On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:
Hi all,
I'm using the Keystone split backend code (H2) with both identity and
assignment using SQL drivers. During the process of authentication
thru Horizon, I'm getting the following error in the log:
Traceback (most recent call last):
File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py",
line 240, in __call__
result = method(context, **params)
File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line
80, in authenticate
context, auth)
File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line
257, in _authenticate_local
user_id, tenant_id)
File
"/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line
371, in _get_project_roles_and_ref
user_id, tenant_id)
File "/usr/lib/python2.6/site-packages/keystone/identity/core.py",
line 123, in get_roles_for_user_and_project
user_id, tenant_id)
File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 125, in get_roles_for_user_and_project
user_role_list = _get_user_project_roles(user_id, project_ref)
File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 107, in _get_user_project_roles
metadata_ref.get('roles', {}), False)
File "/usr/lib/python2.6/site-packages/keystone/common/manager.py",
line 44, in _wrapper
return f(*args, **kw)
File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py",
line 216, in _roles_from_role_dicts
if ((not d.get('inherited_to') and not inherited) or
This looks like a bug, and, if I guess correctly, Henry Nash's
inheritance change is to blame.
commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
" Implement role assignment inheritance (OS-INHERIT extension)"
Please file it in Launchpad,
There are known issues with Unicode and LDAP, and I suspect you are
tripping over that.
AttributeError: 'unicode' object has no attribute 'get'
I'm using a fresh tenant/role/user that were created using the V2.0.
Has anybody faced this problem too?
Thanks.
_______________________________________________
OpenStack-dev mailing list
[email protected]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
_______________________________________________
OpenStack-dev mailing list
[email protected]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
