[Yahoo-eng-team] [Bug 1676925] [NEW] db_sync --expand may run downtime-incurring operations

2017-03-28 Thread Dolph Mathews
Importance: Low Assignee: Dolph Mathews (dolph) Status: Triaged ** Tags: documentation upgrades ** Changed in: keystone Status: New => Triaged -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenSta

[Yahoo-eng-team] [Bug 1459402] Re: Conceptual overview of the Keystone service catalog

2017-01-19 Thread Dolph Mathews
** Project changed: openstack-manuals => keystone ** Changed in: keystone Milestone: ocata => None ** Changed in: keystone Assignee: Alexandra Settle (alexandra-settle) => Dolph Mathews (dolph) -- You received this bug notification because you are a member of Yahoo! Enginee

[Yahoo-eng-team] [Bug 1647800] Re: keystone-manage bootstrap isn't completely idempotent

2016-12-06 Thread Dolph Mathews
Marking this as Medium in mitaka since we didn't support zero-downtime upgrades then, but this is still an unexpected behavior of bootstrap that would potentially affect an upgrade process. ** Also affects: keystone/mitaka Importance: Undecided Status: New ** Changed in:

[Yahoo-eng-team] [Bug 1647800] Re: keystone-manage bootstrap isn't completely idempotent

2016-12-06 Thread Dolph Mathews
Marking this as High because the consequence is perceivable downtime during a zero-downtime upgrade. ** Also affects: keystone/newton Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1630092] Re: Admin password reset should be exempt from password history validation

2016-10-12 Thread Dolph Mathews
** Also affects: keystone/newton Importance: Undecided Status: New ** Changed in: keystone/newton Importance: Undecided => Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1623117] [NEW] Prevent keystone from serving requests when schema or data migrations are not up to date

2016-09-13 Thread Dolph Mathews
Public bug reported: There are three scenarios during a rolling upgrade process where we could prevent operators from doing the "wrong thing" (doing things out of order): 1) Operators running code from the next release before `keystone-manage db_sync --expand` has been run: If you run the next

[Yahoo-eng-team] [Bug 1618653] [NEW] Legacy migration repository still accepts new migrations

2016-08-30 Thread Dolph Mathews
Public bug reported: Now that we have rolling upgrades in place, we should have a unit test in place to ensure that developers (and reviewers) do not land additional patches to the legacy migration repository and expect everything to continue working, as that would be akin to rewriting our

[Yahoo-eng-team] [Bug 1615024] [NEW] Forbid invalid operations in expand, migrate, and contract repositories

2016-08-19 Thread Dolph Mathews
Public bug reported: In the legacy migration repository, we've traditionally allowed any sort of database manipulation, including tables to be created, data to be migrated, columns to be dropped, etc. Recently, we introduced a constraint on those upgrades to prevent non-additive operations from

[Yahoo-eng-team] [Bug 1615020] [NEW] Test that expand, migrate, contract repos have the same number of steps

2016-08-19 Thread Dolph Mathews
Public bug reported: To ensure that each of the 3 new migration repositories contain the same number of steps, we should introduce a test to catch developers attempting to introduce a new step to any one of the new repos, without introducing no-op steps to all of them. Upon failure, the test

[Yahoo-eng-team] [Bug 1615014] [NEW] Prevent --expand, --migrate, --contract from being run out of order

2016-08-19 Thread Dolph Mathews
Public bug reported: Currently, keystone does nothing to prevent an operator from running each step of the rolling migration process out of order. Theoretically, most migrations will fail if the table they're looking to drop does not exist, etc, but that might not always be the case. The

[Yahoo-eng-team] [Bug 1595468] Re: Cannot encode revokeTree object when mongo is configured as cache

2016-07-07 Thread Dolph Mathews
Moved this to oslo.cache, since keystone.common.cache.backends.mongo:MongoCacheBackend moved to oslo_cache.backends.mongo:MongoCacheBackend. I'm guessing we need to add a third case to that method to attempt to pickle complex objects? ** Changed in: keystone Importance: Undecided => Medium **

[Yahoo-eng-team] [Bug 1585147] Re: If http & https proxy is enabled on system then openstack services wont work as expected.

2016-07-06 Thread Dolph Mathews
The 503 is coming from an intermediary proxy (likely whatever you're using to implement HTTPS), not keystone (keystone is not capable of returning a 503). ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering

[Yahoo-eng-team] [Bug 1575368] Re: Federation Unable to handle multiple groups

2016-07-06 Thread Dolph Mathews
Our stable branch policy dictates that we don't backport features, and an API-impacting one would be the first to be denied in review. Sadly, it looks like a significant oversight in the original implementation, though. ** Changed in: keystone Status: New => Invalid -- You received this

[Yahoo-eng-team] [Bug 1567025] Re: Can't use TokenManager. authenticate() with publicurl

2016-07-06 Thread Dolph Mathews
Is there a patch up for this? It was filed under the "wrong" project, so the bots would not have been able to link a patch. ** Project changed: keystone => python-keystoneclient -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1572341] Re: Failed migration 90 -> 91 Can't DROP 'ixu_user_name_domain_id'

2016-06-23 Thread Dolph Mathews
** Also affects: keystone/mitaka Importance: Undecided Status: New ** Changed in: keystone/mitaka Importance: Undecided => High -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1588927] Re: /v3/groups?name= bypasses group_filter for LDAP

2016-06-10 Thread Dolph Mathews
** Also affects: keystone/mitaka Importance: Undecided Status: New ** Changed in: keystone/mitaka Status: New => In Progress ** Changed in: keystone/mitaka Importance: Undecided => Medium ** Changed in: keystone/mitaka Assignee: (unassigned) => Matthew Edmonds

[Yahoo-eng-team] [Bug 1591022] [NEW] Transient test failure in test_v3_auth.TestAuthTOTP

2016-06-09 Thread Dolph Mathews
Public bug reported: In 0.06% of my test runs, test_v3_auth.TestAuthTOTP fails with either: Traceback (most recent call last): File "/root/keystone/keystone/tests/unit/test_v3_auth.py", line 4904, in test_with_multiple_credential$ self.v3_create_token(auth_data,

[Yahoo-eng-team] [Bug 1589993] Re: Murano cannot deploy with federated user

2016-06-08 Thread Dolph Mathews
I imagine this will be addressed by (or nearly addressed by) having concrete role assignments for federated users in keystone: https://review.openstack.org/#/c/284943/ ** Also affects: keystone Importance: Undecided Status: New ** Changed in: keystone Assignee: (unassigned) => Ron

[Yahoo-eng-team] [Bug 1588860] Re: keystone-manage bootstrap cannot recover admin account

2016-06-03 Thread Dolph Mathews
** Also affects: keystone/mitaka Importance: Undecided Status: New ** Changed in: keystone/mitaka Status: New => In Progress ** Changed in: keystone/mitaka Assignee: (unassigned) => Dolph Mathews (dolph) ** Changed in: keystone Importance: Undecided =&g

[Yahoo-eng-team] [Bug 1588860] [NEW] keystone-manage bootstrap cannot recover admin account

2016-06-03 Thread Dolph Mathews
'll change an admin's password if you specify something different [Fri 09:31] dolphm so the options are, I guess, to delete the admin account in the db or to use the auth_token middleware? ** Affects: keystone Importance: Undecided Assignee: Dolph Mathews (dolph) Status: I

[Yahoo-eng-team] [Bug 1576315] [NEW] Critically fail on startup if fernet_setup has not been run

2016-04-28 Thread Dolph Mathews
Public bug reported: As a result of the Fernet work session at the Newton design summit in Austin: Prior to making Fernet the default token provider, keystone should fail on startup if fernet_setup has not been run when fernet is also the configured token provider. Today, keystone will instead

[Yahoo-eng-team] [Bug 1536300] Re: Catalog response is inconsistent for domain scoped token

2016-03-09 Thread Dolph Mathews
The example catalog for a domain scoped token looks correct to me: those are endpoints that do not presume tenancy in the URL. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1541656] Re: OAuth Identity token gives Forbidden

2016-03-09 Thread Dolph Mathews
This seems like a missing use case in openstackclient? If you give it an existing token, why is it trying to rescope it? What is it trying to rescope the token to? ** Also affects: python-openstackclient Importance: Undecided Status: New ** Changed in: keystone Status: New =>

[Yahoo-eng-team] [Bug 1547031] Re: Can't distinguish users through openid login

2016-03-09 Thread Dolph Mathews
Your mapping is unconditionally resulting in this behavior. See the mapping documentation: http://docs.openstack.org/developer/keystone/mapping_combinations.html ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1516946] Re: keystone WSGI fail: ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option

2016-03-08 Thread Dolph Mathews
I've run into this myself. This is the result of using outdated WSGI startup scripts. As part of your upgrade process, you must switch to the ones from the release you're trying to deploy. This is because keystone has refactored some responsibilities out of those WSGI scripts, so your scripts

[Yahoo-eng-team] [Bug 1553149] Re: Instance in ERROR state due to ConnectFailure with keystone

2016-03-08 Thread Dolph Mathews
Apache will refuse connections that it cannot assign to threads once MaxClients is exhausted, and if you're only running 10 threads, then I'm also guessing that your MaxClients is set to be less than the number of concurrent connections you're throwing at it. I'm closing this because this is just

[Yahoo-eng-team] [Bug 1455582] Re: Hypervisor compromise may result in malicious trust creation

2016-02-23 Thread Dolph Mathews
Closing this because bearer tokens, etc, are a well known weakness. ** Changed in: keystone Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1496998] Re: document fernet token provider is experimental

2016-01-13 Thread Dolph Mathews
Closing this since we're moving in the opposite direction at this point. ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1526976] Re: Any operation without token fails with internal server error for fernet token

2016-01-06 Thread Dolph Mathews
** Also affects: keystone/liberty Importance: Undecided Status: New ** Changed in: keystone/liberty Importance: Undecided => Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).

[Yahoo-eng-team] [Bug 1515485] Re: Heat CFN signals do not pass authorization

2015-11-12 Thread Dolph Mathews
yanyao: What did the keystone logs say to indicate a relationship to Fernet? ** Also affects: keystone Importance: Undecided Status: New ** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone Status: New => Invalid ** Changed in:

[Yahoo-eng-team] [Bug 1425108] Re: private _get_children() in sql backend doesn't support passing None values

2015-11-03 Thread Dolph Mathews
https://review.openstack.org/#/c/158720/ (merged) closes bug 1425113. https://review.openstack.org/#/c/158731/ closes this bug, but was abandoned in favor of merging that patch into https://review.openstack.org/#/c/158372/ which has not merged. ** Changed in: keystone Status: Fix Released

[Yahoo-eng-team] [Bug 1509683] Re: sometimes the sheepdogdriver doesn't work when copy_image_to_volume

2015-10-25 Thread Dolph Mathews
Added cinder. ** Also affects: cinder Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1509683 Title: sometimes the

[Yahoo-eng-team] [Bug 1482773] Re: H405 violations: multi line docstring summary not separated with an empty line

2015-10-21 Thread Dolph Mathews
** Also affects: keystoneauth Importance: Undecided Status: New ** Also affects: python-keystoneclient Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1497461] Re: Fernet tokens fail for some users with LDAP identity backend

2015-10-16 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Also affects: keystone/liberty Importance: Undecided Status: New ** Changed in: keystone/kilo Status: New => Triaged ** Changed in: keystone/kilo Importance: Undecided => High ** Changed in:

[Yahoo-eng-team] [Bug 1503712] Re: Error while deleting tenant in openstack Juno

2015-10-08 Thread Dolph Mathews
We can use this ticket (I've added openstack-manuals to it), but I don't see anywhere on that page that it says to configure [trust] driver? [revoke] driver is mentioned, but it's value is correct. ** Also affects: openstack-manuals Importance: Undecided Status: New ** Changed in:

[Yahoo-eng-team] [Bug 1503712] Re: Error while deleting tenant in openstack Juno

2015-10-07 Thread Dolph Mathews
I'm going to assume you're on a stable/kilo or older release of Keystone, but I'll refer to master's setup.cfg as well. If you got that configuration value from documentation somewhere, then we need to re- open this as a doc bug. Basically, you've set the trust driver to be a revocation driver,

[Yahoo-eng-team] [Bug 1498693] Re: unfriendly error when keystone tries to parse a URL

2015-09-23 Thread Dolph Mathews
The keystoneclient session is trying to work with a null URL. Adding Jamie. ** Project changed: keystone => python-keystoneclient ** Changed in: python-keystoneclient Importance: Undecided => Medium ** Changed in: python-keystoneclient Status: New => Triaged -- You received this bug

[Yahoo-eng-team] [Bug 1498556] [NEW] Reasonable assumptions concerning domain references

2015-09-22 Thread Dolph Mathews
Public bug reported: There are 3 primary places where client can be configured to reference domains. The actual parameter names vary based on the configuration interface (a function's arguments, the env, CLI arguments, etc), but I'll use environment variables here for the sake of general

[Yahoo-eng-team] [Bug 1496222] Re: Requirements update breaks keystone install on 3'rd party CI systems

2015-09-21 Thread Dolph Mathews
** Also affects: pbr Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1496222 Title: Requirements update breaks keystone install on 3'rd party

[Yahoo-eng-team] [Bug 1496220] Re: error in setup command: Invalid environment marker: (python_version=='2.7' # MPL)

2015-09-16 Thread Dolph Mathews
This is neither a bug in keystone nor there a fix In Progress in keystone. ** Project changed: keystone => pbr ** Changed in: pbr Status: In Progress => New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1471289] Re: Fernet tokens and Federated Identities result in token scope failures

2015-09-15 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided => High -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1484237] Re: token revocations not always respected when using fernet tokens

2015-09-11 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Tags removed: kilo-backport-potential -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1484237 Title: token

[Yahoo-eng-team] [Bug 1488208] Re: Revoking a role assignment revokes unscoped tokens too

2015-09-11 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided => Medium ** Tags removed: kilo-backport-potential -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1485553] Re: Does not report appropriate error if user ID is invaild

2015-09-09 Thread Dolph Mathews
It sounds like the user experience issue here was fixed for both stable/kilo and master, then. I'm sure further refactoring could be done, but that doesn't need to be tracked in a bug. ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1492951] Re: Juno keystone installation fail to import oslo_i18n

2015-09-08 Thread Dolph Mathews
Moved this to oslo.i18n, but it sounds like openstack/requirements for stable/juno just need to be fixed to reflect the reality (that oslo.utils 1.4.0 requires oslo.i18n>=1.3.0). ** Project changed: keystone => oslo.i18n -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1491926] Re: Remove padding from Fernet tokens

2015-09-08 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Tags removed: kilo-backport-potential ** Changed in: keystone/kilo Importance: Undecided => Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1490497] Re: pep8-incompliant filenames missing in gate console logs

2015-09-08 Thread Dolph Mathews
Leaving this as Incomplete unless someone can reproduce. ** Also affects: hacking Importance: Undecided Status: New ** Changed in: hacking Status: New => Incomplete ** Changed in: keystone Status: New => Incomplete -- You received this bug notification because you are

[Yahoo-eng-team] [Bug 1479962] Re: Use extras for deployment-specific package requirements

2015-09-03 Thread Dolph Mathews
devstack: - https://review.openstack.org/#/c/208584/ - https://review.openstack.org/#/c/208153/ ** Tags added: ldap ** Changed in: keystone Importance: Undecided => Low ** Also affects: devstack Importance: Undecided Status: New ** Changed in: devstack Status: New => In

[Yahoo-eng-team] [Bug 1491817] Re: Revoking large token fails with "Request-URI Too Long (HTTP 414)"

2015-09-03 Thread Dolph Mathews
According to Morgan, we're 40 days from dropping support for eventlet completely, so adding a new configuration option wouldn't provide much benefit. In addition, the length of PKI tokens is a widely known issue that has gone largely unaddressed (besides the introduction of PKIZ as a compressed

[Yahoo-eng-team] [Bug 1434034] Re: Disabling users & groups may not invalidate previously-issued tokens

2015-09-01 Thread Dolph Mathews
Based on today's keystone meeting and the above comments, I've reduced the priority of this to Medium across the board and marked this as Won't Fix in Keystone. Although this is working as intended, we acknowledge that that intended behavior is poorly documented, and it seems an OSSN is the best

[Yahoo-eng-team] [Bug 1292591] Re: Database models differs from migrations.

2015-08-26 Thread Dolph Mathews
I'm assuming this was fixed by the last patch. In the future, please use Closes-Bug on the final patch in your patch sequence -- not just Partial-Bug on all of them (which leaves the bug open). ** Changed in: keystone Status: In Progress = Fix Committed ** Changed in: keystone

[Yahoo-eng-team] [Bug 1488347] Re: Can't specify identity endpoint for token validation among several keystone servers in keystonemiddleware

2015-08-25 Thread Dolph Mathews
A related conversation is occurring on the mailing list [1]. It sounds like this is a regression with the introduction of auth plugins to keystonemiddleware (Jamie, correct me if I'm wrong), so you might want to try using an older version of keystonemiddleware as a workaround. [1]:

[Yahoo-eng-team] [Bug 1483382] Re: Able to request a V2 token for user and project in a non-default domain

2015-08-24 Thread Dolph Mathews
Fixed by https://review.openstack.org/#/c/208069/ ** Changed in: keystone Importance: Undecided = High ** Changed in: keystone Status: New = Fix Committed ** Changed in: keystone Assignee: (unassigned) = Dolph Mathews (dolph) ** Also affects: keystone/kilo Importance

[Yahoo-eng-team] [Bug 1488208] [NEW] Revoking a role assignment revokes unscoped tokens too

2015-08-24 Thread Dolph Mathews
). The test failure in https://review.openstack.org/#/c/216236/ illustrates this issue: http://logs.openstack.org/36/216236/1/check/gate-keystone- python27/3f44af1/ ** Affects: keystone Importance: Medium Assignee: Dolph Mathews (dolph) Status: In Progress -- You received

[Yahoo-eng-team] [Bug 1487671] Re: ldap and ldappool packages are not mentioned in requirements.txt

2015-08-22 Thread Dolph Mathews
See my comment on a related bug: https://bugs.launchpad.net/keystone/+bug/1487728/comments/2 ** Changed in: keystone Status: Incomplete = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1487728] Re: ldap and ldappool modules are no listed in requirements file

2015-08-22 Thread Dolph Mathews
LDAP dependencies are optional and are defined here: https://github.com/openstack/keystone/blob/master/setup.cfg#L25-L27 This takes advantage of setuptools extras: https://pythonhosted.org/setuptools/setuptools.html#declaring-extras- optional-features-with-their-own-dependencies Use the

[Yahoo-eng-team] [Bug 1461299] Re: Failure on list users when using ldap domain configuration from database

2015-08-18 Thread Dolph Mathews
** Tags removed: kilo-backport-potential ** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone Importance: Undecided = Medium ** Changed in: keystone/kilo Importance: Undecided = Medium -- You received this bug notification because you are a

[Yahoo-eng-team] [Bug 1485712] Re: Can't set parent_id of project for hierarchical multi-tenancy

2015-08-17 Thread Dolph Mathews
This is truly by design. But by disallowing it today, we've given ourselves the option to allow it in the future (we can't do the opposite: take an API feature away). The consequences of a mutable hierarchy are complicated and affect the rest of OpenStack (think quotas, for example), and the risk

[Yahoo-eng-team] [Bug 1435693] Re: A number of places where we LOG messages fail to use the _L{X} formatting

2015-08-17 Thread Dolph Mathews
I thought this was backportable since it's only adding translation strings to stable/kilo (not modifying things that may have already been translated). ** Changed in: keystone/kilo Status: In Progress = Invalid -- You received this bug notification because you are a member of Yahoo!

[Yahoo-eng-team] [Bug 1484086] Re: ec2tokens authentication is failing during Heat tests

2015-08-14 Thread Dolph Mathews
It wasn't a backwards incompatible change so much as resolving an apparent regression. v2 clients are not domain aware as there are no domain references in v2, so the potential for namespace collisions (bug 1475762) would be severe. ** Changed in: keystone Status: New = Incomplete ** Also

[Yahoo-eng-team] [Bug 1484366] Re: No way to specify password strength in keystone.

2015-08-14 Thread Dolph Mathews
The complexities of re-inventing a first class identity provider in keystone are not in our best interests. Use a real identity provider (via either LDAP or federation) that supports these features if you need them, not the SQL backend. ** Changed in: keystone Status: Triaged = Won't Fix

[Yahoo-eng-team] [Bug 1484451] Re: Project cannot be enabled after it was disabled

2015-08-14 Thread Dolph Mathews
Cool, that's expected behavior then. ** Changed in: keystone Status: Incomplete = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1484451 Title: Project cannot be

[Yahoo-eng-team] [Bug 1435693] Re: A number of places where we LOG messages fail to use the _L{X} formatting

2015-08-13 Thread Dolph Mathews
Closing because all the cited violations have been fixed. Henry: when you have a bug fix that consists of multiple patches, use Partial-Bug on all but the last patch in the sequence. On the last patch, use Closes-Bug so that the bug will be automatically closed when that patch merges. ** Changed

[Yahoo-eng-team] [Bug 1471967] Re: Fernet unit tests do not test persistence logic

2015-08-13 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided = Low -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1475762] Re: v3 Fernet tokens with references outside the default domain can be validated on v2

2015-08-12 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided = Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1482773] [NEW] H405 violations: multi line docstring summary not separated with an empty line

2015-08-07 Thread Dolph Mathews
Public bug reported: Keystone's tox.ini contains an ignore entry for H405. All violations of H405 should be fixed so that H405 can be removed from the ignore list. ** Affects: keystone Importance: Low Assignee: Dolph Mathews (dolph) Status: In Progress ** Tags: low-hanging

[Yahoo-eng-team] [Bug 1459790] Re: With fernet tokens, validate token loses the ms on 'expires' value

2015-08-07 Thread Dolph Mathews
** Tags added: kilo-backport-potential ** Also affects: keystone/kilo Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1459790 Title: With

[Yahoo-eng-team] [Bug 1481152] Re: Pagination not working in Kilo

2015-08-04 Thread Dolph Mathews
*** This bug is a duplicate of bug 1451402 *** https://bugs.launchpad.net/bugs/1451402 ** This bug has been marked a duplicate of bug 1451402 v3 - pagination in GET services does not work -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1480787] Re: Pagination not working in Kilo

2015-08-03 Thread Dolph Mathews
*** This bug is a duplicate of bug 1451402 *** https://bugs.launchpad.net/bugs/1451402 Pagination has not been implemented. To do so, it must be entirely controlled by the server (not the API client) due to the requirement to support multiple backends (SQL vs LDAP, for example). The page

[Yahoo-eng-team] [Bug 1451402] Re: v3 - pagination in GET services does not work

2015-08-03 Thread Dolph Mathews
As mentioned in comment #2, the page and per_page parameters should be removed from http://developer.openstack.org/api-ref-identity-v3.html as they are not, and have never been, supported by keystone. ** Also affects: openstack-api-site Importance: Undecided Status: New -- You

[Yahoo-eng-team] [Bug 1480270] Re: Can't get endpoints with v2 in command line

2015-07-31 Thread Dolph Mathews
Although this is absolutely working as originally designed, it's effectively broken. This bug report may also be a dupe? Anyway, I think we (unfortunately) need to make a best guess to collapse multiple interface-specific, completely independent v3 endpoints into v2 endpoints (where at least a

[Yahoo-eng-team] [Bug 1478656] Re: Non-numeric filenames in key_repository will make Keystone explode

2015-07-30 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Status: New = In Progress ** Changed in: keystone/kilo Importance: Undecided = Low ** Changed in: keystone/kilo Assignee: (unassigned) = Dolph Mathews (dolph) -- You received

[Yahoo-eng-team] [Bug 1479943] Re: XmlBodyMiddleware stubs break existing configs

2015-07-30 Thread Dolph Mathews
stable/kilo https://review.openstack.org/#/c/205351/ ** Changed in: keystone Importance: Undecided = Medium ** Changed in: keystone Status: New = Triaged ** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Status: New =

[Yahoo-eng-team] [Bug 1420104] Re: quota set failed

2015-07-30 Thread Dolph Mathews
** Changed in: keystone Status: Incomplete = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1420104 Title: quota set failed Status in Keystone:

[Yahoo-eng-team] [Bug 1479981] Re: Openstackclient return wrong quota information

2015-07-30 Thread Dolph Mathews
*** This bug is a duplicate of bug 1420104 *** https://bugs.launchpad.net/bugs/1420104 ** No longer affects: keystone ** This bug has been marked a duplicate of bug 1420104 quota set failed -- You received this bug notification because you are a member of Yahoo! Engineering Team, which

[Yahoo-eng-team] [Bug 1465444] Re: Fernet key rotation removing keys early

2015-07-30 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Status: New = In Progress ** Changed in: keystone/kilo Importance: Undecided = High ** Changed in: keystone/kilo Assignee: (unassigned) = Dolph Mathews (dolph) ** Tags removed

[Yahoo-eng-team] [Bug 1479377] Re: Eror while installing keystone

2015-07-29 Thread Dolph Mathews
** Project changed: keystone = keystone (Ubuntu) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1479377 Title: Eror while installing keystone Status in keystone package in Ubuntu:

[Yahoo-eng-team] [Bug 1478503] Re: test_admin_version_v3 actually tests public app

2015-07-29 Thread Dolph Mathews
*** This bug is a duplicate of bug 1478504 *** https://bugs.launchpad.net/bugs/1478504 ** This bug has been marked a duplicate of bug 1478504 test_admin_version_v3 actually tests public app -- You received this bug notification because you are a member of Yahoo! Engineering Team, which

[Yahoo-eng-team] [Bug 1478466] Re: Apache2 fail to start

2015-07-27 Thread Dolph Mathews
Was something else already running on port 5000, perhaps? ** Project changed: keystone = packstack -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1478466 Title: Apache2 fail to start

[Yahoo-eng-team] [Bug 1477373] Re: No way to convert V2 tokens to V3 if domain id changes

2015-07-23 Thread Dolph Mathews
This is proposing an API impacting solution to a deprecated API, and completely glossing over the problem being addressed. If they default domain changes, the tokens will not be properly converted. What does this mean? ** Changed in: keystone Status: New = Invalid -- You received this

[Yahoo-eng-team] [Bug 1476329] [NEW] v2 tokens validated on the v3 API are missing timezones

2015-07-20 Thread Dolph Mathews
Public bug reported: v3 tokens contain the issued_at and expires_at timestamps for each token. If a token is created on the v2 API and then validated on the v3 API, this timezone information is missing (the 'Z' at the end of the timestamp), and thus cannot be validated as ISO 8601 extended format

[Yahoo-eng-team] [Bug 1475796] Re: using pysaml2 version 3.0.0 breaks keystone in kilo release 2015.1.0

2015-07-17 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Tags removed: kilo-backport-potential ** Changed in: keystone/kilo Status: New = Triaged ** Changed in: keystone/kilo Importance: Undecided = High -- You received this bug notification because you are a

[Yahoo-eng-team] [Bug 1454309] Re: Keystone v3 user/tenant lookup by name via OpenStack CLI client fails

2015-07-15 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided = High ** Changed in: keystone/kilo Assignee: (unassigned) = Dolph Mathews (dolph) -- You received this bug notification because you are a member of Yahoo

[Yahoo-eng-team] [Bug 1474491] [NEW] keystone.tests.unit.test_config fails in isolation

2015-07-14 Thread Dolph Mathews
Public bug reported: While investigating bug 1474069, I discovered this test fails when run in isolation as well. $ tox -e py27 keystone.tests.unit.test_config running= OS_STDOUT_CAPTURE=${OS_STDOUT_CAPTURE:-1} \ OS_STDERR_CAPTURE=${OS_STDERR_CAPTURE:-1} \ OS_LOG_CAPTURE=${OS_LOG_CAPTURE:-1} \

[Yahoo-eng-team] [Bug 1474162] Re: ldap unicode issue when doing a show user

2015-07-14 Thread Dolph Mathews
Ah, then we need to backport the fix for bug 1448286 (which is already tagged for backporting), along with the fix for bug 1454968 (which my fix for the first bug triggered). Closing this bug as we need to track against the bugs merged to master. ** Changed in: keystone Status: Incomplete

[Yahoo-eng-team] [Bug 1465922] Re: Password visible in clear text in keystone.log when user created and keystone debug logging is enabled

2015-07-14 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Also affects: keystone/juno Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1454968] Re: hard to understand the uri printed in the log

2015-07-14 Thread Dolph Mathews
** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Status: New = In Progress ** Changed in: keystone/juno Importance: Undecided = Medium ** Changed in: keystone/juno Assignee: (unassigned) = Dolph Mathews (dolph) -- You

[Yahoo-eng-team] [Bug 1454968] Re: hard to understand the uri printed in the log

2015-07-14 Thread Dolph Mathews
** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Assignee: (unassigned) = Dolph Mathews (dolph) ** Changed in: keystone/kilo Importance: Undecided = Medium -- You received this bug notification because you are a member of Yahoo

[Yahoo-eng-team] [Bug 1448286] Re: unicode query string raises UnicodeEncodeError

2015-07-14 Thread Dolph Mathews
: (unassigned) = Dolph Mathews (dolph) ** Changed in: keystone/kilo Importance: Undecided = Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1448286 Title: unicode query string raises

[Yahoo-eng-team] [Bug 1474162] Re: ldap unicode issue when doing a show user

2015-07-14 Thread Dolph Mathews
*** This bug is a duplicate of bug 1448286 *** https://bugs.launchpad.net/bugs/1448286 For reference, here's a direct link to the stable/kilo backport of both issues: https://review.openstack.org/#/c/201708/ ** This bug has been marked a duplicate of bug 1448286 unicode query string

[Yahoo-eng-team] [Bug 1474490] [NEW] keystone.tests.unit.common.test_notifications.NotificationsTestCase fails in isolation

2015-07-14 Thread Dolph Mathews
Public bug reported: While investigating bug 1474069, I discovered this test fails when run in isolation as well. $ tox -e py27 keystone.tests.unit.common.test_notifications.NotificationsTestCase running= OS_STDOUT_CAPTURE=${OS_STDOUT_CAPTURE:-1} \ OS_STDERR_CAPTURE=${OS_STDERR_CAPTURE:-1} \

[Yahoo-eng-team] [Bug 1473298] Re: Cannot create keystone trust with python-openstackclient using trustor/trustee id

2015-07-10 Thread Dolph Mathews
** Project changed: keystone = python-openstackclient -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1473298 Title: Cannot create keystone trust with python-openstackclient using

[Yahoo-eng-team] [Bug 1472503] Re: python-ldap 2.4.20 causing install issues

2015-07-09 Thread Dolph Mathews
** Changed in: keystone Status: Incomplete = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1472503 Title: python-ldap 2.4.20 causing install issues Status in OpenStack

[Yahoo-eng-team] [Bug 1472060] Re: websso callback is in the wrong place

2015-07-09 Thread Dolph Mathews
** Tags added: federation ** Changed in: keystone Status: New = Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1472060 Title: websso callback is in the wrong place

[Yahoo-eng-team] [Bug 1471943] Re: KeystoneClient OS-FEDERATION needs to handle EmptyCatalog

2015-07-09 Thread Dolph Mathews
** Tags added: federation ** Project changed: keystone = python-keystoneclient ** Changed in: python-keystoneclient Importance: Undecided = Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1470898] Re: keystoneclient client doesn't install cleanly with pip

2015-07-09 Thread Dolph Mathews
apt-get install python-dev ** Changed in: keystone Status: New = Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1470898 Title: keystoneclient client doesn't install

[Yahoo-eng-team] [Bug 1212196] Re: legacy tenant terminology still used interchangeably with project

2015-07-08 Thread Dolph Mathews
*** This bug is a duplicate of bug 1017606 *** https://bugs.launchpad.net/bugs/1017606 ** This bug has been marked a duplicate of bug 1017606 Mixing references to 'Tenants' and 'Projects' is confusing -- You received this bug notification because you are a member of Yahoo! Engineering

[Yahoo-eng-team] [Bug 1468248] Re: weird URLs in 'keystone-all' console log

2015-07-08 Thread Dolph Mathews
*** This bug is a duplicate of bug 1454968 *** https://bugs.launchpad.net/bugs/1454968 ** This bug has been marked a duplicate of bug 1454968 hard to understand the uri printed in the log -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1467780] Re: Unused config_files parameter of service entry

2015-07-08 Thread Dolph Mathews
** Changed in: keystone Importance: Undecided = Wishlist ** Changed in: keystone Status: In Progress = Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1467780 Title:

[Yahoo-eng-team] [Bug 1464652] Re: loss of privileges of current admin user

2015-06-12 Thread Dolph Mathews
This is by design on the keystone side. As a consequence of a reducing a user's current authorization, relevant tokens are revoked and the user must subsequently re-authenticate. If horizon stored an unscoped token along with the active scoped token, it could re-authenticate for another scoped

  1   2   3   4   5   6   >