OpenStack Identity (keystone)

trustee cannot upload image、create instance

Bug #1909336 reported by leoduan0406 on 2020-12-26

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Identity (keystone)	New	Undecided	Unassigned

Bug Description

Hello, I have the following question about trust：

After the trustee logs in the trustor, it will prompt "Using trust-scoped token to create another token. Create a new trust-scoped token instead", if it performs the operation of uploading the image, editing the image, deleting the image and so on.

If you want to upload the image, you need to regenerate the token. If it's trustee, Keystone won't allow token regeneration.

Revision history for this message

leoduan0406 (leoduan0406) wrote on 2020-12-26:

Download full text (5.2 KiB)

Below are two logs：

File "/usr/lib/python2.7/site-packages/cinderclient/base.py", line 84, in _list
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server resp, body = self.api.client.get(url)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 181, in get
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return self._cs_request(url, 'GET', **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 172, in _cs_request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return self.request(url, method, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 155, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 447, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 192, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return self.session.request(url, method, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return wrapped(*args, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 578, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server auth_headers = self.get_auth_headers(auth)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 905, in get_auth_headers
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return auth.get_headers(self, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/plugin.py", line 90, in get_headers
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server token = self.get_token(session)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 89, in get_token
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server return self.get_access(session).auth_token
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 135, in get_access
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server self.auth_ref = self.get_auth_ref(session)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", l...

Below are two logs：

File "/usr/lib/python2.7/site-packages/cinderclient/base.py", line 84, in _list
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     resp, body = self.api.client.get(url)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 181, in get
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self._cs_request(url, 'GET', **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 172, in _cs_request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self.request(url, method, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/cinderclient/client.py", line 155, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 447, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 192, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self.session.request(url, method, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return wrapped(*args, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 578, in request
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     auth_headers = self.get_auth_headers(auth)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 905, in get_auth_headers
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return auth.get_headers(self, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/plugin.py", line 90, in get_headers
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     token = self.get_token(session)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 89, in get_token
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self.get_access(session).auth_token
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 135, in get_access
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     self.auth_ref = self.get_auth_ref(session)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self._plugin.get_auth_ref(session, **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     authenticated=False, log=False, **rkwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 853, in post
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server     return self.request(url, 'POST', **kwargs)
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server   File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2020-12-26 10:39:46.737 16634 ERROR oslo_messaging.rpc.server

2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 247, in _do_call
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi     result = method(req, **params)
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line 125, in authenticate_for_token
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi     self.authenticate(request, auth_info, auth_context)
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line 291, in authenticate
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi     auth_info.get_method_data(method_name))
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/token.py", line 52, in authenticate
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi     token_ref)
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/token.py", line 81, in token_authenticate
2020-12-26 10:39:46.087 12717 ERROR keystone.common.wsgi     'Using trust-scoped token to create another token. '

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.