Doug Hellmann wrote:
> 
> 
> 
> On Sat, Jun 21, 2014 at 2:27 PM, Morgan Fainberg
> <morgan.fainberg at gmail.com <mailto:morgan.fainberg at gmail.com>> wrote:
> 
>     The issue with the login page simply refreshing was due to a change
>     in Keystone that updated the type of Token issued by default from
>     PKI to PKIZ (compressed PKI/ASN1). The update to the django auth
>     module was intended to correct that specific issue with Keystone and
>     Horizon (Juno).
> 
>     The bug fix (not sure if another review is to blame with the
>     django_openstack_auth module tha t is currently happening) that
>     addressed your specific issue is:
>     https://bugs.launchpad.net/horizon/+bug/1331406
> 
>     I have proposed a fix for Keystone that would revert the PKIZ
>     default: https://review.openstack.org/#/c/101714/
> 
>     Depending on the fixes upcoming for the django_openstack_auth
>     module, it may make sense to temporarily revert the PKIZ provider
>     default until we can solve the issues with the django auth module
>     and horizon when PKIZ is enabled. If this review is not needed based
>     on how the horizon issues are corrected, it will be abandoned.
> 
>     I think this is also showing some gaps in our testing, notably that
>     the django_openstack_auth module isn't being exercised on the
>     integration tests. I'll aim to hit up Horizon team and work with
>     them and the QA folks to make sure we cover this gap in the future.
> 
> 
> ​We may also want to consider adding it to the list of libraries we have
> in the cross-project unit test matrix
> (https://review.openstack.org/#/c/95885/).

This is actually just the same issue we've got with the python clients.
The changes were moving through to actually do the right thing here
(https://review.openstack.org/#/c/79881/) however, that's got to be
backported to stable devstack branches as well.

Also we need https://review.openstack.org/101749

I just approved https://review.openstack.org/#/c/101734/ (havana pin)

Once that passes and merges, if someone rechecks the icehouse pin
(Approved, but it won't pass tests until the havana version lands)
https://review.openstack.org/#/c/101727/, it should pass and let patches
flow again.

Next week we need a proper unwind with the horizon team to get
django_openstack_auth working with stable/* again, get the testing
working again.

I'm mostly away from computers today, however 101727 should be in a
state where all it needs is a recheck bug 1331406 in about an hour or
two, which anyone can do.

	-Sean

> 
> Doug
> 
>  
> 
> 
> 
>     --Morgan
> 
>     On Saturday, June 21, 2014, Mike Spreitzer <mspreitz at us.ibm.com
>     <mailto:mspreitz at us.ibm.com>> wrote:
> 
>         Since Friday I have been getting this misbehavior: enter
>         username and password, hit login, and it shows you the login
>         page again.
> 
> 
>         Sean Dague --- [openstack-dev] horizon failing on icehouse 100%,
>         currently blocking all patches ---
> 
> 
>         From:	"Sean Dague" <sean at dague.net>
>         To	"openstack-dev" <openstack-dev at lists.openstack.org>
>         Date:	Sat, Jun 21, 2014 12:54
>         Subject	[openstack-dev] horizon failing on icehouse 100%,
>         currently blocking all patches
> 
>         ------------------------------------------------------------------------
> 
>         Horizon in icehouse is now 100% failing
> 
>          [Sat Jun 21 16:17:35 2014] [error] Internal Server Error: /
>         [Sat Jun 21 16:17:35 2014] [error] Traceback (most recent call
>         last):
>         [Sat Jun 21 16:17:35 2014] [error]   File
>         "/usr/local/lib/python2.7/dist-packages/django/core/handlers/base.py",
>         line 112, in get_response
>         [Sat Jun 21 16:17:35 2014] [error]     response =
>         wrapped_callback(request, *callback_args, **callback_kwargs)
>         [Sat Jun 21 16:17:35 2014] [error]   File
>         "/usr/local/lib/python2.7/dist-packages/django/views/decorators/vary.py",
>         line
>         36, in inner_func
>         [Sat Jun 21 16:17:35 2014] [error]     response = func(*args,
>         **kwargs)
>         [Sat Jun 21 16:17:35 2014] [error]   File
>         "/opt/stack/old/horizon/openstack_dashboard/wsgi/../../openstack_dashboard/views.py",
>         line 35, in splash
>         [Sat Jun 21 16:17:35 2014] [error]     form = views.Login(request)
>         [Sat Jun 21 16:17:35 2014] [error] AttributeError: 'module'
>         object has
>         no attribute 'Login'
> 
>         This suspiciously times with django_openstack_auth 1.1.6 being
>         released.
>         http://logstash.openstack.org/#eyJzZWFyY2giOiJcIkF0dHJpYnV0ZUVycm9yOiAnbW9kdWxlJyBvYmplY3QgaGFzIG5vIGF0dHJpYnV0ZSAnTG9naW4nXCIiLCJmaWVsZHMiOltdLCJvZmZzZXQiOjAsInRpbWVmcmFtZSI6IjYwNDgwMCIsImdyYXBobW9kZSI6ImNvdW50IiwidGltZSI6eyJ1c2VyX2ludGVydmFsIjowfSwic3RhbXAiOjE0MDMzNjk0MjQ4NjR9
> 
>         Because this breaks smoke tests on icehouse, it means that any
>         project
>         with upgrade testing fails.
> 
>         Would be great if horizon folks code make this a top priority.
>         Also, in
>         future, releasing new library versions on a saturday maybe best
>         avoided. :)
> 
>         -Sean
> 
>         -- 
>         Sean Dague
>         http://dague.net
> 
>         _______________________________________________
>         OpenStack-dev mailing list
>         OpenStack-dev at lists.openstack.org
>         http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
>     _______________________________________________
>     OpenStack-dev mailing list
>     OpenStack-dev at lists.openstack.org
>     <mailto:OpenStack-dev at lists.openstack.org>
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 


-- 
Sean Dague
http://dague.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 482 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140622/48d33e1a/attachment.pgp>