** Changed in: keystone
Status: Fix Committed => Fix Released
** Changed in: keystone
Milestone: None => kilo-1
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1384382
Title:
GET /OS-FEDERATION/saml2/metadata does not work
Status in OpenStack Identity (Keystone):
Fix Released
Bug description:
In Kestone-to-Keystone federation, the metadata from Keystone Identity
Provider needs to be exchanged with the Keystone Service Provider.
This is done via the GET /OS-FEDERATION/saml2/metadata endpoint, which
is returning an internal server error (500).
Looking in the log files, seems that keystone.middleware.core is
trying to parse the XML body into JSON, which fails:
2014-10-22 18:15:32.177590 20576 DEBUG keystone.common.wsgi [-] arg_dict: {}
__call__ /opt/stack/keystone/keystone/common/wsgi.py:191
2014-10-22 18:15:32.184124 20576 ERROR keystone.middleware.core [-]
Serializer failed
2014-10-22 18:15:32.184148 20576 TRACE keystone.middleware.core Traceback
(most recent call last):
2014-10-22 18:15:32.184155 20576 TRACE keystone.middleware.core File
"/opt/stack/keystone/keystone/middleware/core.py", line 183, in process_response
2014-10-22 18:15:32.184168 20576 TRACE keystone.middleware.core body_obj
= jsonutils.loads(response.body)
2014-10-22 18:15:32.184185 20576 TRACE keystone.middleware.core File
"/usr/local/lib/python2.7/dist-packages/oslo/serialization/jsonutils.py", line
211, in loads
2014-10-22 18:15:32.184194 20576 TRACE keystone.middleware.core return
json.loads(encodeutils.safe_decode(s, encoding), **kwargs)
2014-10-22 18:15:32.184201 20576 TRACE keystone.middleware.core File
"/usr/lib/python2.7/json/__init__.py", line 338, in loads
2014-10-22 18:15:32.184207 20576 TRACE keystone.middleware.core return
_default_decoder.decode(s)
2014-10-22 18:15:32.184213 20576 TRACE keystone.middleware.core File
"/usr/lib/python2.7/json/decoder.py", line 366, in decode
2014-10-22 18:15:32.184220 20576 TRACE keystone.middleware.core obj, end
= self.raw_decode(s, idx=_w(s, 0).end())
2014-10-22 18:15:32.184226 20576 TRACE keystone.middleware.core File
"/usr/lib/python2.7/json/decoder.py", line 384, in raw_decode
2014-10-22 18:15:32.184232 20576 TRACE keystone.middleware.core raise
ValueError("No JSON object could be decoded")
2014-10-22 18:15:32.184238 20576 TRACE keystone.middleware.core ValueError:
No JSON object could be decoded
2014-10-22 18:15:32.184244 20576 TRACE keystone.middleware.core
2014-10-22 18:15:32.184740 20576 WARNING keystone.common.wsgi [-] <?xml
version='1.0' encoding='UTF-8'?>
2014-10-22 18:15:32.184765 <ns0:EntityDescriptor
xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:ns1="http://www.w3.org/2000/09/xmldsig#"
entityID="http://localhost:5000/v3/OS-FEDERATION/saml2/idp"><ns0:IDPSSODescriptor
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><ns0:KeyDescriptor
use="signing"><ns1:KeyInfo><ns1:X509Data><ns1:X509Certificate>...</ns1:X509Certificate></ns1:X509Data></ns1:KeyInfo></ns0:KeyDescriptor><ns0:Organization><ns0:OrganizationName
xml:lang="en">rodrigods</ns0:OrganizationName><ns0:OrganizationDisplayName
xml:lang="en">rodrigods</ns0:OrganizationDisplayName><ns0:OrganizationURL
xml:lang="en">localhost</ns0:OrganizationURL></ns0:Organization><ns0:ContactPerson
contactType="technical"><ns0:Company>rodrigods</ns0:Company><ns0:GivenName>Rodrigo</ns0:GivenName><ns0:SurName>Duarte</ns0:SurName><ns0:EmailAddress>[email protected]</ns0:EmailAddress><ns0:TelephoneNumber>555-55-5555</ns0:TelephoneNumber></ns0:ContactPerson><ns0:NameID
Format>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</ns0:NameIDFormat><ns0:SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI"
Location="http://localhost:5000/v3/OS-FEDERATION/saml2/sso"
/></ns0:IDPSSODescriptor></ns0:EntityDescriptor>
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1384382/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp