yahoo-eng-team team mailing list archive

[Launchpad Bug Tracker <1316686@xxxxxxxxxxxxxxxxxx>]

[Expired for Keystone because there has been no activity for 60 days.]

** Changed in: keystone
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1316686

Title:
  ldap users unable to authenticate

Status in OpenStack Identity (Keystone):
  Expired

Bug description:
  We are running the latest keystone and see this in our logs for all
  ldap users. Local authentication works, and the problem happened over
  the last couple of weeks. Rolling back to a keystone from April 22nd
  works for us. There have been a few ldap related commits since then,
  we are trying to isolate the exact change which may be causing this.

  
  2014-05-06 16:24:49,679 (keystone.common.ldap.core): DEBUG core unbind_s LDAP unbind
  2014-05-06 16:24:49,679 (keystone.common.ldap.core): DEBUG core connect LDAP init: url=ldap://ldap.internal
  2014-05-06 16:24:49,680 (keystone.common.ldap.core): DEBUG core connect LDAP init: use_tls=False tls_cacertfile=None tls_cacertdir=None tls_req_cert=2 tls_avail=1
  2014-05-06 16:24:49,680 (keystone.common.wsgi): ERROR wsgi __call__ 'str' object has no attribute 'iteritems'
  Traceback (most recent call last):
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/common/wsgi.py", line 207, in __call__
      result = method(context, **params)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/token/controllers.py", line 98, in authenticate
      context, auth)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/token/controllers.py", line 279, in _authenticate_local
      user_id, tenant_id)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/token/controllers.py", line 358, in _get_project_roles_and_ref
      user_id, tenant_id)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/assignment/core.py", line 180, in get_roles_for_user_and_project
      user_role_list = _get_user_project_roles(user_id, project_ref)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/assignment/core.py", line 161, in _get_user_project_roles
      tenant_id=project_ref['id'])
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/identity/backends/isg_ldap_svcuser.py", line 164, in _get_metadata
      group_id=group_id)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/assignment/backends/ldap.py", line 123, in _get_metadata
      tenant_id)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/assignment/backends/ldap.py", line 93, in _get_roles_for_just_user_and_project
      (self.project._id_to_dn(tenant_id))
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/assignment/backends/ldap.py", line 550, in get_role_assignments
      self.ldap_filter)
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 946, in _ldap_get_list
      six.iteritems(query_params)])))
    File "/usr/local/share-keystone.venv/lib/python2.6/site-packages/six.py", line 498, in iteritems
      return iter(getattr(d, _iteritems)(**kw))
  AttributeError: 'str' object has no attribute 'iteritems'

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1316686/+subscriptions