yahoo-eng-team team mailing list archive

[Florent Flament <florent.flament-ext@xxxxxxxxxxxxx>]

Public bug reported:

With `OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True`, when trying to
login on a domain different than 'Default', I get an `Unauthorized at
/project` error message (even though the user has the `Member` role on a
project in this new domain) :

How to reproduce the bug:

* Update the `openstack_dashboard/local/local_settings.py` to enable the use of the Identity API v3 with domains support:
    * uncomment: OPENSTACK_API_VERSIONS = {  "identity": 3 }
    * set: OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
    * Update `OPENSTACK_KEYSTONE_URL = "http://%s:5000/v2.0"; % OPENSTACK_HOST` to  ̀OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3"; % OPENSTACK_HOST`

* Restart apache (on the devstack) :  `sudo service apache2 restart`

* Open the Horizon Dashboard and login as the `admin` user with domain
`Default`

* Create a domain `testdom`, and click `Set Domain Context` button

* Create a project  `testprj` within this new domain

* Create a user `testusr` (still within `testdom`) with primary project
`testprj`

* Sign out

* Login with user `testusr` and domain `testdom`


Detail of the error message:

    Unauthorized at /project/

    Unauthorized (HTTP 401)

    Request Method:    GET
    Request URL:           http://localhost:8080/project/
    Django Version:    1.5.5
    Exception Type:    Unauthorized
    Exception Value:   

    Unauthorized (HTTP 401)

    Exception Location: /opt/stack/python-novaclient/novaclient/client.py in _cs_request, line 227
    Python Executable:  /usr/bin/python
    Python Version:     2.7.3
    Python Path:                

    ['/opt/stack/horizon/openstack_dashboard/wsgi/../..',
     '/opt/stack/pbr',
     '/opt/stack/oslo.config',
     '/opt/stack/oslo.messaging',
     '/opt/stack/python-keystoneclient',
     '/opt/stack/python-glanceclient',
     '/opt/stack/python-cinderclient',
     '/opt/stack/python-novaclient',
     '/opt/stack/python-swiftclient',
     '/opt/stack/python-neutronclient',
     '/opt/stack/python-heatclient',
     '/opt/stack/python-openstackclient',
     '/opt/stack/keystone',
     '/opt/stack/glance',
     '/opt/stack/cinder',
     '/opt/stack/neutron',
     '/opt/stack/nova',
     '/opt/stack/horizon',
     '/opt/stack/tempest',
     '/opt/stack/swift',
     '/opt/stack/ceilometer',
     '/opt/stack/python-ceilometerclient',
     '/usr/lib/python2.7',
     '/usr/lib/python2.7/plat-linux2',
     '/usr/lib/python2.7/lib-tk',
     '/usr/lib/python2.7/lib-old',
     '/usr/lib/python2.7/lib-dynload',
     '/usr/local/lib/python2.7/dist-packages',
     '/usr/lib/python2.7/dist-packages',
     '/usr/lib/python2.7/dist-packages/PIL',
     '/usr/lib/pymodules/python2.7',
     '/opt/stack/horizon/openstack_dashboard']

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1276057

Title:
  api v3 - unable to login on non Default domain

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  With `OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True`, when trying to
  login on a domain different than 'Default', I get an `Unauthorized at
  /project` error message (even though the user has the `Member` role on
  a project in this new domain) :

  How to reproduce the bug:

  * Update the `openstack_dashboard/local/local_settings.py` to enable the use of the Identity API v3 with domains support:
      * uncomment: OPENSTACK_API_VERSIONS = {  "identity": 3 }
      * set: OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
      * Update `OPENSTACK_KEYSTONE_URL = "http://%s:5000/v2.0"; % OPENSTACK_HOST` to  ̀OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3"; % OPENSTACK_HOST`

  * Restart apache (on the devstack) :  `sudo service apache2 restart`

  * Open the Horizon Dashboard and login as the `admin` user with domain
  `Default`

  * Create a domain `testdom`, and click `Set Domain Context` button

  * Create a project  `testprj` within this new domain

  * Create a user `testusr` (still within `testdom`) with primary
  project `testprj`

  * Sign out

  * Login with user `testusr` and domain `testdom`

  
  Detail of the error message:

      Unauthorized at /project/

      Unauthorized (HTTP 401)

      Request Method:    GET
      Request URL:           http://localhost:8080/project/
      Django Version:    1.5.5
      Exception Type:    Unauthorized
      Exception Value:   

      Unauthorized (HTTP 401)

      Exception Location: /opt/stack/python-novaclient/novaclient/client.py in _cs_request, line 227
      Python Executable:  /usr/bin/python
      Python Version:     2.7.3
      Python Path:                

      ['/opt/stack/horizon/openstack_dashboard/wsgi/../..',
       '/opt/stack/pbr',
       '/opt/stack/oslo.config',
       '/opt/stack/oslo.messaging',
       '/opt/stack/python-keystoneclient',
       '/opt/stack/python-glanceclient',
       '/opt/stack/python-cinderclient',
       '/opt/stack/python-novaclient',
       '/opt/stack/python-swiftclient',
       '/opt/stack/python-neutronclient',
       '/opt/stack/python-heatclient',
       '/opt/stack/python-openstackclient',
       '/opt/stack/keystone',
       '/opt/stack/glance',
       '/opt/stack/cinder',
       '/opt/stack/neutron',
       '/opt/stack/nova',
       '/opt/stack/horizon',
       '/opt/stack/tempest',
       '/opt/stack/swift',
       '/opt/stack/ceilometer',
       '/opt/stack/python-ceilometerclient',
       '/usr/lib/python2.7',
       '/usr/lib/python2.7/plat-linux2',
       '/usr/lib/python2.7/lib-tk',
       '/usr/lib/python2.7/lib-old',
       '/usr/lib/python2.7/lib-dynload',
       '/usr/local/lib/python2.7/dist-packages',
       '/usr/lib/python2.7/dist-packages',
       '/usr/lib/python2.7/dist-packages/PIL',
       '/usr/lib/pymodules/python2.7',
       '/opt/stack/horizon/openstack_dashboard']

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1276057/+subscriptions