yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #90798
[Bug 1939700] Re: Keystone LDAP jobs are failing with ldap_modify: No such object (32)
The fix has merged, so I'm closing this out. Feel free to re-open if
this is still an issue.
** Changed in: keystone
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1939700
Title:
Keystone LDAP jobs are failing with ldap_modify: No such object (32)
Status in OpenStack Identity (keystone):
Fix Released
Bug description:
If you enable LDAP in a devstack deployment you get errors about
ldap_modify failing.
Example local.conf:
enable_service ldap
LDAP_PASSWORD=ldap_password
Failure:
LDAP_PASSWORD is nomoresecret
+ lib/ldap:install_ldap:133 : local slappass
++ lib/ldap:install_ldap:134 : slappasswd -s nomoresecret
+ lib/ldap:install_ldap:134 : slappass='{SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO'
+ lib/ldap:install_ldap:135 : printf 'LDAP secret is {SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO\n'
LDAP secret is {SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO
+ lib/ldap:install_ldap:138 : _ldap_varsubst /opt/stack/devstack/files/ldap/manager.ldif.in '{SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO'
+ lib/ldap:_ldap_varsubst:55 : local infile=/opt/stack/devstack/files/ldap/manager.ldif.in
+ lib/ldap:_ldap_varsubst:56 : local 'slappass={SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO'
+ lib/ldap:_ldap_varsubst:57 : sed -e '
s|${LDAP_OLCDB_NUMBER}|1|
s|${SLAPPASS}|{SSHA}/osxUNAJm+sWLGkdQu2Y3n6uMqRlrIiO|
s|${LDAP_ROOTPW_COMMAND}|replace|
s|${BASE_DC}|openstack|
s|${BASE_DN}|dc=openstack,dc=org|
s|${MANAGER_DN}|cn=Manager,dc=openstack,dc=org|
' /opt/stack/devstack/files/ldap/manager.ldif.in
+ lib/ldap:install_ldap:139 : sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/ldap.2825.9hlx71VbGB/manager.ldif
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldap_modify: No such object (32)
matched DN: cn=config
modifying entry "olcDatabase={1}hdb,cn=config"
+ lib/ldap:install_ldap:1 : exit_trap
+ ./stack.sh:exit_trap:507 : local r=32
++ ./stack.sh:exit_trap:508 : jobs -p
+ ./stack.sh:exit_trap:508 : jobs=
+ ./stack.sh:exit_trap:511 : [[ -n '' ]]
+ ./stack.sh:exit_trap:517 : '[' -f '' ']'
+ ./stack.sh:exit_trap:522 : kill_spinner
+ ./stack.sh:kill_spinner:417 : '[' '!' -z '' ']'
+ ./stack.sh:exit_trap:524 : [[ 32 -ne 0 ]]
+ ./stack.sh:exit_trap:525 : echo 'Error on exit'
Error on exit
+ ./stack.sh:exit_trap:527 : type -p generate-subunit
+ ./stack.sh:exit_trap:528 : generate-subunit 1628755633 252 fail
+ ./stack.sh:exit_trap:530 : [[ -z /opt/stack/logs ]]
+ ./stack.sh:exit_trap:533 : /usr/bin/python3.8 /opt/stack/devstack/tools/worlddump.py -d /opt/stack/logs
+ ./stack.sh:exit_trap:542 : exit 32
This is also affecting keystone LDAP domain-specific drivers job.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1939700/+subscriptions
References