yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1428949

Title:
  Fernet tokens do not support domain scopes

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  Attempting to get a domain-scoped token with the Fernet token provider
  returns a token - everything appears to have worked. When validating
  that token though, it appears to be unpacked as a project-scoped
  token, which ultimately fails.

  The short of it is that domain-scope support doesn't really exist yet,
  and the current behavior will only work if the hierarchical
  multitenancy effort successfully migrates domains to be projects.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1428949/+subscriptions