yahoo-eng-team team mailing list archive

[yechengkun <chengkun@xxxxxxxxxxxxxxx>]

** Summary changed:

- Sometimes pkiz token return Unauthorized error
+ Sometimes fernet token return Unauthorized error

** Changed in: keystone
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1557335

Title:
  Sometimes fernet token return Unauthorized error

Status in OpenStack Identity (keystone):
  Invalid

Bug description:
  when i use fernet token, I encounter a little problem.
  First i get a fernet token use command "openstack token issue":
  ------------------------------------------------+
  | Field      | Value                                                                                                                                                                                   |
  +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
  | expires    | 2016-03-15T08:02:18.042495Z                                                                                                                                                             |
  | id         | gAAAAABW57N6Znde-4YIU77SpaiYpYnU50OKZFw3VjS2mAJwq9AxSDKjCi9rTX7febkdTrFVBcFfhnex6RpaQOqDRnGChjMAwtuT2h7QI5N51hTCqH9Sp1YWtNhY5MS4QwyOpXH5dMxi4bmJt6ii4JFFo5xn25LRU9baRoO51SKUe49ChOf-kXk |
  | project_id | 2fb6a871b54e4d58bc46d91c8d387105                                                                                                                                                        |
  | user_id    | c7a0bb38da3246f99a87ccc308434124                                                                                                                                                        |
  +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
  and than i use the token to get user projects:
  curl -X GET -H "content-type: application/json" -H "X-Auth-Token: gAAAAABW57N6Znde-4YIU77SpaiYpYnU50OKZFw3VjS2mAJwq9AxSDKjCi9rTX7febkdTrFVBcFfhnex6RpaQOqDRnGChjMAwtuT2h7QI5N51hTCqH9Sp1YWtNhY5MS4QwyOpXH5dMxi4bmJt6ii4JFFo5xn25LRU9baRoO51SKUe49ChOf-kXk" http://127.0.0.1:35357/v3/users/c7a0bb38da3246f99a87ccc308434124/projects

  and I can get under response:
  {"links": {"self": "http://127.0.0.1:35357/v3/users/c7a0bb38da3246f99a87ccc308434124/projects";, "previous": null, "next": null}, "projects": [{"is_domain": false, "description": "", "links": {"self": "http://127.0.0.1:35357/v3/projects/2fb6a871b54e4d58bc46d91c8d387105"}, "enabled": true, "id": "2fb6a871b54e4d58bc46d91c8d387105", "parent_id": null, "domain_id": "default", "name": "admin"}, {"is_domain": false, "description": "", "links": {"self": "http://127.0.0.1:35357/v3/projects/bc327684c49644c4b8773a43bf3aa6cf"}, "enabled": true, "id": "bc327684c49644c4b8773a43bf3aa6cf", "parent_id": null, "domain_id": "default", "name": "demo"}]}

  but when try again to get use projects it raise:
  {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}

  I try many times to get user proejcts. sometimes it return normally,
  but sometimes it return Unauthorized error.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1557335/+subscriptions