change_password_upon_first_use does not work with Horizon deployed by Kolla-ansible
| Affects | Status | Importance | Assigned to | Milestone | ||
|---|---|---|---|---|---|---|
| kolla-ansible | Status tracked in Dalmatian | |||||
| Antelope |
Fix Committed
|
High
|
Unassigned | |||
| Bobcat |
Fix Committed
|
High
|
Unassigned | |||
| Caracal |
In Progress
|
High
|
Unassigned | |||
| Dalmatian |
Fix Released
|
High
|
Franciszek Przewoźny | |||
Bug Description
Hey,
As a disclaimer: most of the configuration is default, parameters related to endpoints are default.
With following option set in Keystone:
[security_
change_
Horizon redirects correctly to "Change password" screen, but it doesn't work.
From logs, it seems like the POST query is executed against http://
2024-07-15 21:45:10.166568 DEBUG:urllib3.
2024-07-15 21:45:10.178351 DEBUG:urllib3.
2024-07-15 21:45:10.178875 DEBUG:keystonea
2024-07-15 21:45:10.179095 Unable to update password due to exception: Not Found (HTTP 404) (Request-ID: req-de6cf206-
Manually checked endpoint with GET query, and it wasn't found:
# curl http://
<!doctype html>
<html lang=en>
<title>404 Not Found</title>
<h1>Not Found</h1>
<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
But /v3 endpoint exist:
# curl http://
{"message": "The method is not allowed for the requested URL."}
So password change POST query should be executed against /v3 API.
With Horizon configuration overwritten, it works just fine:
OPENSTACK_
I'm not sure here if Horizon should be reconfigured, or Keystone API endpoint should include /v3 in path.
Thank you,
Franciszek
| tags: | added: keystone |
| description: | updated |
| Grzegorz Koper (koperg) wrote | #1 |
| Changed in kolla-ansible: | |
| status: | New → Confirmed |
| importance: | Undecided → High |
| assignee: | nobody → Grzegorz Koper (koperg) |
| OpenStack Infra (hudson-openstack) wrote Fix proposed to kolla-ansible (master) | #2 |
| Changed in kolla-ansible: | |
| status: | Confirmed → In Progress |
| Changed in kolla-ansible: | |
| assignee: | Grzegorz Koper (koperg) → Franciszek Przewoźny (fprzewozn) |
| OpenStack Infra (hudson-openstack) wrote Fix merged to kolla-ansible (master) | #3 |
| Changed in kolla-ansible: | |
| status: | In Progress → Fix Released |
| OpenStack Infra (hudson-openstack) wrote Fix proposed to kolla-ansible (stable/2024.1) | #4 |
| OpenStack Infra (hudson-openstack) wrote Change abandoned on kolla-ansible (stable/2024.1) | #5 |
| OpenStack Infra (hudson-openstack) wrote Fix proposed to kolla-ansible (stable/2023.2) | #6 |
| OpenStack Infra (hudson-openstack) wrote Fix proposed to kolla-ansible (stable/2023.1) | #7 |
| OpenStack Infra (hudson-openstack) wrote Fix merged to kolla-ansible (stable/2023.1) | #8 |
| OpenStack Infra (hudson-openstack) wrote Fix merged to kolla-ansible (stable/2023.2) | #9 |
| OpenStack Infra (hudson-openstack) wrote Fix merged to kolla-ansible (stable/2024.1) | #10 |
I've reproduced this issue.
In my opinion Horizon should be reconfigured to point to /v3 endpoint
Can be fixed similarly to :
https:/
@fprzewozn: Would you like to try and contribute a fix ?