Reviewed: https://review.openstack.org/465530
Committed:
https://git.openstack.org/cgit/openstack/keystone/commit/?id=820d9d9a84f2a65677a2654b36a4677eaeba59fc
Submitter: Jenkins
Branch: master
commit 820d9d9a84f2a65677a2654b36a4677eaeba59fc
Author: Jose Castro Leon <jose.castro.l...@cern.ch>
Date: Wed May 17 14:00:34 2017 +0200
Fix ec2tokens validation in v2 after regression in metadata_ref removal
Since the last patch in the ocata release that removed the metadata_ref,
the ec2tokens api is broken due to unable to unpack the result of the
authenticate command (4 elements) while expecting to expand it into 5.
Change-Id: I71c4b51444ea9f7a3016b68d7dee9a4747e9c0fd
Closes-Bug: #1691111
Closes-Bug: #1635389
** Changed in: keystone
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1691111
Title:
ec2tokens errors in v2 api after Ocata upgrade
Status in OpenStack Identity (keystone):
Fix Released
Bug description:
After the ocata upgrade we are seeing some errors while authenticating
users using v2 api and ec2 credentials
Same as reported in here:
https://ask.openstack.org/en/question/106557/swift3s3-api-errors-when-authenticating-with-ec2-keys/
2017-05-11 16:05:22.453 6081 INFO keystone.common.wsgi
[req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] POST
http://controller:35357/v2.0/s3tokens
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi
[req-ddd8c06b-d4a2-46ba-9c0e-34aa597d6734 - - - - -] need more than 4 values to
unpack
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi Traceback (most
recent call last):
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi File
"/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 228, in
__call__
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi result =
method(req, **params)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi File
"/usr/lib/python2.7/site-packages/oslo_log/versionutils.py", line 178, in
wrapped
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi return
func_or_cls(*args, **kwargs)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi File
"/usr/lib/python2.7/site-packages/keystone/contrib/ec2/controllers.py", line
264, in authenticate
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi
ec2credentials=ec2Credentials)
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi ValueError: need more
than 4 values to unpack
2017-05-11 16:05:22.721 6081 ERROR keystone.common.wsgi
The commit "Remove metadata from token provider" with ID
(I4b37289c06df2012ed4473227df5c309440af162) broke the ec2 v2 controller. The
call to _authenticate expects 5 parameters in v2 and 4 in v3 giving that
exception.
Also the removal of the issue_v2_token token provider method did not
have effect in the ec2 v2 controller that it is still using it.
The bug was introduced in Ocata and it is still there in the master
branch
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1691111/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
