← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1544703] [NEW] webSSO URLs may not be accessible under some network configurations

 

Public bug reported:

WebSSO uses OPENSTACK_KEYSTONE_URL to generate URLs to point a browser
at. Under many configurations this is fine, but in setups where there
may be multiple networks, it can be problematic. For instance, if
horizon is configured to talk to keystone over a network that is
private, OPENSTACK_KEYSTONE_URL will not be reachable from a browser. A
fuller explanation is in https://blueprints.launchpad.net/horizon/+spec
/configurable-websso-keystone-url but this seems more like a bug than a
feature. The upshot is adding a second setting to allow a separate
WEBSSO keystone url.

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1544703

Title:
  webSSO URLs may not be accessible under some network configurations

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  WebSSO uses OPENSTACK_KEYSTONE_URL to generate URLs to point a browser
  at. Under many configurations this is fine, but in setups where there
  may be multiple networks, it can be problematic. For instance, if
  horizon is configured to talk to keystone over a network that is
  private, OPENSTACK_KEYSTONE_URL will not be reachable from a browser.
  A fuller explanation is in
  https://blueprints.launchpad.net/horizon/+spec/configurable-websso-
  keystone-url but this seems more like a bug than a feature. The upshot
  is adding a second setting to allow a separate WEBSSO keystone url.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1544703/+subscriptions


Follow ups