Package: keystone
Version: 2:14.0.1-1
Severity: important
Tags: upstream

Enabling and configuring LDAP integration leads to a type confusion issue:

ERROR keystone.common.wsgi [xxx] simple_bind() argument 1 must be str or None, 
not bytes: TypeError: simple_bind() argument 1 must be str or None, not bytes
ERROR keystone.common.wsgi Traceback (most recent call last):
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/common/wsgi.py", line 148, in __call__
ERROR keystone.common.wsgi     result = method(req, **params)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/common/controller.py", line 103, in 
wrapper
ERROR keystone.common.wsgi     return f(self, request, filters, **kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/controllers.py", line 71, in 
list_users
ERROR keystone.common.wsgi     domain_scope=domain, hints=hints
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/common/manager.py", line 116, in 
wrapped
ERROR keystone.common.wsgi     __ret_val = __f(*args, **kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/core.py", line 416, in wrapper
ERROR keystone.common.wsgi     return f(self, *args, **kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/core.py", line 426, in wrapper
ERROR keystone.common.wsgi     return f(self, *args, **kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/core.py", line 1061, in 
list_users
ERROR keystone.common.wsgi     ref_list = 
self._handle_shadow_and_local_users(driver, hints)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/core.py", line 1044, in 
_handle_shadow_and_local_users
ERROR keystone.common.wsgi     return driver.list_users(hints) + fed_res
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/core.py", line 
87, in list_users
ERROR keystone.common.wsgi     return self.user.get_all_filtered(hints)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/core.py", line 
327, in get_all_filtered
ERROR keystone.common.wsgi     for user in self.get_all(query, hints)]
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/core.py", line 
319, in get_all
ERROR keystone.common.wsgi     hints=hints)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 1850, in get_all
ERROR keystone.common.wsgi     return super(EnabledEmuMixIn, 
self).get_all(ldap_filter, hints)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 1552, in get_all
ERROR keystone.common.wsgi     for x in self._ldap_get_all(hints, ldap_filter)]
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/common/driver_hints.py", line 42, in 
wrapper
ERROR keystone.common.wsgi     return f(self, hints, *args, **kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 1500, in _ldap_get_all
ERROR keystone.common.wsgi     with self.get_connection() as conn:
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 1251, in get_connection
ERROR keystone.common.wsgi     conn.simple_bind_s()
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 892, in simple_bind_s
ERROR keystone.common.wsgi     clientctrls=clientctrls)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/keystone/identity/backends/ldap/common.py", 
line 747, in simple_bind_s
ERROR keystone.common.wsgi     with self._get_pool_connection() as conn:
ERROR keystone.common.wsgi   File "/usr/lib/python3.7/contextlib.py", line 112, 
in __enter__
ERROR keystone.common.wsgi     return next(self.gen)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldappool/__init__.py", line 344, in connection
ERROR keystone.common.wsgi     conn = self._get_connection(bind, passwd)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldappool/__init__.py", line 294, in 
_get_connection
ERROR keystone.common.wsgi     conn = self._create_connector(bind, passwd)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldappool/__init__.py", line 253, in 
_create_connector
ERROR keystone.common.wsgi     self._bind(conn, bind, passwd)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldappool/__init__.py", line 226, in _bind
ERROR keystone.common.wsgi     conn.simple_bind_s(bind, passwd)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldappool/__init__.py", line 100, in 
simple_bind_s
ERROR keystone.common.wsgi     clientctrls)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1215, in simple_bind_s
ERROR keystone.common.wsgi     res = 
self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1197, in 
_apply_method_s
ERROR keystone.common.wsgi     return func(self,*args,**kwargs)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 443, in simple_bind_s
ERROR keystone.common.wsgi     msgid = 
self.simple_bind(who,cred,serverctrls,clientctrls)
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 437, in simple_bind
ERROR keystone.common.wsgi     return 
self._ldap_call(self._l.simple_bind,who,cred,RequestControlTuples(serverctrls),RequestControlTuples(clientctrls))
ERROR keystone.common.wsgi   File 
"/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 313, in _ldap_call
ERROR keystone.common.wsgi     result = func(*args,**kwargs)
ERROR keystone.common.wsgi TypeError: simple_bind() argument 1 must be str or 
None, not bytes

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-2-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages keystone depends on:
ii  adduser                                 3.118
ii  apache2                                 2.4.38-2
ii  dbconfig-common                         2.0.11
ii  debconf [debconf-2.0]                   1.5.70
ii  libapache2-mod-wsgi-py3                 4.6.5-1
ii  lsb-base                                10.2018112800
ii  python-q-text-as-data [q-text-as-data]  1.7.4+2018.12.21+git+28f776ed46-1
ii  python3-keystone                        2:14.0.1-1
ii  python3-keystoneclient                  1:3.17.0-2
ii  python3-openstackclient                 3.16.2-1
ii  sqlite3                                 3.26.0+fossilbc891ac6b-2
ii  ssl-cert                                1.0.39

keystone recommends no packages.

Versions of packages keystone suggests:
ii  apparmor  2.13.2-7

-- debconf information excluded


Marco Schuster
Web Developer

Interone GmbH
Theresienhoehe 12 | 80339 Muenchen | Germany
http://interone.de | http://facebook.com/interone.de
+49-89-55186-3166 | +49-173-9032923
[email protected]

https://goo.gl/maps/As0Nz | https://goo.gl/maps/Xq4XNVGqkmu


An Agency of BBDO Worldwide
AG München HRA 79582
Geschäftsführer: Matthias Schäfer, Stephan Tewes, Frank Wolfram

Information contained in this message is confidential and may be legally 
privileged. If you are not the addressee indicated in this message (or 
responsible for the delivery of the message to such person), you may not copy, 
disclose or deliver this message or any part of it to anyone, in any form. In 
such case, you should delete this message and kindly notify the sender by reply 
Email. Opinions, conclusions and other information in this message that does 
not relate to the official business of Interone GmbH shall be understood as 
neither given nor endorsed by it.

Reply via email to