[Yahoo-eng-team] [Bug 1479569] Re: Output from "role assignment list" is not useful

2015-10-06 Thread Steve Martinelli
i'd prefer to fix this on the server side, adding more fields on the server side would be much faster, and save the client from doing a bunch of look ups ** Changed in: python-openstackclient Importance: Undecided => Medium ** Also affects: keystone Importance: Undecided Status: New

[Yahoo-eng-team] [Bug 1475091] Re: Missing name field for trusts

2015-10-08 Thread Steve Martinelli
Morgan, Gilles and I spoke about this on IRC. I think we agreed that making the columns in the trust database have a unique constraint is the way to go. So if two requests came to create trusts with the same trustor/trustee/roles/expiration/scope/impersonation, then the second would bring up an exc

[Yahoo-eng-team] [Bug 1504891] [NEW] http docs are out of date

2015-10-10 Thread Steve Martinelli
Public bug reported: The docs in this section: http://docs.openstack.org/developer/keystone /http-api.html#i-am-a-deployer reference an editable section in keystone-paste.ini ([app:service_v3]). this section is now managed by entry points in setup.cfg ** Affects: keystone Importance: Undec

[Yahoo-eng-team] [Bug 1504892] [NEW] create a version package

2015-10-10 Thread Steve Martinelli
acked and documented. ** Affects: keystone Importance: Undecided Assignee: Steve Martinelli (stevemar) Status: In Progress -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net

[Yahoo-eng-team] [Bug 1507031] Re: Add and then delete a user, results in unexpected error on the Openstack UI

2015-10-16 Thread Steve Martinelli
if this is a keystone bug, which by the sound of it, isn't likely, we would need some logs ** Also affects: horizon Importance: Undecided Status: New ** Changed in: keystone Status: New => Incomplete -- You received this bug notification because you are a member of Yahoo! Engin

[Yahoo-eng-team] [Bug 1512207] Re: Fix usage of assertions in Manila unit tests

2015-11-02 Thread Steve Martinelli
keystone patch here: https://review.openstack.org/#/c/240762/ ** Also affects: keystone Importance: Undecided Status: New ** Changed in: keystone Status: New => In Progress ** Changed in: keystone Importance: Undecided => Low ** Changed in: keystone Assignee: (unassigne

[Yahoo-eng-team] [Bug 1512305] Re: /v3/auth/tokens response attribute missing

2015-11-02 Thread Steve Martinelli
The content here: http://specs.openstack.org/openstack/keystone- specs/api/v3/identity-api-v3.html is considered the source of truth. The content under http://developer.openstack.org/api-ref- identity-v3.html is known to be out of date, much more than just /v3/auth/tokens is out of date, that is a

[Yahoo-eng-team] [Bug 1514030] Re: /v3/policies response attribute missing

2015-11-07 Thread Steve Martinelli
what are you adding this? it's not in the schema [0] or saved in the backend [1] 0 - https://github.com/openstack/keystone/blob/master/keystone/policy/schema.py 1 - https://github.com/openstack/keystone/blob/master/keystone/policy/backends/sql.py i'm not understanding how a project is associated

[Yahoo-eng-team] [Bug 1514030] Re: /v3/policies response attribute missing

2015-11-08 Thread Steve Martinelli
Looks like the examples under /policies here: are incorrect http://developer.openstack.org/api-ref-identity-v3.html I suggest looking at: http://specs.openstack.org/openstack/keystone- specs/api/v3/identity-api-v3.html Feel free to fix the inconsistencies in the api-site, they are here: https://g

[Yahoo-eng-team] [Bug 1514905] [NEW] unable to login with v3 auth

2015-11-10 Thread Steve Martinelli
Public bug reported: With a current devstack setup, in local_settings.py, change 'OPENSTACK_KEYSTONE_URL' to end in /v3 instead of /v2.0, this should trigger v3 auth flows. But instead I can't log in at all, enabling debug, i see the following: 2015-11-10 16:17:53.240277 DEBUG:keystoneclient.aut

[Yahoo-eng-team] [Bug 1514905] Re: unable to login with v3 auth

2015-11-10 Thread Steve Martinelli
I had to add "OPENSTACK_API_VERSIONS", and the 'identity' block to get this to work. ** Changed in: horizon Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.

[Yahoo-eng-team] [Bug 1517503] Re: Cinder v2 - Volume type resource attributes not documented

2015-11-18 Thread Steve Martinelli
?? how is this a keystone issue? are you referring to some online document? ** Also affects: cinder Importance: Undecided Status: New ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which

[Yahoo-eng-team] [Bug 1499555] Re: You can crash keystone or make the DB very slow by assigning many roles

2015-11-19 Thread Steve Martinelli
until this is brought up as a real issue in a real environment and not a script that creates churn for the sake of churn, we won't be fixing it in keystone. ** Changed in: keystone Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Yahoo! E

[Yahoo-eng-team] [Bug 1518997] Re: No unit test for duplicate project creation.

2015-11-23 Thread Steve Martinelli
Bugs should be reserved for issues that end users are hitting with the current code base. If there is a missing test, just add it to the code base. Unless adding a test is showing a bug in the code, then there is no need to create a bug. I'm going to mark the bug as invalid, but I'd be more than

[Yahoo-eng-team] [Bug 1519210] [NEW] opt-out of certain notifications

2015-11-23 Thread Steve Martinelli
Public bug reported: keystone currently support a lot of event notifications, just see http://docs.openstack.org/developer/keystone/event_notifications.html It would be nice if there was a configuration option to allow users to opt-out of notifications they didn't care about. This could be as si

[Yahoo-eng-team] [Bug 1420104] Re: quota set failed

2015-11-23 Thread Steve Martinelli
*** This bug is a duplicate of bug 1475831 *** https://bugs.launchpad.net/bugs/1475831 ** This bug has been marked a duplicate of bug 1475831 Some compute quotas are not being set -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribe

[Yahoo-eng-team] [Bug 1472860] Re: install devstack error

2015-11-24 Thread Steve Martinelli
lin, looks like there wasn't really an issue, had to sync up requirements or install parsley. marking as invalid ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Ident

[Yahoo-eng-team] [Bug 1519588] [NEW] ldap backend for roles is not deprecated

2015-11-24 Thread Steve Martinelli
Public bug reported: With the LDAP backend for assignment and resource being potentially removed in Mitaka, we probably don't want the role backend to support LDAP either. It currently does and is not marked for deprecation either https://github.com/openstack/keystone/blob/master/keystone/assignme

[Yahoo-eng-team] [Bug 1520085] Re: keystone 0.7.1 for ubuntu14.04, create user admin with error not found 404

2015-11-26 Thread Steve Martinelli
bug submitter claims it's not a bug, good enough for me ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1520085

[Yahoo-eng-team] [Bug 1391116] Re: keystone user-password-update also accept blank password.

2015-11-26 Thread Steve Martinelli
CLI for keystoneclient has been deprecated, assigning the bug to openstackclient. marking as won't fix for keystoneclient ** Also affects: python-openstackclient Importance: Undecided Status: New ** Summary changed: - keystone user-password-update also accept blank password. + passwo

[Yahoo-eng-team] [Bug 1154809] Re: Volume detach fails via OSAPI: AmbiguousEndpoints

2015-11-26 Thread Steve Martinelli
finding the service catalog through python bindings is available now, following sean's comment i don't believe this is an issue any longer. if it is, please re-open ** Changed in: python-keystoneclient Status: Confirmed => Invalid -- You received this bug notification because you are a me

[Yahoo-eng-team] [Bug 1468395] Re: Versions of oslo.i18n higher than 1.17.0 cause ImportError

2015-11-26 Thread Steve Martinelli
reading the backlog, this seems fixed on the keystoneclient side, marking this as fix released ** Changed in: python-keystoneclient Importance: Undecided => Medium ** Changed in: python-keystoneclient Status: Confirmed => Fix Released -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1312971] Re: mod_wsgi exception processing UTF-8 Header

2015-11-26 Thread Steve Martinelli
we will not be pursuing any more PKI related work, as of Mitaka the keystone team has deprecated PKI tokens. ** Changed in: python-keystoneclient Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1240163] Re: Can't store a PKI token with a large catalog

2015-11-26 Thread Steve Martinelli
same reasoning for keystoneclient issue, won't fix. ** Changed in: python-keystoneclient Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad

[Yahoo-eng-team] [Bug 1214686] Re: Keystone client passes name instead of username

2015-11-26 Thread Steve Martinelli
there doesn't seem to be an issue with keystoneclient? ** Changed in: python-keystoneclient Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.

[Yahoo-eng-team] [Bug 1273831] Re: Keystone v2.0 documentation shows unsupported "versionId", "versionList", "versionInfo" fields

2015-11-26 Thread Steve Martinelli
i am very unclear as to what the bug is here (from a keystone and keystoneclient perspective). we do not support or advertise the user of versionId, versionList and versionInfo in our APIs. if you are using a third party library, file a bug with them. ** Changed in: python-keystoneclient St

[Yahoo-eng-team] [Bug 1252299] Re: keystone endpoint-create default region

2015-11-26 Thread Steve Martinelli
so the CLI still defaults to 'regionOne', but it's deprecated in favor of openstackclient. openstackclient, and the python bindings in keystoneclient do not default region name to anything and let the server handle the default name (RegionOne), so there is nothing left to fix here, we won't be fix

[Yahoo-eng-team] [Bug 1517929] Re: Eventlet removal

2015-11-26 Thread Steve Martinelli
use https://blueprints.launchpad.net/keystone/+spec/removed-as-of-mitaka ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.n

[Yahoo-eng-team] [Bug 1476770] Re: _translate_from_glance fails with "AttributeError: id" in grenade

2015-11-26 Thread Steve Martinelli
ksm is released for kilo, marking this as fix-released for keystonemiddleware ** Changed in: keystonemiddleware Status: New => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/

[Yahoo-eng-team] [Bug 1440493] Re: Crash with python-memcached==1.5.4

2015-11-26 Thread Steve Martinelli
marking as invalid for ksm, we have python-memcached>=1.5.6 as of mitaka ** Changed in: keystonemiddleware Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.l

[Yahoo-eng-team] [Bug 1467589] Re: Remove Cinder V1 support

2015-11-27 Thread Steve Martinelli
we've been setting the default volume api version 2 since 1.7.0, we're at 1.9.0 now. marking this as fix released for openstackclient, see commit: https://github.com/openstack/python- openstackclient/commit/f14251669f96d6010581702417828f4380144aa2 ** Changed in: python-openstackclient Statu

[Yahoo-eng-team] [Bug 1505356] Re: Can't upload images in Python 3.4

2015-11-27 Thread Steve Martinelli
** Changed in: python-openstackclient Status: New => Incomplete ** Changed in: python-openstackclient Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/b

[Yahoo-eng-team] [Bug 1520737] Re: User creation is allowed with empty password

2015-11-28 Thread Steve Martinelli
*** This bug is a duplicate of bug 1391116 *** https://bugs.launchpad.net/bugs/1391116 ** This bug has been marked a duplicate of bug 1391116 password prompts should check for empty string -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1023948] Re: v3api - create WADL for v3 api

2015-11-29 Thread Steve Martinelli
we don't use WADLs for v3, we settled on RST and publish here: http://specs.openstack.org/openstack/keystone-specs/api/v3/identity- api-v3.html ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, w

[Yahoo-eng-team] [Bug 1065017] Re: A new simple Keystone init script

2015-11-29 Thread Steve Martinelli
init scripts are not keystone's responsibility, simply because they will be different for each deployment. this is a configuration management issue and folks should use tools they want and prefer rather than something the keystone team bakes up. ** Changed in: keystone Status: Triaged => Wo

[Yahoo-eng-team] [Bug 1367480] Re: Add test for grant CRUD on test_backend

2015-11-29 Thread Steve Martinelli
i think the testing here is sufficient https://github.com/openstack/keystone/blob/5de11025f45ca10d2b02b70234c1305fae91766c/keystone/tests/unit/test_backend.py#L1101-L1148 and covers a lot of what was in the abandoned patch ** Changed in: keystone Status: In Progress => Invalid -- You rece

[Yahoo-eng-team] [Bug 1400245] Re: v3 endpoint create api will return 500 error if don't specify region when using kvs backend

2015-11-29 Thread Steve Martinelli
the json schema should address this now, as it's a required field: https://github.com/openstack/keystone/blob/master/keystone/catalog/schema.py ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, whi

[Yahoo-eng-team] [Bug 1136403] Re: Test for LDAP group update or renaming

2015-11-29 Thread Steve Martinelli
we are going to deprecate support for create/update/delete for users and groups in LDAP since it is a very uncommon use case. marking as won't fix. ** Changed in: keystone Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Te

[Yahoo-eng-team] [Bug 1294532] Re: Create user with tenantid failed when using ldap driver

2015-11-29 Thread Steve Martinelli
we will be deprecating support for user and group create/delete/update in mitaka, marking this as won't fix as it is not a security issue and does not align with project plans ** Changed in: keystone Status: In Progress => Won't Fix -- You received this bug notification because you are a

[Yahoo-eng-team] [Bug 1517694] Re: delete project fail using ldap backend identity driver

2015-11-29 Thread Steve Martinelli
we'll be deprecating all LDAP backends that aren't identity ** Changed in: keystone Status: Incomplete => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/b

[Yahoo-eng-team] [Bug 1211643] Re: Update user name not supported by LDAP identity driver

2015-11-29 Thread Steve Martinelli
write support for the identity ldap backend is being deprecated ** Changed in: keystone Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.ne

[Yahoo-eng-team] [Bug 1512744] Re: Unable to retrieve LDAP domain user and group list on Horizon.

2015-11-29 Thread Steve Martinelli
im marking keystone as invalid for now since this seems like it's fuel related, update if i'm incorrect ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keys

[Yahoo-eng-team] [Bug 1285065] Re: list_role_assignments does not return group roles assignments

2015-11-29 Thread Steve Martinelli
role assignments in ldap has been deprecated for at least one release, this will not be fixed ** Changed in: keystone Status: Triaged => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone

[Yahoo-eng-team] [Bug 1520428] Re: User enable status consider everything as false except specific word 'true'

2015-11-29 Thread Steve Martinelli
use openstackclient for this, the use of `keystone' has been deprecated, i'm surprised you are not receiving error/deprecation warnings when using that command. in openstackclient, it would be `openstack user create xyz123` with --enable and --disable being FLAGS and not options like in keystonecl

[Yahoo-eng-team] [Bug 1518917] Re: add missing package in doc

2015-11-29 Thread Steve Martinelli
the patches associated with this bug are abandoned and as written in #2, install_venv.py is gone from master ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack I

[Yahoo-eng-team] [Bug 1514030] Re: /v3/policies response attribute missing

2015-11-29 Thread Steve Martinelli
lots of back and forth on this one, i think we agreed that it's fine on specs.openstack.org/keystone ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity

[Yahoo-eng-team] [Bug 993396] Re: should migration.py have register_models and unregister_models

2015-11-29 Thread Steve Martinelli
it seems like nova has removed the mechanism to register and unregister models, as have other projects, like congress: https://github.com/openstack/congress/commit/63976719d6cfdc8d5518c7378d52d30c739b8ebd by the looks of it, only glance supports it: http://hound.openstack.org/?q=register_model&i=n

[Yahoo-eng-team] [Bug 1002917] Re: keystoneclient token-get should work with --token/SERVICE_TOKEN

2015-11-29 Thread Steve Martinelli
sorry dolph, as you have told me many times, the admin token itself carries no authorization. if you disagree open a bug against openstackclient to have this as a client specific feature, keystone server shouldn't change the way it's handled ** Changed in: keystone Status: Confirmed => Won'

[Yahoo-eng-team] [Bug 1070637] Re: create tokens scoped to endpoints

2015-11-29 Thread Steve Martinelli
this is a blueprint/spec ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1070637 Title: create tokens scop

[Yahoo-eng-team] [Bug 1121648] Re: convert SVG to png as part of doc build process

2015-11-29 Thread Steve Martinelli
we no longer have images in our docs ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1121648 Title: conv

[Yahoo-eng-team] [Bug 1130955] Re: Add support for nova quantum security group proxy

2015-11-29 Thread Steve Martinelli
this should be reproposed as a blueprint/spec, and since it's been ~2 years with no comments, i'm going to assume it's OK to mark this as won't fix since no one wants to pick up the work ** Changed in: keystone Status: Triaged => Won't Fix -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1155255] Re: revoke token does not revoke the tokens created by the original

2015-11-29 Thread Steve Martinelli
this is covered by revocation events and audit ids that have been around for a few releases ** Changed in: keystone Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keyst

[Yahoo-eng-team] [Bug 1277298] Re: Deleting users takes a long time if there are many tokens

2015-11-29 Thread Steve Martinelli
*** This bug is a duplicate of bug 1332666 *** https://bugs.launchpad.net/bugs/1332666 ** This bug has been marked a duplicate of bug 1332666 Poor performance on delete_tokens due to missing indexes -- You received this bug notification because you are a member of Yahoo! Engineering Team,

[Yahoo-eng-team] [Bug 1206396] Re: Name validations for compute resources

2015-11-29 Thread Steve Martinelli
marking keystone as invalid since we have a duplicate bug here: 1519580 and we now use JSON schema validation for our v3 calls ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribe

[Yahoo-eng-team] [Bug 1387379] Re: No documentation on the fact that List users/groups require a domain to be specified in multi domain configuration

2015-11-29 Thread Steve Martinelli
this was fixed by the patch in #6 ** Changed in: keystone Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1387379 Title:

[Yahoo-eng-team] [Bug 1469974] Re: kilo version swift doesn't work showing swiftclient:Authorrization Failure the resource could not be found

2015-11-29 Thread Steve Martinelli
sounds like this was user error in the way auth_version was being passed in, doesn't affect keystone ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keyston

[Yahoo-eng-team] [Bug 1488715] Re: There is an unnecessary condition judgment at the keystone.token.controllers._get_project_id_from_auth function

2015-11-29 Thread Steve Martinelli
there is no obvious bug here, if it is a refactor, simply propose the patch ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.laun

[Yahoo-eng-team] [Bug 1291157] Re: idp deletion should trigger token revocation

2015-11-30 Thread Steve Martinelli
unassigning due to inactivity and failing patch sets, also this doesn't affect keystoneclient ** Changed in: python-keystoneclient Status: Triaged => Invalid ** Changed in: keystone Status: In Progress => Confirmed ** Changed in: keystone Assignee: Marek Denis (marek-denis) =>

[Yahoo-eng-team] [Bug 1519588] Re: ldap backend for roles is not deprecated

2015-12-01 Thread Steve Martinelli
use bp https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of- mitaka to track this ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). htt

[Yahoo-eng-team] [Bug 1521812] Re: Different Tenants/Projects should allow users with same name

2015-12-01 Thread Steve Martinelli
different users with the same name should be in different domains. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bug

[Yahoo-eng-team] [Bug 1521844] [NEW] pycadf ID validation fails for multi-domain IDs

2015-12-01 Thread Steve Martinelli
Public bug reported: With the latest pycadf release (2.0.0), there is a more strict validation on the ID fields of various CADF resources, in this case, the initiator is failing to validate some keystone user IDs. This only happens when multi-domains are configured. An ID for a user in a multi-do

[Yahoo-eng-team] [Bug 1519449] Re: Remove Python 2.6 Support

2015-12-08 Thread Steve Martinelli
** Changed in: python-keystoneclient Status: Fix Committed => Fix Released ** Changed in: python-keystoneclient-kerberos Status: Fix Committed => Fix Released ** Changed in: keystonemiddleware Status: Fix Committed => Fix Released ** Changed in: keystone Status: In Pr

[Yahoo-eng-team] [Bug 1351031] [NEW] Add OS-FEDERATION to scoped federation tokens

2014-07-31 Thread Steve Martinelli
Public bug reported: Currently, when a federated user gets a token, it has an OS-FEDERATION section under 'user', which contains information about the idp and protocol. However when the same user uses the unscoped token to get a scoped token, we should put the same information in there as well. T

[Yahoo-eng-team] [Bug 1351029] [NEW] Add OS-FEDERATION to scoped federation tokens

2014-07-31 Thread Steve Martinelli
Public bug reported: Currently, when a federated user gets a token, it has an OS-FEDERATION section under 'user', which contains information about the idp and protocol. However when the same user uses the unscoped token to get a scoped token, we should put the same information in there as well. T

[Yahoo-eng-team] [Bug 1351038] [NEW] Add OS-FEDERATION to scoped federation tokens

2014-07-31 Thread Steve Martinelli
re as well. This will help support revocation events for federated tokens, i.e. revoking all tokens based on IDP id. ** Affects: keystone Importance: Undecided Assignee: Steve Martinelli (stevemar) Status: In Progress -- You received this bug notification because you are a membe

[Yahoo-eng-team] [Bug 1352115] [NEW] stop spamming cadf event authn messages in log

2014-08-03 Thread Steve Martinelli
Importance: Undecided Assignee: Steve Martinelli (stevemar) Status: In Progress -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1352115 Title: stop spamming cadf event authn

[Yahoo-eng-team] [Bug 1224326] Re: runtest.sh dose not have a parameter "--debug" for debuging test case

2014-09-21 Thread Steve Martinelli
We want to encourage the use of tox rather than run_tests, can you try running tox with -e debug `tox -e debug` - it should enable debugging. ** Changed in: keystone Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team

[Yahoo-eng-team] [Bug 1255321] Re: v3 PKI token requests result in 500 error when run in apache

2014-09-21 Thread Steve Martinelli
This was fixed when PKIZ was added to Keystone: https://github.com/openstack/keystone/commit/063070f21ffc3345e2b25904ff4a1ae89f539c32 ** Changed in: keystone Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which

[Yahoo-eng-team] [Bug 1368490] Re: oslo.middleware.sizelimit configuration conflict

2014-09-21 Thread Steve Martinelli
>From what I can tell this isn't a Keystone bug, but I appreciate the heads up. If I'm wrong, let me know. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bug

[Yahoo-eng-team] [Bug 1261104] [NEW] trustee not able to perform role operations

2013-12-14 Thread Steve Martinelli
d') and context['is_admin']):    raise exception.Forbidden() There are two checks for matching trustor, when one should be trustee. Also the admin check is pointless, since it should be just trustee or trustor. ** Affects: keystone Importance: Undecided Assign

[Yahoo-eng-team] [Bug 1261622] [NEW] change text or behaviour of the admin token in keystone.conf

2013-12-16 Thread Steve Martinelli
Public bug reported: Given the outcome of: https://bugs.launchpad.net/keystone/+bug/1259440 And a recent colleague asking why he can't use the admin token to get a list of projects we should address the misconception surrounding this part of the keystone.conf file. Currently, it reads: [DEFAULT

[Yahoo-eng-team] [Bug 1271235] [NEW] User Defined Regions not supported

2014-01-21 Thread Steve Martinelli
Public bug reported: According to the API Spec, we should be able to create a region with a specific id: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#create-region-with-specific-id-put-regionsuser_defined_region_id I don't believ

[Yahoo-eng-team] [Bug 1631092] Re: home-page url link need to change

2016-10-06 Thread Steve Martinelli
please don't open bugs for these issues, just submit a patch. there's no real end user issue here. ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (k

[Yahoo-eng-team] [Bug 1628135] Re: Integrate Identity back end with LDAP in Administrator Guide

2016-10-07 Thread Steve Martinelli
** Changed in: keystone Status: Triaged => Invalid ** Changed in: keystone Milestone: ocata-1 => None -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/162813

[Yahoo-eng-team] [Bug 1460492] Re: List credentials by type

2016-10-11 Thread Steve Martinelli
** Changed in: python-openstackclient Status: Fix Released => Triaged -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1460492 Title: List credentials by type

[Yahoo-eng-team] [Bug 1592169] Re: cached tokens break Liberty to Mitaka upgrade

2016-10-11 Thread Steve Martinelli
** Changed in: keystone/mitaka Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1592169 Title: cached tokens break Libert

[Yahoo-eng-team] [Bug 1631319] Re: Can't deploy overcloud of Mitaka on CentOS

2016-10-12 Thread Steve Martinelli
Thanks for the quick analysis here Ben. Looking at newton and future releases, if you are using the "keystone-manage bootstrap" option to setup keystone, then the domain ID won't be "default" it'll be some UUID. Your best bet going forward is to use the domain name only, it'll always be "Default" (

[Yahoo-eng-team] [Bug 1632981] Re: keystone delete role gives no output when operation is successful

2016-10-13 Thread Steve Martinelli
this is as-designed. no delete operations give feedback. just as in linux if something does not give you an error, you can assume it occurred just fine. https://www.quora.com/What-is-the-appropriate-HTTP-response-code-to-a -successful-DELETE-request ** Changed in: keystone Status: New => I

[Yahoo-eng-team] [Bug 1636052] Re: multi-region ,servers with volume attachments

2016-10-24 Thread Steve Martinelli
Not a keystone bug, what tool did you use to perform the operation? ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bu

[Yahoo-eng-team] [Bug 1637214] [NEW] [api-ref] include changelog from v3.0 -> 3.7

2016-10-27 Thread Steve Martinelli
Public bug reported: Include https://github.com/openstack/keystone-specs/blob/master/attic/v3 /identity-api-v3.rst in the file https://raw.githubusercontent.com/openstack/keystone/master/api- ref/source/v3/index.rst 3.7 == Newton, work your way back from there. -

[Yahoo-eng-team] [Bug 1637850] Re: newton openstack-keystone service not created on Centos7

2016-10-31 Thread Steve Martinelli
** Also affects: ubuntu Importance: Undecided Status: New ** No longer affects: ubuntu -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1637850 Title: newt

[Yahoo-eng-team] [Bug 1637682] Re: scoped string defined as 'unscope: {}'

2016-10-31 Thread Steve Martinelli
In this case, the API needs to be updated, it should include the "unscoped" option: https://github.com/openstack/keystone/blob/master /api-ref/source/v3/authenticate-v3.inc The issue here is that we moved our APIs from one repo to another and some content went missing in the transition. Informati

[Yahoo-eng-team] [Bug 1635306] Re: After newton deployment _member_ role is missing in keystone

2016-10-31 Thread Steve Martinelli
Patch https://review.openstack.org/#/c/389783/ closes the bug from the keystone side ** Also affects: keystone Importance: Undecided Status: New ** Changed in: keystone Status: New => In Progress ** Changed in: keystone Importance: Undecided => High ** Changed in: keystone

[Yahoo-eng-team] [Bug 1635306] Re: After newton deployment _member_ role is missing in keystone

2016-10-31 Thread Steve Martinelli
** Also affects: keystone/newton Importance: Undecided Status: New ** Changed in: keystone/newton Status: New => In Progress ** Changed in: keystone/newton Importance: Undecided => High ** Changed in: keystone/newton Assignee: (unassigned) => Adam Young (ayoung) -- You

[Yahoo-eng-team] [Bug 1082248] Re: Use uuidutils instead of uuid.uuid4()

2016-11-08 Thread Steve Martinelli
This is an implementation detail and we won't be fixing it in Keystone. There's no gain as far as I can tell. ** Changed in: keystone Status: New => Invalid ** No longer affects: keystone -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1638603] Re: Identity LDAP does not support AD nested groups

2016-11-10 Thread Steve Martinelli
** Changed in: keystone Status: In Progress => Fix Released ** Also affects: keystone/newton Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https:/

[Yahoo-eng-team] [Bug 1637850] Re: newton openstack-keystone service not created on Centos7

2016-11-11 Thread Steve Martinelli
Hi Scott, I manage the keystone queue for launchpad, it's meant for keystone bugs, the issue you're having (IIUC) is related to the RPM package. I don't want to simply mark the bug as invalid and leave you in a lurch. So I'll provide some pointers: The red hat published install guide can be seen h

[Yahoo-eng-team] [Bug 1591916] Re: Named arguments should be used for assertValidUserResponse() in unittest case

2016-11-11 Thread Steve Martinelli
No movement in months, there is no direct user impact here so I'm marking as invalid. ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). htt

[Yahoo-eng-team] [Bug 1641625] [NEW] RFE: add more info in the k2k assertion

2016-11-14 Thread Steve Martinelli
Public bug reported: Currently, the user's name (and domain name), their roles, the project they authenticated with (and project's domain name) are supplied in the k2k assertion that keystone generates. There has been a request that the user's groups also be included in the assertion. ** Affects

[Yahoo-eng-team] [Bug 1641623] [NEW] keystone-manage doctor needs developer docs

2016-11-14 Thread Steve Martinelli
Public bug reported: There are no developer docs on how to create a new doctor check, or how the existing ones work. They should be added to a new section in the "developer docs" here: http://docs.openstack.org/developer/keystone /#developers-documentation ** Affects: keystone Importance: Me

[Yahoo-eng-team] [Bug 1641621] [NEW] keystone-manage doctor needs tests

2016-11-14 Thread Steve Martinelli
Public bug reported: there are no tests for any keystone-manage doctor commands. they should be created here: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_cli.py ** Affects: keystone Importance: Low Status: Triaged ** Tags: test-improvement -- You r

[Yahoo-eng-team] [Bug 1641639] [NEW] use mapping_id for shadow users

2016-11-14 Thread Steve Martinelli
Public bug reported: Currently, shadow users are created for users that log in through federation. New "local_user" accounts are created with a new UUID. Rather than creating a new UUID, we should re-use the mapping_id backend that was employed with LDAP users. ** Affects: keystone Importanc

[Yahoo-eng-team] [Bug 1641645] [NEW] PCI: a locked out user must ask an admin to unlock their account

2016-11-14 Thread Steve Martinelli
Public bug reported: As noted in the bug title, this is a cumbersome process, a user should be able to reset their password if it expired. (and potentially if locked out -- that's up for debate). ** Affects: keystone Importance: Medium Status: New ** Tags: pci -- You received th

[Yahoo-eng-team] [Bug 1641642] [NEW] users that are blacklisted for PCI support should not have failed login attempts counted

2016-11-14 Thread Steve Martinelli
Public bug reported: The main idea behind the user ID blacklist for PCI was to allow service accounts to not have to change their password. As noted in [1], a by- product of any PCI implementation is a vulnerability to a DoS (a malicious user attempting to login X times and locking out a user). Th

[Yahoo-eng-team] [Bug 1641652] [NEW] cache invalidation should be wrapped to local context

2016-11-14 Thread Steve Martinelli
Public bug reported: When [1] merged, it fixed many caching issues and bug, but created another. The region invalidation should be wrapped to the local context. Patch: https://review.openstack.org/#/c/380376/ ** Affects: keystone Importance: High Assignee: Boris Bobrov (bbobrov)

[Yahoo-eng-team] [Bug 1641654] [NEW] include healthcheck middleware by default

2016-11-14 Thread Steve Martinelli
Public bug reported: The healthcheck middleware is published by oslo, used in glance and magnum, and one less thing for deployers to add to keystone. Let's add it in. Patch: https://review.openstack.org/#/c/387731/ ** Affects: keystone Importance: Medium Assignee: Jesse Keating (jesse-

[Yahoo-eng-team] [Bug 1641660] [NEW] enable CADF notification format by default

2016-11-14 Thread Steve Martinelli
Public bug reported: The current default notification format is the home-brewed openstack- styled format, that provides minimal information about the user. For a few releases now, all new notifications have adhered to the CADF format. We should switch over to the CADF format, which provides compat

[Yahoo-eng-team] [Bug 1621200] Re: password created_at does not honor timezones

2016-11-14 Thread Steve Martinelli
** Changed in: keystone/newton Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1621200 Title: password created_at does n

[Yahoo-eng-team] [Bug 1641816] [NEW] enable ``cache_on_issue`` by default

2016-11-14 Thread Steve Martinelli
Public bug reported: keystone provides a configuration option to "pre-cache" a token, it is cached upon issue. In the Newton release this was disabled by default, we should enable it in Ocata. ** Affects: keystone Importance: Medium Assignee: Matt Fischer (mfisch) Status: In Pr

[Yahoo-eng-team] [Bug 1641818] [NEW] admin guide: update caching document

2016-11-14 Thread Steve Martinelli
Public bug reported: The caching document in the admin guide is sorely out of date by at least 2 releases. Update it to reflect current status. http://docs.openstack.org/admin-guide/identity-caching-layer.html ** Affects: keystone Importance: Low Assignee: Eric Brown (ericwb) S

  1   2   3   4   5   6   >