Guys,

I filed a bug https://bugs.launchpad.net/keystone/+bug/1210590 to address this 
problem. Also, I posted a comment with the solution I found to bypass the 
problem.

Thanks,

--Otavio

From: Henry Nash [mailto:[email protected]]
Sent: sexta-feira, 9 de agosto de 2013 04:22
To: OpenStack Development Mailing List
Subject: Re: [openstack-dev] Problem using Keystone split backend

Yep, agreed, certainly my code....if you can provide as much info in the bug as 
possible, and I'll get straight on it.

Henry
On 9 Aug 2013, at 00:14, Adam Young wrote:


On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:

Hi all,

I'm using the Keystone split backend code (H2) with both identity and 
assignment using SQL drivers. During the process of authentication thru 
Horizon, I'm getting the following error in the log:

Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 240, in 
__call__
    result = method(context, **params)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
80, in authenticate
    context, auth)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
257, in _authenticate_local
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 
371, in _get_project_roles_and_ref
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 123, 
in get_roles_for_user_and_project
    user_id, tenant_id)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 
125, in get_roles_for_user_and_project
    user_role_list = _get_user_project_roles(user_id, project_ref)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 
107, in _get_user_project_roles
    metadata_ref.get('roles', {}), False)
  File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 44, 
in _wrapper
    return f(*args, **kw)
  File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 
216, in _roles_from_role_dicts
    if ((not d.get('inherited_to') and not inherited) or


This looks like a bug, and, if I guess correctly, Henry Nash's inheritance 
change is to blame.

commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
" Implement role assignment inheritance (OS-INHERIT extension)"

Please file it in Launchpad,


There are known issues with Unicode and LDAP, and I suspect you are tripping 
over that.



AttributeError: 'unicode' object has no attribute 'get'


I'm using a fresh tenant/role/user that were created using the V2.0. Has 
anybody faced this problem too?

Thanks.




_______________________________________________

OpenStack-dev mailing list

[email protected]<mailto:[email protected]>

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

_______________________________________________
OpenStack-dev mailing list
[email protected]<mailto:[email protected]>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

_______________________________________________
OpenStack-dev mailing list
[email protected]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to