yahoo-eng-team team mailing list archive

[Brad Pokorny <brad_pokorny@xxxxxxxxxxxx>]

I'm going to close this one as won't fix, as there hasn't been any
activity on the original issue for a while, and there's no good way to
solve this in Horizon.

As David mentions, if Keystone tokens can't be authenticated across
regions, the only way to not require logging into a previously logged in
region would be to store extra tokens in the session. That's highly
undesirable.

We deal with this issue in our production environment currently (we
currently use PKI tokens), and our plan is to use Fernet tokens. Fernet
tokens should enable tokens to be authenticated across different
Keystones, as long as the Keystones share Fernet keys.

** Changed in: horizon
       Status: Triaged => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1332726

Title:
  Multi-region management from Horizon requires endless authentications

Status in OpenStack Dashboard (Horizon):
  Invalid

Bug description:
  I am deploying Horizon to manage multiple regions by updating
  AVAILABLE_REGIONS in
  /opt/stack/horizon/openstack_dashboard/local/local_settings.py.

  I notice that it asks for authentication for each region to login -
  which is OK. However, once authenticated for all regions, when I try
  to switch to an already authenticated region, it asks for
  authentication regardless. This makes this solution very annoying.

  Once authenticated for all regions, it should not require to keep
  authenticating.

  Is there a work around for this?

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1332726/+subscriptions