yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1548267] [NEW] openstack token issue failed for an OpenLDAP user

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Alexandre Carnal <1548267@xxxxxxxxxxxxxxxxxx>
Date: Mon, 22 Feb 2016 10:47:19 -0000
Reply-to: Bug 1548267 <1548267@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Public bug reported:

When issuing the command "openstack token issue", for an openldap user,
the command returns: Could not find user: <openldapuser>

Looking at the keystone log, openstack token issue command search the
user into sql.

The env variable for the openldapuser:
export OS_PROJECT_DOMAIN_ID=d02cc542b9c741999bc7addda943c701
export OS_PROJECT_DOMAIN=gvadc
export OS_USER_DOMAIN=gvadc
export OS_PROJECT_NAME=ibmcloud
export OS_USERNAME=acarnal
export OS_PASSWORD=My$up€rPa$$w0rd
export OS_AUTH_URL=http://srv-horizon01-p:5000/v3
export OS_IDENTITY_API_VERSION=3

Keystone logs:
2016-02-22 11:32:20.385 26133 INFO keystone.common.wsgi [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] POST http://srv-horizon01-p:5000/v3/auth/tokens
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Could not find user: acarnal
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core Traceback (most recent call last):
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/core.py", line 175, in _validate_and_normalize_auth_data
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     user_name, domain_ref['id'])
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 433, in wrapper
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return f(self, *args, **kwargs)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 444, in wrapper
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return f(self, *args, **kwargs)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in decorate
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     should_cache_fn)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in get_or_create
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     async_creator) as value:
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in __enter__
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return self._enter()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     generated = self._enter_create(createdtime)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in _enter_create
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created = self.creator()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in gen_value
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created_value = creator()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in creator
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return fn(*arg, **kw)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 868, in get_user_by_name
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     ref = driver.get_user_by_name(user_name, domain_id)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/backends/sql.py", line 145, in get_user_by_name
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     raise exception.UserNotFound(user_id=user_name)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core UserNotFound: Could not find user: acarnal
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
2016-02-22 11:32:20.408 26133 WARNING keystone.common.wsgi [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Authorization failed. Could not find user: acarnal (Disable debug mode to suppress these details.) (Disable debug mode to suppress these details.) from 192.168.6.30
Could not find user: acarnal (Disable debug mode to suppress these details.) (HTTP 401) (Request-ID: req-b77c4fae-5176-4751-9154-da61749a1a1c)

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1548267

Title:
  openstack token issue failed for an OpenLDAP user

Status in OpenStack Identity (keystone):
  New

Bug description:
  When issuing the command "openstack token issue", for an openldap
  user, the command returns: Could not find user: <openldapuser>

  Looking at the keystone log, openstack token issue command search the
  user into sql.

  The env variable for the openldapuser:
  export OS_PROJECT_DOMAIN_ID=d02cc542b9c741999bc7addda943c701
  export OS_PROJECT_DOMAIN=gvadc
  export OS_USER_DOMAIN=gvadc
  export OS_PROJECT_NAME=ibmcloud
  export OS_USERNAME=acarnal
  export OS_PASSWORD=My$up€rPa$$w0rd
  export OS_AUTH_URL=http://srv-horizon01-p:5000/v3
  export OS_IDENTITY_API_VERSION=3

  Keystone logs:
  2016-02-22 11:32:20.385 26133 INFO keystone.common.wsgi [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] POST http://srv-horizon01-p:5000/v3/auth/tokens
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Could not find user: acarnal
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core Traceback (most recent call last):
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/core.py", line 175, in _validate_and_normalize_auth_data
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     user_name, domain_ref['id'])
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 433, in wrapper
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return f(self, *args, **kwargs)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 444, in wrapper
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return f(self, *args, **kwargs)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in decorate
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     should_cache_fn)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in get_or_create
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     async_creator) as value:
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in __enter__
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return self._enter()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     generated = self._enter_create(createdtime)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in _enter_create
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created = self.creator()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in gen_value
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created_value = creator()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in creator
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return fn(*arg, **kw)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 868, in get_user_by_name
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     ref = driver.get_user_by_name(user_name, domain_id)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File "/usr/lib/python2.7/site-packages/keystone/identity/backends/sql.py", line 145, in get_user_by_name
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     raise exception.UserNotFound(user_id=user_name)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core UserNotFound: Could not find user: acarnal
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
  2016-02-22 11:32:20.408 26133 WARNING keystone.common.wsgi [req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Authorization failed. Could not find user: acarnal (Disable debug mode to suppress these details.) (Disable debug mode to suppress these details.) from 192.168.6.30
  Could not find user: acarnal (Disable debug mode to suppress these details.) (HTTP 401) (Request-ID: req-b77c4fae-5176-4751-9154-da61749a1a1c)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1548267/+subscriptions
Follow ups

[Bug 1548267] Re: openstack token issue failed for an OpenLDAP user
From: Morgan Fainberg, 2016-03-02