yahoo-eng-team team mailing list archive

[OpenStack Infra <1691111@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/465530
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=820d9d9a84f2a65677a2654b36a4677eaeba59fc
Submitter: Jenkins
Branch:    master

commit 820d9d9a84f2a65677a2654b36a4677eaeba59fc
Author: Jose Castro Leon <jose.castro.leon@xxxxxxx>
Date:   Wed May 17 14:00:34 2017 +0200

    Fix ec2tokens validation in v2 after regression in metadata_ref removal
    
    Since the last patch in the ocata release that removed the metadata_ref,
    the ec2tokens api is broken due to unable to unpack the result of the
    authenticate command (4 elements) while expecting to expand it into 5.
    
    Change-Id: I71c4b51444ea9f7a3016b68d7dee9a4747e9c0fd
    Closes-Bug: #1691111
    Closes-Bug: #1635389


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1691111

Title:
  ec2tokens errors in v2 api after Ocata upgrade

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  After the ocata upgrade we are seeing some errors while authenticating
  users using v2 api and ec2 credentials

  Same as reported in here: 
  https://ask.openstack.org/en/question/106557/swift3s3-api-errors-when-authenticating-with-ec2-keys/

  2017-05-11 16:05:22.453 6081 INFO keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] POST http://controller:35357/v2.0/s3tokens
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi [req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] need more than 4 values to unpack
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi Traceback (most recent call last):
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 228, in __call__
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     result = method(req, **params)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_log/versionutils.py", line 178, in wrapped
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     return func_or_cls(*args, **kwargs)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/contrib/ec2/controllers.py", line 264, in authenticate
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi     ec2credentials=ec2Credentials)
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi ValueError: need more than 4 values to unpack
  2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi

  
  The commit "Remove metadata from token provider" with ID (I4b37289c06df2012ed4473227df5c309440af162) broke the ec2 v2 controller. The call to _authenticate expects 5 parameters in v2 and 4 in v3 giving that exception.

  Also the removal of the issue_v2_token token provider method did not
  have effect in the ec2 v2 controller that it is still using it.

  The bug was introduced in Ocata and it is still there in the master
  branch

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1691111/+subscriptions