yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => icehouse-rc1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1263804

Title:
  EC2 token creation no longer possible for admin

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  with the security fix for "[OSSA 2013-032] Keystone trust
  circumvention through EC2-style tokens (CVE-2013-6391)", Bug #1242597,
  it is no longer possible to create ec2 credentials with just admin
  service token + service endpoint.

  Log file gives:

  2013-12-23 22:13:12.197 22611 WARNING keystone.common.wsgi [-]
  Authorization failed. Could not find token, 120726431688. from
  192.168.226.81

  
  where 120... is the admin token.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1263804/+subscriptions