yahoo-eng-team team mailing list archive

[Haneef Ali <1499555@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

This is applicable for UUID and PKI tokens.

Token table has extra column where we store role information.  It is a
blob with 64K limit

Basically we can do the following

   Say user is U, and Project is P
   for i =1  to  1000 ( or any large number)         
        role x = create role i  with some large name
        assign role x for user U and Project P
       create a project scoped token for user U

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1499555

Title:
  You can crash keystone or make the DB very slow by assigning many
  roles

Status in Keystone:
  New

Bug description:
  This is applicable for UUID and PKI tokens.

  Token table has extra column where we store role information.  It is a
  blob with 64K limit

  Basically we can do the following

     Say user is U, and Project is P
     for i =1  to  1000 ( or any large number)         
          role x = create role i  with some large name
          assign role x for user U and Project P
         create a project scoped token for user U

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1499555/+subscriptions