yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #69345
[Bug 1718747] Re: Unable to delete domain with users in it
** Changed in: keystone/newton
Status: Confirmed => Won't Fix
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1718747
Title:
Unable to delete domain with users in it
Status in OpenStack Identity (keystone):
In Progress
Status in OpenStack Identity (keystone) newton series:
Won't Fix
Status in OpenStack Identity (keystone) ocata series:
Confirmed
Status in OpenStack Identity (keystone) pike series:
Confirmed
Bug description:
Attempting to delete a domain which contains users and projects may
yield an UnexpectedError similiar to this
Sep 21 19:37:17 vagrant-openSUSE-Leap devstack@keystone.service[23894]: DEBUG keystone.common.sql.core [None req-707ec264-b10c-4079-94bb-2af01db58aab None None] Conflict project: (pymysql.err.IntegrityError) (1451, u'Cannot delete or update a parent row: a foreign key constraint fails (`keystone`.`user`, CONSTRAINT `user_ibfk_1` FOREIGN KEY (`domain_id`) REFERENCES `project` (`id`))') [SQL: u'DELETE FROM project WHERE project.id = %(id)s'] [parameters: {'id': u'63d2d5446e364f00b3181bf49c62c5b8'}] {{(pid=23897) wrapper /opt/stack/keystone/keystone/common/sql/core.py:550}}
Sep 21 19:37:17 vagrant-openSUSE-Leap devstack@keystone.service[23894]: WARNING keystone.common.wsgi [None req-707ec264-b10c-4079-94bb-2af01db58aab None None] An unexpected error prevented the server from fulfilling your request.: UnexpectedError: An unexpected error prevented the server from fulfilling your request.
Steps to reproduce:
1. Install devstack
2. create a domain 'foo'
openstack domain create foo
3. create a user in domain 'foo'
openstack user create --password equifax --domain foo foo_user
4. create a project in domain 'foo'
openstack project create --domain foo foo_project
5. enable domain user 'foo_user' access to project 'foo_project'
openstack role add --user foo_user --project foo_project admin
6. now disable domain 'foo'
openstack domain set --disable foo
7. attempt to delete domain 'foo' will yield an expected error
mentioned above
openstack domain delete foo
This was introduced in:
https://github.com/openstack/keystone/commit/2bd88d30e1d2873470af7f40db45a99e07e12ce6
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1718747/+subscriptions
References