[Yahoo-eng-team] [Bug 1472503] Re: python-ldap 2.4.20 causing install issues

2015-07-09 Thread Dolph Mathews
** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1472503 Title: python-ldap 2.4.20 causing install issues Status in OpenStack

[Yahoo-eng-team] [Bug 1468248] Re: weird URLs in 'keystone-all' console log

2015-07-08 Thread Dolph Mathews
*** This bug is a duplicate of bug 1454968 *** https://bugs.launchpad.net/bugs/1454968 ** This bug has been marked a duplicate of bug 1454968 hard to understand the uri printed in the log -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is s

[Yahoo-eng-team] [Bug 1212196] Re: legacy "tenant" terminology still used interchangeably with "project"

2015-07-08 Thread Dolph Mathews
*** This bug is a duplicate of bug 1017606 *** https://bugs.launchpad.net/bugs/1017606 ** This bug has been marked a duplicate of bug 1017606 Mixing references to 'Tenants' and 'Projects' is confusing -- You received this bug notification because you are a member of Yahoo! Engineering Tea

[Yahoo-eng-team] [Bug 1467780] Re: Unused config_files parameter of service entry

2015-07-08 Thread Dolph Mathews
** Changed in: keystone Importance: Undecided => Wishlist ** Changed in: keystone Status: In Progress => Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1467780 Title:

[Yahoo-eng-team] [Bug 1464652] Re: loss of privileges of current admin user

2015-06-12 Thread Dolph Mathews
This is by design on the keystone side. As a consequence of a reducing a user's current authorization, relevant tokens are revoked and the user must subsequently re-authenticate. If horizon stored an unscoped token along with the active scoped token, it could re-authenticate for another scoped tok

[Yahoo-eng-team] [Bug 928060] Re: link error messages in the API to formal documentation when that's set up and stable

2015-06-08 Thread Dolph Mathews
Closing because there's a similar OpenStack-wide discussion to accomplish the same thing. ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad

[Yahoo-eng-team] [Bug 1461095] Re: Token is not revoked when removing a user from project in Horizon

2015-06-05 Thread Dolph Mathews
token_cache_time is part of keystonemiddleware.auth_token's configuration. It defaults to 5 minutes if you haven't set it in your deployment: https://github.com/openstack/keystonemiddleware/blob/57d389da8aaef3f955d7f0b086803d98b6531a2e/keystonemiddleware/auth_token/__init__.py#L278-L283 It sounds

[Yahoo-eng-team] [Bug 1461847] Re: Stacking controller fails due to error: 'wsgiref' is not in global-requirements.txt 2014.2.3

2015-06-04 Thread Dolph Mathews
** Project changed: nova-project => nova -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1461847 Title: Stacking controller fails due to error: 'wsgiref' is not in global

[Yahoo-eng-team] [Bug 1461251] Re: Stop using deprecated oslo_utils.timeutils.isotime

2015-06-03 Thread Dolph Mathews
Added oslo to this bug for unacceptably impacting at least keystone and heat, by not providing a viable alternative capable of maintaining backward compatibility with existing public APIs. Keystone's solution is to stop using oslo.timeutils in this instance, and instead move the deprecated timeuti

[Yahoo-eng-team] [Bug 1455397] Re: vms which donot winth a project will become garbage data, mybe waste resources

2015-06-02 Thread Dolph Mathews
*** This bug is a duplicate of bug 967832 *** https://bugs.launchpad.net/bugs/967832 ** This bug has been marked a duplicate of bug 967832 Resources owned by a project/tenant are not cleaned up after that project is deleted from keystone -- You received this bug notification because you

[Yahoo-eng-team] [Bug 1459828] Re: keystone-all crashes when ca_certs is not defined in conf

2015-06-01 Thread Dolph Mathews
If this can be reproduced against 2014.1 icehouse, I would consider it to be a critical issue for our core use case (default SSL configuration w/ apache httpd). ** Changed in: keystone Importance: Undecided => Critical ** Also affects: keystone/icehouse Importance: Undecided Status:

[Yahoo-eng-team] [Bug 1455344] Re: the deprecated compute_port option need to be removed

2015-05-27 Thread Dolph Mathews
Why was this marked invalid? ** Changed in: keystone Importance: Undecided => Low ** Changed in: keystone Status: Invalid => Fix Committed -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad

[Yahoo-eng-team] [Bug 1453953] Re: keystoneclient cannot log non-ascii data

2015-05-27 Thread Dolph Mathews
>From Ken Chen in https://bugs.launchpad.net/python- keystoneclient/+bug/1457279 -- In keystoneclient/session.py file, _http_log_request method, we have below codes: if data: string_parts.append("-d '%s'" % data) logger.debug(' '.join(string_parts)) However, if d

[Yahoo-eng-team] [Bug 1458968] Re: stable/juno unit tests blocked: ContextualVersionConflict: (oslo.i18n 1.3.1 (/home/jenkins/workspace/periodic-glance-python27-juno/.tox/py27/lib/python2.7/site-packa

2015-05-27 Thread Dolph Mathews
https://review.openstack.org/#/c/173123/ has merged. ** Changed in: glance Status: New => Invalid ** Changed in: keystonemiddleware Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. http

[Yahoo-eng-team] [Bug 1456441] Re: keystone wsgi does not read files in /etc/keystone/*

2015-05-22 Thread Dolph Mathews
This is a critical Red Hat packaging issue that has been verified by multiple users. I've verified the solution in comment #10 works. ** Changed in: glance Status: Incomplete => Invalid ** Changed in: keystone Status: Incomplete => Invalid ** Changed in: nova Status: Incomp

[Yahoo-eng-team] [Bug 1456797] [NEW] Old revocation events must be purged

2015-05-19 Thread Dolph Mathews
Public bug reported: Similar to token_flush, we need an operation to purge old revocation events from the database, else they'll eventually consume excessive disk space. The operation should be very similar in implementation and usage to token_flush. Filing this as Medium priority because it does

[Yahoo-eng-team] [Bug 1455034] Re: Deleting nonexistent end-point gives incorrect error message

2015-05-14 Thread Dolph Mathews
** Project changed: keystone => python-openstackclient ** Summary changed: - Deleting nonexistent end-point gives incorrect error message + Deleting nonexistent endpoint gives incorrect error message ** Tags removed: error-messge ** Tags added: error-message user-experience -- You received thi

[Yahoo-eng-team] [Bug 1454041] Re: misunderstanding caused by uuid token and pki token in install guide

2015-05-13 Thread Dolph Mathews
Keystone switched to UUID by default in Juno due to longstanding issues with PKI that will likely never be resolved. At least in the stable/juno or stable/kilo install guides, there is no token setup to do beyond scheduling a cron job to run keystone-manage token_flush. Setting the keystone token

[Yahoo-eng-team] [Bug 1452345] Re: keystone-all should not attempt to run if keystone is in httpd

2015-05-12 Thread Dolph Mathews
That's crazy. Don't try to start the eventlet server if you're already running it in Apache on the same port. More generally, don't try to run any two things on the same port, as the error message already indicates. ** Changed in: keystone Status: Incomplete => Won't Fix -- You received t

[Yahoo-eng-team] [Bug 1452298] Re: Fails to filter domains by id

2015-05-11 Thread Dolph Mathews
Ready for the punt return? :) Because ?id=default is not a query parameter documented or supported in any collection API, the client is not actually making a valid API request. And because 'id' is also a documented API convention, I'd suggest that to provide the expected user experience, the clien

[Yahoo-eng-team] [Bug 1453769] Re: Domain name update breaks IDP configuration

2015-05-11 Thread Dolph Mathews
I completely agree, the current design directly results in the fragility you described (I pushed for naming domain-specific configuration files using their immutable, system-defined domain IDs instead, but lost that argument... I think on the basis of deployer experience? I'll let Henry Nash commen

[Yahoo-eng-team] [Bug 1452418] [NEW] Fernet tokens read from disk on every request

2015-05-06 Thread Dolph Mathews
Public bug reported: The fernet keys are stored (by default) in /etc/keystone/fernet-keys/ in individual key files. All keys are read from disk on every request, so you end up with log spam like: keystone.token.providers.fernet.utils [-] Loaded 2 encryption keys from: /etc/keystone/fernet-keys/

[Yahoo-eng-team] [Bug 1299039] Re: Token Scoping

2015-05-05 Thread Dolph Mathews
Implemented as part of: https://blueprints.launchpad.net/keystone/+spec/rescoping ** Changed in: keystone Milestone: None => 2015.1.0 ** Changed in: keystone Status: Triaged => Fix Released ** Changed in: keystone Assignee: Priti Desai (priti-desai) => Adam Young (ayoung) --

[Yahoo-eng-team] [Bug 1448376] Re: Keystone Middleware Installation

2015-04-25 Thread Dolph Mathews
Marked as incomplete for keystonemiddleware because this looks like an issue between devstack and pip. ** Project changed: keystone => keystonemiddleware ** Also affects: devstack Importance: Undecided Status: New ** Summary changed: - Keystone Middleware Installation + Can't find pa

[Yahoo-eng-team] [Bug 1448286] [NEW] unicode query string raises UnicodeEncodeError

2015-04-24 Thread Dolph Mathews
Public bug reported: The logging in keystone.common.wsgi is unable to handle unicode query strings. The simplest example would be: $ curl http://localhost:35357/?Ϡ This will fail with a backtrace similar to: 2015-04-24 19:57:45.860 22255 TRACE keystone.common.wsgi File ".../keystone/keys

[Yahoo-eng-team] [Bug 1443765] Re: Delete endpoint_group should remove project_endpoint_group at first

2015-04-24 Thread Dolph Mathews
Does this affect juno? ** Tags added: kilo-backport-potential ** Also affects: keystone/kilo Importance: Undecided Status: New ** Changed in: keystone/kilo Importance: Undecided => Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, wh

[Yahoo-eng-team] [Bug 1439928] Re: can create the same type and name of a service with v3 API

2015-04-20 Thread Dolph Mathews
I don't see any reason for this to be a "Medium" bug - there's absolutely no negative impact described here. In fact, the documented behavior is as-designed. To quote myself from the code review above: The most obvious conflicting use case I can think of is having two services of the same type i

[Yahoo-eng-team] [Bug 1445104] Re: Identity API docs contain advertise support for XML

2015-04-16 Thread Dolph Mathews
** Project changed: keystone => openstack-api-site ** Summary changed: - Identity API docs contain advertise support for XML + Identity API docs advertise support for XML -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone.

[Yahoo-eng-team] [Bug 1445104] [NEW] Identity API docs contain advertise support for XML

2015-04-16 Thread Dolph Mathews
Public bug reported: The following API documentation pages contain sample XML responses, even though Keystone deprecated XML support several releases ago, and removed support altogether in Kilo: http://developer.openstack.org/api-ref-identity-v2.html http://developer.openstack.org/api-ref-ide

[Yahoo-eng-team] [Bug 1445096] Re: Bad link in API version details response

2015-04-16 Thread Dolph Mathews
In master of keystone, the version response looks like this: { "version": {, "status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [ { "base": "application/json", "type": "application/vnd.openstack.identity-v2.

[Yahoo-eng-team] [Bug 1444310] Re: keystone token response contains InternalURL for non admin user

2015-04-15 Thread Dolph Mathews
The internal URL is not intended to be obscured from users, but rather is intended to provide a public API interface on a faster / more efficient network interface (depending on the deployment). If users can reach the internal endpoint (such as for glance), then they can likely save bandwidth charg

[Yahoo-eng-team] [Bug 1444469] Re: keystone should clean up expired tokens

2015-04-15 Thread Dolph Mathews
Docs: http://docs.openstack.org/admin-guide-cloud/content/flushing-expired- tokens-from-token-database-table.html In addition, Fernet tokens, introduced in Kilo, do not need to be persisted to the database, and will leave your token table completely empty: http://docs.openstack.org/developer

[Yahoo-eng-team] [Bug 1442663] Re: Kilo domain config rest feature does not uniformly reload domain configurations

2015-04-13 Thread Dolph Mathews
Closing based on feedback in comment #2 ** Tags removed: keystone specific ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1442663 T

[Yahoo-eng-team] [Bug 1443598] Re: backend_argument containing a password leaked in logs

2015-04-13 Thread Dolph Mathews
https://review.openstack.org/#/c/173034/ ** Changed in: keystone Importance: Undecided => High ** Tags added: juno-backport-potential ** Tags added: icehouse-backport-potential kilo-backport-potential ** Also affects: keystone/icehouse Importance: Undecided Status: New ** Also aff

[Yahoo-eng-team] [Bug 1441083] Re: pkg_resources.DistributionNotFound: The 'argparse' distribution was not found and is required by oslo.config, python-keystoneclient, pysaml2

2015-04-08 Thread Dolph Mathews
Abandoning this as invalid since pip 6.1.1 handles argparse correctly now. ** Changed in: oslo.config Status: In Progress => Invalid ** Changed in: python-keystoneclient Status: In Progress => Invalid ** Changed in: pysaml2 Status: New => Invalid -- You received this bug n

[Yahoo-eng-team] [Bug 1441083] Re: pkg_resources.DistributionNotFound: The 'argparse' distribution was not found and is required by oslo.config, python-keystoneclient, pysaml2

2015-04-07 Thread Dolph Mathews
** Also affects: pysaml2 Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1441083 Title: pkg_resources.DistributionNotFound: The 'argparse' dis

[Yahoo-eng-team] [Bug 1441083] Re: pkg_resources.DistributionNotFound: The 'argparse' distribution was not found and is required by oslo.config, python-keystoneclient, pysaml2

2015-04-07 Thread Dolph Mathews
The same applies to openstackclient. ** Also affects: oslo.config Importance: Undecided Status: New ** Changed in: oslo.config Assignee: (unassigned) => Dolph Mathews (dolph) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which

[Yahoo-eng-team] [Bug 1441083] Re: pkg_resources.DistributionNotFound: The 'argparse' distribution was not found and is required by oslo.config, python-keystoneclient, pysaml2

2015-04-07 Thread Dolph Mathews
Removed this from keystone since argparse does not appear as an explicit dep of keystone in any requirements file. ** Changed in: keystone Status: New => Invalid ** Changed in: python-openstackclient Assignee: (unassigned) => Dolph Mathews (dolph) ** Also affects:

[Yahoo-eng-team] [Bug 1426184] Re: CONF.member_role_name isn't used for lookups

2015-03-18 Thread Dolph Mathews
The _member_ role is a handicap for the v2 API to provide an explicit means of expressing default tenancy. The existing behavior satisfies that behavior just fine. There's really no reason you should be creating the "_member_" role manually as a deployer. Use another role name instead, such as "Me

[Yahoo-eng-team] [Bug 1431015] Re: v3/users or groups calls not working without domain_id

2015-03-18 Thread Dolph Mathews
The assertion being made by OP is that the domain which owns the scoped project should become the domain upon which the action is performed, but I would consider that behavior to be a privilege escalation vulnerability. The user is presenting explicit domain-level authorization on a domain-level re

[Yahoo-eng-team] [Bug 1433595] Re: Keystone writes "Access denied" for DB-Connection to its configured logfile

2015-03-18 Thread Dolph Mathews
** Project changed: keystone => keystone (Ubuntu) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1433595 Title: Keystone writes "Access denied" for DB-Connection to its configured log

[Yahoo-eng-team] [Bug 1402757] Re: Log message for token_flush is wrong

2015-03-18 Thread Dolph Mathews
A fix landed for this without citing this bug: https://github.com/openstack/keystone/commit/a077a875dd50974b66895f7d1ac39097d208e33a ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subsc

[Yahoo-eng-team] [Bug 1433372] Re: Fernet tokens with base64 padding are not URL-safe

2015-03-17 Thread Dolph Mathews
As it turns out, the output of base64.urlsafe_b64encode() is not actually URL-safe if the result includes padding. The padding character is '=' which must be percent-encoded. The result is that "valid" tokens are being made URL-friendly by some defensive code in keystonemiddleware, and are thus ma

[Yahoo-eng-team] [Bug 1428708] Re: Fernet token expiration is redundant with key rotation

2015-03-11 Thread Dolph Mathews
** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1428708 Title: Fernet token expiration is redundant with key rotation Statu

[Yahoo-eng-team] [Bug 1428949] [NEW] Fernet tokens do not support domain scopes

2015-03-05 Thread Dolph Mathews
support doesn't really exist yet, and the current behavior will only work if the hierarchical multitenancy effort successfully migrates domains to be projects. ** Affects: keystone Importance: High Assignee: Dolph Mathews (dolph) Status: Triaged ** Tags: fernet -- You rec

[Yahoo-eng-team] [Bug 1428717] [NEW] Fernet tokens have redundant creation timestamps

2015-03-05 Thread Dolph Mathews
requires some bitwise operations, but this library demonstrates how easy the timestamp is to extract without having the Fernet encryption key: https://pypi.python.org/pypi/keyless_fernet ** Affects: keystone Importance: Medium Assignee: Dolph Mathews (dolph) Status: New ** Tags

[Yahoo-eng-team] [Bug 1428708] [NEW] Fernet token expiration is redundant with key rotation

2015-03-05 Thread Dolph Mathews
ty considerations, rather than the cost of performance. ** Affects: keystone Importance: Wishlist Assignee: Dolph Mathews (dolph) Status: New ** Tags: fernet -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1428321] [NEW] Crosslink keystone documentation sites

2015-03-04 Thread Dolph Mathews
Public bug reported: Keystone has three formal documentation sites (that I'm aware of): http://docs.openstack.org/developer/keystone/ http://docs.openstack.org/developer/keystonemiddleware/ http://docs.openstack.org/developer/python-keystoneclient/ But none of these are cross-linked with e

[Yahoo-eng-team] [Bug 1427485] [NEW] Fernet tokens contain a version identifier that is not integrity verified

2015-03-02 Thread Dolph Mathews
"F00" / "F01") can be dropped, as long as Keystone can still validate the tokens it's issuing. ** Affects: keystone Importance: Medium Assignee: Dolph Mathews (dolph) Status: New ** Tags: fernet ** Tags added: fernet ** Summary changed: - Fernet token

[Yahoo-eng-team] [Bug 1384112] Re: endpoint, service, region can not be updated when using kvs driver

2015-03-02 Thread Dolph Mathews
** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Assignee: (unassigned) => wanghong (w-wanghong) ** Changed in: keystone/juno Status: New => In Progress ** Changed in: keystone/juno Importance: Undecided => Low -- You receiv

[Yahoo-eng-team] [Bug 1411478] Re: Any attribute that is equal to 'TRUE' or 'FALSE' is treated as boolean by LDAP drivers

2015-03-02 Thread Dolph Mathews
Before we backport this to stable/juno, are there any legitimate use cases where people would be depending on the old behavior? Just want to ensure there's no risk to backporting. ** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Status

[Yahoo-eng-team] [Bug 1420788] Re: Logging blocks on race condition under eventlet

2015-02-19 Thread Dolph Mathews
master patch https://review.openstack.org/#/c/154915/ ** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Assignee: (unassigned) => Alexander Makarov (amakarov) ** Changed in: keystone/juno Status: New => In Progress -- You receiv

[Yahoo-eng-team] [Bug 1399768] Re: migration of endpoint_filter fails due to foreign key constraint

2015-02-13 Thread Dolph Mathews
** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Importance: Undecided => High ** Changed in: keystone/juno Assignee: (unassigned) => Steve Martinelli (stevemar) ** Changed in: keystone/juno Status: New => In Progress -- You

[Yahoo-eng-team] [Bug 1407090] Re: Unable to start keystone service on Docker container

2015-01-13 Thread Dolph Mathews
*** This bug is a duplicate of bug 1406536 *** https://bugs.launchpad.net/bugs/1406536 ** This bug has been marked a duplicate of bug 1406536 unrecognized service on Keystone install -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscr

[Yahoo-eng-team] [Bug 1403136] Re: Create tenants, users, and roles in OpenStack Installation Guide for Ubuntu 14.04  - juno

2014-12-18 Thread Dolph Mathews
I think I understand why the manual specifies that the deployer should "create the _member_" role using "keystone role-create --name _member_" (to support the explicit assignment in the following step), but I'd recommend removing that instruction as a starting point to addressing this issue. I'm no

[Yahoo-eng-team] [Bug 1402824] [NEW] Conversion of API specs from MD to RST resulted in bad formatting

2014-12-15 Thread Dolph Mathews
trust-ext.rst#list-trusts - Paragraphs not being wrapped at 79 characters (only visible in source) ** Affects: keystone Importance: Medium Assignee: Dolph Mathews (dolph) Status: Triaged ** Tags: documentation ** Tags added: documentation ** Changed in: keystone Ass

[Yahoo-eng-team] [Bug 1394730] Re: Keystone should not allow creation multiple service with same type

2014-11-20 Thread Dolph Mathews
I believe this was by design, but I don't know of any deployments that actually deploy multiple services of the same type in the same cloud (and multiple branded services to do it, instead of regions). As a "bug" this strikes me as super low priority, and obviously has the potential to break anyone

[Yahoo-eng-team] [Bug 1391116] Re: keystone user-password-update also accept blank password.

2014-11-19 Thread Dolph Mathews
Added keystone to this bug - is there any reason why keystone should accept a fasley password for a user password update? ** Changed in: python-keystoneclient Importance: Undecided => Medium ** Also affects: keystone Importance: Undecided Status: New ** Changed in: keystone S

[Yahoo-eng-team] [Bug 1393365] Re: cross-manager use of config values for backward compatibility should have deprecation warnings

2014-11-19 Thread Dolph Mathews
I'd rather see support for this come out of oslo.config, automatically. I believe there was a related mailing list discussion recently as well. ** Also affects: oslo.config Importance: Undecided Status: New ** Changed in: keystone Status: New => Incomplete -- You received this

[Yahoo-eng-team] [Bug 1379952] Re: API accepts tenant name for "TenantId", fails, and provides not helpful message

2014-10-27 Thread Dolph Mathews
The UX issue is that the error message *implies* that both the referenced user ID and the referenced tenant ID are valid, and that it is the relationship between the two that is invalid. "User 83af9fd423b94b53bf3ed36a3823236d is unauthorized for tenant demo" In this case, "demo" is not a tenant

[Yahoo-eng-team] [Bug 1383924] Re: keystone notification should use different topic for CADF and normal notificaiton

2014-10-23 Thread Dolph Mathews
** Changed in: keystone Status: New => Opinion ** Changed in: keystone Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1383924 Title: keyston

[Yahoo-eng-team] [Bug 1383608] Re: Keystone Token should be configurable to persists in the DB for say "n " days

2014-10-21 Thread Dolph Mathews
The token lifespan is already configurable in keystone.conf [token] revocation=3600 (defined in seconds). ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs

[Yahoo-eng-team] [Bug 1378270] Re: keystone-manage db_sync command failed

2014-10-20 Thread Dolph Mathews
Swami: thanks for the follow up! This one was a little befuddling :) ** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1378270 T

[Yahoo-eng-team] [Bug 1382787] Re: Inconsistency in documentation (API reference) for Boolean parameters

2014-10-19 Thread Dolph Mathews
It's also completely misdefined as an "xsd:string" (also in /v3/users). I'd strongly recommend referring to the source of truth for the API, which is currently here: https://github.com/openstack/identity-api/blob/master/v3/src/markdown /identity-api-v3.md Although that document will soon be mo

[Yahoo-eng-team] [Bug 1380779] Re: SAML protocol must always be called 'saml2'

2014-10-13 Thread Dolph Mathews
** Also affects: python-keystoneclient Importance: Undecided Status: New ** Changed in: keystone Importance: Undecided => Medium ** Tags added: federation ** Tags added: documentation ** Changed in: python-keystoneclient Importance: Undecided => Wishlist ** Changed in: python-k

[Yahoo-eng-team] [Bug 1380670] Re: python-memcached misses working backend

2014-10-13 Thread Dolph Mathews
** Project changed: keystone => python-memcached -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1380670 Title: python-memcached misses working backend Status in Memcached for python:

[Yahoo-eng-team] [Bug 1182681] Re: v3 doesn't return Location header on 201 Created

2014-10-10 Thread Dolph Mathews
++ I should have referenced this bug in the commit message, and tracked this against openstack-api-site. ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https:/

[Yahoo-eng-team] [Bug 1366905] Re: Migration from havana to icehouse takes forever if large subset of data is present

2014-10-08 Thread Dolph Mathews
** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1366905 Title: Migration from havana to icehouse takes forever if large subse

[Yahoo-eng-team] [Bug 1378532] Re: Keystone token date format is inconsistent

2014-10-07 Thread Dolph Mathews
This is unfortunately true, but we can't change date formats as it would be considered an API backwards incompatibility. Hopefully we've made v3 very consistent! ** Changed in: keystone Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engin

[Yahoo-eng-team] [Bug 1363047] Re: test_sql_upgrade and live_test not working for non-sqlite DBs

2014-10-06 Thread Dolph Mathews
no Assignee: (unassigned) => Dolph Mathews (dolph) ** Changed in: keystone/juno Importance: Undecided => Medium ** Changed in: keystone/juno Status: New => In Progress ** Tags removed: db ** Tags added: sql -- You received this bug notification because you are a member of Yahoo

[Yahoo-eng-team] [Bug 1375937] Re: Downgrade of federation extension can fail due to FKs

2014-10-06 Thread Dolph Mathews
** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Milestone: None => juno-rc2 ** Changed in: keystone/juno Assignee: (unassigned) => Dolph Mathews (dolph) ** Changed in: keystone/juno Importance: Undecided => Medium *

[Yahoo-eng-team] [Bug 1377304] Re: Deleting endpoint group project fails

2014-10-06 Thread Dolph Mathews
** Also affects: keystone/juno Importance: Undecided Status: New ** Changed in: keystone/juno Importance: Undecided => Medium -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1

[Yahoo-eng-team] [Bug 1377302] Re: HEAD /auth/tokens returns 200 instead of 204

2014-10-03 Thread Dolph Mathews
This is actually a documentation bug, as we previously both mis- specified and mis-implemented the behavior for HEAD requests. Keystone's new behavior is correct, but unfortunately it looks like we did not update the documentation. ** Project changed: keystone => openstack-api-site ** Tags remove

[Yahoo-eng-team] [Bug 1368032] Re: Add missing metadata definitions for Aggregate filters added in Juno

2014-10-03 Thread Dolph Mathews
** Tags removed: glance ** Changed in: horizon Status: New => Invalid ** Changed in: glance Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/bugs/13680

[Yahoo-eng-team] [Bug 1315556] Re: Disabling a domain does not disable the projects in that domain

2014-10-01 Thread Dolph Mathews
; High ** Changed in: keystone/icehouse Assignee: (unassigned) => Dolph Mathews (dolph) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1315556 Title: Disabling a domain does not di

[Yahoo-eng-team] [Bug 1368097] Re: UnicodeDecodeError using ldap backend

2014-10-01 Thread Dolph Mathews
*** This bug is a duplicate of bug 1355489 *** https://bugs.launchpad.net/bugs/1355489 Agree, and the fix has been backported to stable/icehouse and should be included in 2014.1.3 ** This bug has been marked a duplicate of bug 1355489 authenticate ldap binary fields fail when converting fi

[Yahoo-eng-team] [Bug 1361758] Re: Keystone should bootstrap CONF.member_role_name

2014-09-30 Thread Dolph Mathews
** Also affects: horizon Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1361758 Title: Keystone should bootstrap CONF.member_role_name Statu

[Yahoo-eng-team] [Bug 1131590] Re: migration 17: user_project_membership has no column 'project_id'

2014-09-30 Thread Dolph Mathews
This migration is no longer supported. ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1131590 Title: migration 17: user_proj

[Yahoo-eng-team] [Bug 1373886] Re: create a simple way to add/remove policies to new role

2014-09-29 Thread Dolph Mathews
As Lance said, there's definitely work going on in this direction (although, there are a several separate feature requests above!), but it's not really within scope for Keystone, as the other services own their own default policies (and thus, default role definitions). I completely agree though, it

[Yahoo-eng-team] [Bug 1131174] Re: keystone-manage db_sync fails updating from migrate_version 5

2014-09-26 Thread Dolph Mathews
Anyone running into this should still discuss the issue here, but this is now beyond our support lifecycle. ** Changed in: keystone Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. ht

[Yahoo-eng-team] [Bug 1362181] Re: Multi-domain has problems with domain drivers

2014-09-26 Thread Dolph Mathews
Awesome! Good to hear. ** Changed in: keystone Status: Incomplete => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1362181 Title: Multi-domain has problems with domain

[Yahoo-eng-team] [Bug 1366133] Re: User create via v3 API doesn't add _member_ role in default project

2014-09-26 Thread Dolph Mathews
As described above, this is by design. Granting authorization in v3 is more explicit than in v2. ** Changed in: keystone Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launch

[Yahoo-eng-team] [Bug 1219036] Re: publish revocation events

2014-09-26 Thread Dolph Mathews
** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1219036 Title: publish revocation events Status in OpenStack Identity (Keysto

[Yahoo-eng-team] [Bug 1351080] Re: Build failed with identity error in check-tempest-dsvm-postgres-full:

2014-09-26 Thread Dolph Mathews
*** This bug is a duplicate of bug 1347318 *** https://bugs.launchpad.net/bugs/1347318 ** This bug is no longer a duplicate of bug 1351026 IdentityError in TokensV3TestJSON.test_rescope_token ** This bug has been marked a duplicate of bug 1347318 Revocation events don't handle scoped tok

[Yahoo-eng-team] [Bug 1351026] Re: IdentityError in TokensV3TestJSON.test_rescope_token

2014-09-26 Thread Dolph Mathews
*** This bug is a duplicate of bug 1347318 *** https://bugs.launchpad.net/bugs/1347318 ** This bug has been marked a duplicate of bug 1347318 Revocation events don't handle scoped tokens correctly -- You received this bug notification because you are a member of Yahoo! Engineering Team, w

[Yahoo-eng-team] [Bug 1367218] Re: Broken mysql connection causes internal server error

2014-09-26 Thread Dolph Mathews
*** This bug is a duplicate of bug 1361378 *** https://bugs.launchpad.net/bugs/1361378 ** This bug has been marked a duplicate of bug 1361378 "MySQL server has gone away" again -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed t

[Yahoo-eng-team] [Bug 1361758] Re: Keystone should bootstrap CONF.member_role_name

2014-09-26 Thread Dolph Mathews
Not all deployments utilize a member_role, which is just a workaround to support default tenancy assignments in v2. So, the "member" role should be created on-demand, and only if necessary. In the case of a read-only LDAP backend for assignments (which again, the community generally doesn't have mu

[Yahoo-eng-team] [Bug 1362847] Re: Spell Errors in Keystone core.py

2014-09-25 Thread Dolph Mathews
I'm forced into assuming this has been fixed without being tracked, since there's no actual spelling errors cited here to confirm that assumption against. ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engine

[Yahoo-eng-team] [Bug 1360446] Re: client connection leak to memcached under eventlet due to threadlocal

2014-09-25 Thread Dolph Mathews
** Changed in: keystonemiddleware Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1360446 Title: client connection leak to memcached under ev

[Yahoo-eng-team] [Bug 1332058] Re: keystone behavior when one memcache backend is down

2014-09-25 Thread Dolph Mathews
** Changed in: keystonemiddleware Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1332058 Title: keystone behavior when one memcache backend

[Yahoo-eng-team] [Bug 1328067] Re: Token with "placeholder" ID issued

2014-09-25 Thread Dolph Mathews
** Changed in: keystonemiddleware Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1328067 Title: Token with "placeholder" ID issued Status i

[Yahoo-eng-team] [Bug 1362245] Re: Update Endpoint Filter APIs

2014-09-22 Thread Dolph Mathews
** Changed in: keystone Status: In Progress => Won't Fix ** Changed in: openstack-api-site Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1362

[Yahoo-eng-team] [Bug 1004114] Re: Password logging

2014-09-21 Thread Dolph Mathews
** Changed in: python-keystoneclient Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1004114 Title: Password logging Status in OpenStack Das

[Yahoo-eng-team] [Bug 1328067] Re: Token with "placeholder" ID issued

2014-09-21 Thread Dolph Mathews
** Changed in: python-keystoneclient Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1328067 Title: Token with "placeholder" ID issued Statu

[Yahoo-eng-team] [Bug 1357652] Re: Keystone fails to start: "CRITICAL log logging_excepthook No module named utils"

2014-09-21 Thread Dolph Mathews
** Changed in: python-keystoneclient Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1357652 Title: Keystone fails to start: "CRITICAL log lo

[Yahoo-eng-team] [Bug 1294994] Re: Managers instantiated multiple times

2014-09-11 Thread Dolph Mathews
** Also affects: keystone/icehouse Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1294994 Title: Managers instantiated multiple times Status

[Yahoo-eng-team] [Bug 1315049] Re: 'Provider' object has no attribute 'revoke_api'

2014-09-11 Thread Dolph Mathews
*** This bug is a duplicate of bug 1294994 *** https://bugs.launchpad.net/bugs/1294994 ** This bug has been marked a duplicate of bug 1294994 Managers instantiated multiple times -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed

[Yahoo-eng-team] [Bug 1331882] Re: trustor_user_id not available in v2 trust token

2014-09-10 Thread Dolph Mathews
** Also affects: ossn Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1331882 Title: trustor_user_id not available in v2 trust token Status i

[Yahoo-eng-team] [Bug 1363319] Re: Typo in config help for token and revocation events caching

2014-09-09 Thread Dolph Mathews
This was already fixed somewhere without being tracked correctly. ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1363319 Tit

[Yahoo-eng-team] [Bug 1363288] Re: Typo in keystone/common/controller.py

2014-09-09 Thread Dolph Mathews
A fix is gating that's not referencing a bug: https://review.openstack.org/#/c/117902/ ** Changed in: keystone Status: In Progress => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.

<    1   2   3   4   5   6   7   >