yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1210515

Title:
  keystone chokes on empty "description" field in active directory

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  I configured keystone (from grizzly) with an active directory backend, following https://wiki.openstack.org/wiki/HowtoIntegrateKeystonewithAD.
  It works so far. 

  Now I can create projects in horizon (tenants in keystone) with an
  empty "description" field. The result is that there is no attribute
  "description" for that tenant in AD. When I then try to edit such a
  project (e.g. add description, or add member), I get an

  Error: Unable to modify project "test02".

  message from horizon, and in keystone.log I see

  2013-08-09 15:07:23    ERROR [root] u'description'
  Traceback (most recent call last):
    File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 236, in __call__
      result = method(context, **params)
    File "/usr/lib/python2.6/site-packages/keystone/identity/controllers.py", line 115, in update_project
      context, tenant_id, clean_tenant)
    File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 47, in _wrapper
      return f(*args, **kw)
    File "/usr/lib/python2.6/site-packages/keystone/identity/backends/ldap/core.py", line 229, in update_project
      return self._set_default_domain(self.project.update(tenant_id, tenant))
    File "/usr/lib/python2.6/site-packages/keystone/identity/backends/ldap/core.py", line 614, in update
      return super(ProjectApi, self).update(id, values, old_obj)
    File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 586, in update
      object_id, values, old_obj)
    File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 328, in update
      elif old_obj[k] != v:
  KeyError: u'description'

  I can add a description attribute to AD via its ldap interface using
  ldapmodify. Then I can modify the project without problems. I think
  keystone should be able to deal with a missing description field if
  its optional at creation time.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1210515/+subscriptions