Public bug reported:
Keystone – error message is not correct/clear in case when no “rule” is
associated to user
Scenario:
1) Source as admin user
. overcloudrc
2) Create a new project
openstack project create --description 'my new project' new-project --domain
default
3) Create user for previously created project
openstack user create --project new-project --password PASSWORD new-user
4) Copy overcloudrc content to userrc file and change
cp overcloudrc userrc
5) Change relevant for new-user values:
export OS_USERNAME=new-user
export OS_PASSWORD=PASSWORD
export OS_PROJECT_NAME= new-project
6) Save modified file and source now with this gile
source userrc
7) Execute some openstack command for example:
openstack network list
Actual Result:
On CLI output the error which is shown to user is:
The request you have made requires authentication. (HTTP 401) (Request-ID:
req-373d8b48-15b7-4036-83d1-c82453584f15)
In keystone log:
/var/log/containers/keystone/keystone.log (5739, 5739)
2018-11-18 15:09:15.902 35 WARNING keystone.common.wsgi
[req-373d8b48-15b7-4036-83d1-c82453584f15 - - - - -] Authorization failed. The
request you have made requires authentication. from 192.168.100.27:
Unauthorized: The request you have made requires authentication.
Expected Result:
The real reason no rule is asociated to ‘new-user’ (or something like that)
should be logged and prompted to user.
Actual message we have is not relevant and not clear.
Keystone logs attached.
** Affects: neutron
Importance: Undecided
Status: New
** Tags: logging usability
** Attachment added: "keystone.zip"
https://bugs.launchpad.net/bugs/1803882/+attachment/5213938/+files/keystone.zip
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1803882
Title:
Keystone – error message is not correct/clear in case when no “rule”
is associated to user
Status in neutron:
New
Bug description:
Keystone – error message is not correct/clear in case when no “rule”
is associated to user
Scenario:
1) Source as admin user
. overcloudrc
2) Create a new project
openstack project create --description 'my new project' new-project --domain
default
3) Create user for previously created project
openstack user create --project new-project --password PASSWORD new-user
4) Copy overcloudrc content to userrc file and change
cp overcloudrc userrc
5) Change relevant for new-user values:
export OS_USERNAME=new-user
export OS_PASSWORD=PASSWORD
export OS_PROJECT_NAME= new-project
6) Save modified file and source now with this gile
source userrc
7) Execute some openstack command for example:
openstack network list
Actual Result:
On CLI output the error which is shown to user is:
The request you have made requires authentication. (HTTP 401) (Request-ID:
req-373d8b48-15b7-4036-83d1-c82453584f15)
In keystone log:
/var/log/containers/keystone/keystone.log (5739, 5739)
2018-11-18 15:09:15.902 35 WARNING keystone.common.wsgi
[req-373d8b48-15b7-4036-83d1-c82453584f15 - - - - -] Authorization failed. The
request you have made requires authentication. from 192.168.100.27:
Unauthorized: The request you have made requires authentication.
Expected Result:
The real reason no rule is asociated to ‘new-user’ (or something like that)
should be logged and prompted to user.
Actual message we have is not relevant and not clear.
Keystone logs attached.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1803882/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
