yahoo-eng-team team mailing list archive

[OpenStack Infra <1525250@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/279908
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=e913001cbedb4dd8748023ede31115a032de83f8
Submitter: Jenkins
Branch:    master

commit e913001cbedb4dd8748023ede31115a032de83f8
Author: Steve Martinelli <stevemar@xxxxxxxxxx>
Date:   Sat Feb 13 20:42:30 2016 -0500

    handle unicode names for federated users
    
    the previous logic that handled getting the assertions from
    the environment did not account for utf8 characters
    
    Co-Authored-By: David Stanek <dstanek@xxxxxxxxxxx>
    Closes-Bug: 1525250
    
    Change-Id: I90f4885161a72758986a652e845b4017f9cdcfb7


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1525250

Title:
  Failure when federated user name contains non ascii characters

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  When logging in with openid-connect, I get

   '{"error": {"message": "An unexpected error prevented the server from
  fulfilling your request: 'ascii' codec can't decode byte 0xc3 in
  position 5: ordinal not in range(128) (Disable debug mode to suppress
  these details.)", "code": 500, "title": "Internal Server Error"}}'

  My name has an 'å'. I suspect there is a connection.

  Coincidentally(?), if I do the following in  python shell:

  >>> unicode('Jon Kåre Hellan')

  I get 'UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in
  position 5: ordinal not in range(128)'

  This is on liberty, using federation in contrib. On master, federation
  has been moved up from contrib, but I couldn't see any code changes
  that would help.

  Stack trace:

  Traceback (most recent call last):
    File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 248, in __call__
      result = method(context, **params)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/controllers.py", line 315, in federated_sso_auth
      protocol_id)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/controllers.py", line 297, in federated_authentication
      return self.authenticate_for_token(context, auth=auth)
    File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line 385, in authenticate_for_token
      self.authenticate(context, auth_info, auth_context)
    File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line 510, in authenticate
      auth_context)
    File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py", line 69, in authenticate
      self.identity_api)
    File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py", line 144, in handle_unscoped_token
      federation_api, identity_api)
    File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py", line 188, in apply_mapping_filter
      identity_provider, protocol, assertion)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/core.py", line 90, in evaluate
      mapped_properties = rule_processor.process(assertion_data)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line 470, in process
      new_local = self._update_local_mapping(local, direct_maps)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line 611, in _update_local_mapping
      new_value = self._update_local_mapping(v, direct_maps)
    File "/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line 613, in _update_local_mapping
      new_value = v.format(*direct_maps)
  UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 5: ordinal not in range(128)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1525250/+subscriptions