yahoo-eng-team team mailing list archive

[Jose Castro Leon <jose.castro.leon@xxxxxxx>]

Public bug reported:

After the ocata upgrade we are seeing some errors while authenticating
users using v2 api and ec2 credentials

Same as reported in here: 
https://ask.openstack.org/en/question/106557/swift3s3-api-errors-when-authenticating-with-ec2-keys/

2017-05-11 16:05:22.453 6081 INFO keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] POST http://controller:35357/v2.0/s3tokens
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] need more than 4 values to unpack
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi Traceback (most recent call last):
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 228, in __call__
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     result = method(req, **params)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_log/versionutils.py", line 178, in wrapped
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     return func_or_cls(*args, **kwargs)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/contrib/ec2/controllers.py", line 264, in authenticate
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     ec2credentials=ec2Credentials)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi ValueError: need more than 4 values to unpack
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi


The commit "Remove metadata from token provider" with ID (I4b37289c06df2012ed4473227df5c309440af162) broke the ec2 v2 controller. The call to _authenticate expects 5 parameters in v2 and 4 in v3 giving that exception.

Also the removal of the issue_v2_token token provider method did not
have effect in the ec2 v2 controller that it is still using it.

The bug was introduced in Ocata and it is still there in the master
branch

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1691111

Title:
  ec2tokens errors in v2 api after Ocata upgrade

Status in OpenStack Identity (keystone):
  New

Bug description:
  After the ocata upgrade we are seeing some errors while authenticating
  users using v2 api and ec2 credentials

  Same as reported in here: 
  https://ask.openstack.org/en/question/106557/swift3s3-api-errors-when-authenticating-with-ec2-keys/

  2017-05-11 16:05:22.453 6081 INFO keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] POST http://controller:35357/v2.0/s3tokens
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] need more than 4 values to unpack
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi Traceback (most recent call last):
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 228, in __call__
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     result = method(req, **params)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_log/versionutils.py", line 178, in wrapped
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     return func_or_cls(*args, **kwargs)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/contrib/ec2/controllers.py", line 264, in authenticate
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     ec2credentials=ec2Credentials)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi ValueError: need more than 4 values to unpack
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi

  
  The commit "Remove metadata from token provider" with ID (I4b37289c06df2012ed4473227df5c309440af162) broke the ec2 v2 controller. The call to _authenticate expects 5 parameters in v2 and 4 in v3 giving that exception.

  Also the removal of the issue_v2_token token provider method did not
  have effect in the ec2 v2 controller that it is still using it.

  The bug was introduced in Ocata and it is still there in the master
  branch

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1691111/+subscriptions