yahoo-eng-team team mailing list archive

[Dolph Mathews <1046538@xxxxxxxxxxxxxxxxxx>]

Marking this as invalid because I think this is expected behavior for
keystone. If a user does get themselves into this situation, the static
admin_token defined by keystone.conf is intended exactly for this
scenario- bootstrapping an admin user (or in this case, re-bootstrapping
an admin user).

** Changed in: keystone
       Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1046538

Title:
  Disabling projects can lock the user out of the system

Status in OpenStack Dashboard (Horizon):
  Fix Released
Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  If you disable all the projects to which the currently logged in user
  has access, this user will be locked out of the system.

  If you're the only admin, the only remedy is to edit the datbase by
  hand e.g.:

  update keystone.tenant set extra = '{"enabled": true, "description":
  "-"}' where name = 'admin';

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1046538/+subscriptions