Public bug reported:

Environment: tested with Stein from UCA (deployed via 19.04 charms).

1) login to horizon into the "admin" project;

keystone.conf:

[resource]
admin_project_domain_name = admin_domain
admin_project_name = admin

2) go to the "Application Credentials" tab;

3) create a credential with a unique name without specifying other
parameters besides Admin and/or Member roles (auto-filled secret, no
expiration);

note: project_id is retrieved from the token, it is not a field in the
form

4) observe that project_id is set to None

5) encounter the following error during authentication using the
application credential

TypeError: one of the hex, bytes, bytes_le, fields, or int arguments
must be given

see the text file attached with a pdb log.

6) do the same via CLI and observe that project_id is specified and it
is possible to log in

CLI workflow (project_id is present):

openstack application credential create --role Member --role Admin testcred
+--------------+----------------------------------------------------------------------------------------+
| Field        | Value                                                          
                        |
+--------------+----------------------------------------------------------------------------------------+
| description  | None                                                           
                        |
| expires_at   | None                                                           
                        |
| id           | bb845e9e18634e7c8cfc36d80179ab05                               
                        |
| name         | testcred                                                       
                        |
| project_id   | ebfc7e0457f048aa960d633141115cd1                               
                        |
| roles        | Member Admin                                                   
                        |
| secret       | 
zCka3asrEouKqCnJlfRdk-Qg3gDM0WSbjTqxlYaBO_ygyQCpZY8NPnSQhm6o802O-r22eHWv79-iHJ5sJQ_kUw
 |
| system       | None                                                           
                        |
| unrestricted | False                                                          
                        |
| user_id      | 95067aae3e634a29830f91a53dd0d80a                               
                        |
+--------------+----------------------------------------------------------------------------------------+


Note the difference:

openstack application credential list
+----------------------------------+----------------+----------------------------------+-------------+------------+
| ID                               | Name           | Project ID                
       | Description | Expires At |
+----------------------------------+----------------+----------------------------------+-------------+------------+
| 344ddd90249645608b625131f82d056b | clicred        | 
ebfc7e0457f048aa960d633141115cd1 | None        | None       |
| d681d11d4744421f81dd32ca0459d54d | dashboard_cred | None                      
       | None        | None       |
+----------------------------------+----------------+----------------------------------+-------------+------------+

** Affects: horizon (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "app-credential-auth-missing-project-id.txt"
   
https://bugs.launchpad.net/bugs/1827120/+attachment/5260366/+files/app-credential-auth-missing-project-id.txt

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1827120

Title:
  application credentials created via Horizon with the admin project
  scope have project_id == None

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1827120/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to