yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1158860] Re: Inconsistent response from Keystone on invalid tenantName vs tenantId

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Satyanarayana Patibandla <satya.patibandla@xxxxxxx>
Date: Mon, 22 Apr 2013 10:18:38 -0000
Reply-to: Bug 1158860 <1158860@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
It seems this issue is already fixed in latest release.

curl -s -X POST http://127.0.0.1:5000/v2.0/tokens -d '{"auth": { "token": { "id":"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-MIH8AgEBMFwwVzELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMFVW5zZXQxGDAWBgNVBAMTD3d3dy5leGFtcGxlLmNvbQIBATAHBgUrDgMCGjANBgkqhkiG9w0BAQEFAASBgH1V4bPsn6WysMvXWRLxWt4GE4uCMm65Sk+uulEXWMs-Rg3Uidy8WLEthBOtmvWxSJShOnwHtkoP5Me1erOgAy3u4+WdPekebIx3SSkhlh7cHzlKG4H+Dz8nt42lI+PcJvGrt5cuEwKgmKFDSZJV9gawS6Fx4KcFkYPINBWJVXrR"}, "tenantName":"not-demo"}}' -H "Content-type: application/json" |  python -mjson.tool
{
    "error": {
        "code": 401,
        "message": "The request you have made requires authentication.",
        "title": "Not Authorized"
    }
}
[root@cloud1 ~]# curl -s -X POST http://127.0.0.1:5000/v2.0/tokens -d '{"auth": { "token": { "id":"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-MIH8AgEBMFwwVzELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMFVW5zZXQxGDAWBgNVBAMTD3d3dy5leGFtcGxlLmNvbQIBATAHBgUrDgMCGjANBgkqhkiG9w0BAQEFAASBgH1V4bPsn6WysMvXWRLxWt4GE4uCMm65Sk+uulEXWMs-Rg3Uidy8WLEthBOtmvWxSJShOnwHtkoP5Me1erOgAy3u4+WdPekebIx3SSkhlh7cHzlKG4H+Dz8nt42lI+PcJvGrt5cuEwKgmKFDSZJV9gawS6Fx4KcFkYPINBWJVXrR"}, "tenantId":"this-is-wrong"}}' -H "Content-type: application/json" |  python -mjson.tool
{
    "error": {
        "code": 401,
        "message": "The request you have made requires authentication.",
        "title": "Not Authorized"
    }
}

Hence Marking the Bug as "Fix was delivered".

** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1158860

Title:
  Inconsistent response from Keystone on invalid tenantName vs tenantId

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  tl;dr:

  POST to /v2.0/tokens

  Valid Token + invalid tenantId returns a 401.
  Valid Token + invalid tenantName returns a 404 including a message that tenant foo doesn't exist

  Summarized in my gist here:
  https://gist.github.com/kenperkins/5214656

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1158860/+subscriptions