Admin user has no role in Keystone Default domain
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Mirantis OpenStack | Status tracked in 10.0.x | |||||
10.0.x |
Fix Committed
|
High
|
Max Yatsenko | |||
9.x |
Fix Released
|
High
|
Max Yatsenko |
Bug Description
In MOS 9.0 admin user has no roles in Default domain. Thus Keystone responds 401 on requests from admin user to list domains.
When user tries to login into Horozion with enabled multidomain support, Horizon writes into log the following error:
2016-05-24 10:26:51,368 28035 DEBUG openstack_
Traceback (most recent call last):
File "/usr/lib/
domain_auth_ref = domain_
File "/usr/lib/
self.auth_ref = self.get_
File "/usr/lib/
authenticat
File "/usr/lib/
return self.request(url, 'POST', **kwargs)
File "/usr/lib/
return func(*args, **kwargs)
File "/usr/lib/
raise exceptions.
Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-5199d8be-
And Domains panel is missin in horizon.
If I go to controller and run `role list` command, I'll get empty list.
root@node-1:~# openstack role list --domain Default --user admin
But after I add role to admin into Default domain like this:
root@node-1:~# openstack role add --domain Default --user admin admin
root@node-1:~# openstack role list --domain Default --user admin
+------
| ID | Name | Domain | User |
+------
| 175fbc08b8c4483
+------
Domains panel appears in Horizon and error dissapears from the Horizon logs.
According to Alexander Makarov it is not correct behaviour and looks like misconfiguration.
ISO #390.
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in mos: | |
assignee: | nobody → Max Yatsenko (myatsenko) |
importance: | Undecided → High |
tags: | added: on-verification |
(This check performed automatically)
Please, make sure that bug description contains the following sections filled in with the appropriate data related to the bug you are describing:
actual result
version
expected result
steps to reproduce
For more detailed information on the contents of each of the listed sections see https:/ /wiki.openstack .org/wiki/ Fuel/How_ to_contribute# Here_is_ how_you_ file_a_ bug