← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1600268] [NEW] Upgrading from Liberty to Mitaka erased passwords from SQL backend

 

Public bug reported:

This bug was reported in IRC on July 7, 2016 by jmlowe. Creating this
for tracking purposes.

IRC log: http://eavesdrop.openstack.org/irclogs/%23openstack-keystone
/%23openstack-keystone.2016-07-07.log.html

Environment:
 - 3 total controllers (2 RDO and 2 Ubuntu) - all installed from vendor packages
 - 3 node Galera cluster
 - installed Liberty circa-December 2015
 - upgraded to recent Mitaka version

jmlowe found that after the migration LDAP users could login fine, but
SQL users could not. Upon further investigation the password hashes were
no longer in the database (the new `password` table was empty).

The lack of password records in the Passwords table and the fact that
the password column was removed from the User table leads me to believe
that migration 091 is to blame.

So far I have not been able to reproduce the issue.

** Affects: keystone
     Importance: Undecided
         Status: Incomplete


** Tags: upgrade

** Changed in: keystone
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1600268

Title:
  Upgrading from Liberty to Mitaka erased passwords from SQL backend

Status in OpenStack Identity (keystone):
  Incomplete

Bug description:
  This bug was reported in IRC on July 7, 2016 by jmlowe. Creating this
  for tracking purposes.

  IRC log: http://eavesdrop.openstack.org/irclogs/%23openstack-keystone
  /%23openstack-keystone.2016-07-07.log.html

  Environment:
   - 3 total controllers (2 RDO and 2 Ubuntu) - all installed from vendor packages
   - 3 node Galera cluster
   - installed Liberty circa-December 2015
   - upgraded to recent Mitaka version

  jmlowe found that after the migration LDAP users could login fine, but
  SQL users could not. Upon further investigation the password hashes
  were no longer in the database (the new `password` table was empty).

  The lack of password records in the Passwords table and the fact that
  the password column was removed from the User table leads me to
  believe that migration 091 is to blame.

  So far I have not been able to reproduce the issue.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1600268/+subscriptions


Follow ups