Public bug reported:

When issuing the command "openstack token issue", for an openldap user,
the command returns: Could not find user: <openldapuser>

Looking at the keystone log, openstack token issue command search the
user into sql.

The env variable for the openldapuser:
export OS_PROJECT_DOMAIN_ID=d02cc542b9c741999bc7addda943c701
export OS_PROJECT_DOMAIN=gvadc
export OS_USER_DOMAIN=gvadc
export OS_PROJECT_NAME=ibmcloud
export OS_USERNAME=acarnal
export OS_PASSWORD=My$up€rPa$$w0rd
export OS_AUTH_URL=http://srv-horizon01-p:5000/v3
export OS_IDENTITY_API_VERSION=3

Keystone logs:
2016-02-22 11:32:20.385 26133 INFO keystone.common.wsgi 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] POST 
http://srv-horizon01-p:5000/v3/auth/tokens
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Could not find user: 
acarnal
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core Traceback (most 
recent call last):
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/auth/plugins/core.py", line 175, in 
_validate_and_normalize_auth_data
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     user_name, 
domain_ref['id'])
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 433, in 
wrapper
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
f(self, *args, **kwargs)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 444, in 
wrapper
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
f(self, *args, **kwargs)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in 
decorate
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
should_cache_fn)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in 
get_or_create
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
async_creator) as value:
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in 
__enter__
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
self._enter()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     generated = 
self._enter_create(createdtime)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in 
_enter_create
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created = 
self.creator()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in 
gen_value
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
created_value = creator()
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in 
creator
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
fn(*arg, **kw)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 868, in 
get_user_by_name
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     ref = 
driver.get_user_by_name(user_name, domain_id)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/backends/sql.py", line 145, 
in get_user_by_name
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     raise 
exception.UserNotFound(user_id=user_name)
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core UserNotFound: 
Could not find user: acarnal
2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
2016-02-22 11:32:20.408 26133 WARNING keystone.common.wsgi 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Authorization failed. 
Could not find user: acarnal (Disable debug mode to suppress these details.) 
(Disable debug mode to suppress these details.) from 192.168.6.30
Could not find user: acarnal (Disable debug mode to suppress these details.) 
(HTTP 401) (Request-ID: req-b77c4fae-5176-4751-9154-da61749a1a1c)

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1548267

Title:
  openstack token issue failed for an OpenLDAP user

Status in OpenStack Identity (keystone):
  New

Bug description:
  When issuing the command "openstack token issue", for an openldap
  user, the command returns: Could not find user: <openldapuser>

  Looking at the keystone log, openstack token issue command search the
  user into sql.

  The env variable for the openldapuser:
  export OS_PROJECT_DOMAIN_ID=d02cc542b9c741999bc7addda943c701
  export OS_PROJECT_DOMAIN=gvadc
  export OS_USER_DOMAIN=gvadc
  export OS_PROJECT_NAME=ibmcloud
  export OS_USERNAME=acarnal
  export OS_PASSWORD=My$up€rPa$$w0rd
  export OS_AUTH_URL=http://srv-horizon01-p:5000/v3
  export OS_IDENTITY_API_VERSION=3

  Keystone logs:
  2016-02-22 11:32:20.385 26133 INFO keystone.common.wsgi 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] POST 
http://srv-horizon01-p:5000/v3/auth/tokens
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Could not find user: 
acarnal
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core Traceback 
(most recent call last):
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/auth/plugins/core.py", line 175, in 
_validate_and_normalize_auth_data
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     user_name, 
domain_ref['id'])
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 433, in 
wrapper
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
f(self, *args, **kwargs)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 444, in 
wrapper
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
f(self, *args, **kwargs)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in 
decorate
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
should_cache_fn)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in 
get_or_create
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
async_creator) as value:
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in 
__enter__
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
self._enter()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     generated 
= self._enter_create(createdtime)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in 
_enter_create
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     created = 
self.creator()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in 
gen_value
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     
created_value = creator()
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in 
creator
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     return 
fn(*arg, **kw)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/core.py", line 868, in 
get_user_by_name
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     ref = 
driver.get_user_by_name(user_name, domain_id)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core   File 
"/usr/lib/python2.7/site-packages/keystone/identity/backends/sql.py", line 145, 
in get_user_by_name
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core     raise 
exception.UserNotFound(user_id=user_name)
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core UserNotFound: 
Could not find user: acarnal
  2016-02-22 11:32:20.406 26133 ERROR keystone.auth.plugins.core 
  2016-02-22 11:32:20.408 26133 WARNING keystone.common.wsgi 
[req-b77c4fae-5176-4751-9154-da61749a1a1c - - - - -] Authorization failed. 
Could not find user: acarnal (Disable debug mode to suppress these details.) 
(Disable debug mode to suppress these details.) from 192.168.6.30
  Could not find user: acarnal (Disable debug mode to suppress these details.) 
(HTTP 401) (Request-ID: req-b77c4fae-5176-4751-9154-da61749a1a1c)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1548267/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to