Broken when using Keystone v3

Bug #1624304 reported by Liam Young
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
swift-proxy (Juju Charms Collection)
Fix Released
High
Liam Young

Bug Description

Swift Proxy appears to be rejecting valid v3 tokens.

From syslog on the proxy server when a client runs "swift list" using Keystone v3 credentials

Sep 16 10:12:55 juju-trusty-machine-19 swift: 10.5.24.122 10.5.24.122 16/Sep/2016/10/12/55 GET /v1/AUTH_bc909e1719db4dc1a4e1ded7eed6cf55%3Fformat%3Djson HTTP/1.0 503 - python-swiftclient-2.6.0 46b64ab195e14a0b... - 100 - txe9b5c72da2564915820f2-0057dbc5a7 - 0.0534 - - 1474020775.281697035 1474020775.335077047 -
Sep 16 10:12:56 juju-trusty-machine-19 swift: 10.5.24.122 10.5.24.122 16/Sep/2016/10/12/56 GET /v1/AUTH_bc909e1719db4dc1a4e1ded7eed6cf55%3Fformat%3Djson HTTP/1.0 503 - python-swiftclient-2.6.0 46b64ab195e14a0b... - 100 - txe1fa2219bc6243a6b490c-0057dbc5a8 - 0.0558 - - 1474020776.342241049 1474020776.398039103 -
Sep 16 10:12:58 juju-trusty-machine-19 swift: 10.5.24.122 10.5.24.122 16/Sep/2016/10/12/58 GET /v1/AUTH_bc909e1719db4dc1a4e1ded7eed6cf55%3Fformat%3Djson HTTP/1.0 503 - python-swiftclient-2.6.0 46b64ab195e14a0b... - 100 - txcbd5a398bacc48f0bf9b9-0057dbc5aa - 0.0669 - - 1474020778.406795979 1474020778.473697901 -
Sep 16 10:13:02 juju-trusty-machine-19 swift: 10.5.24.122 10.5.24.122 16/Sep/2016/10/13/02 GET /v1/AUTH_bc909e1719db4dc1a4e1ded7eed6cf55%3Fformat%3Djson HTTP/1.0 503 - python-swiftclient-2.6.0 46b64ab195e14a0b... - 100 - txca5a1e7972144ee096c62-0057dbc5ae - 0.0562 - - 1474020782.484698057 1474020782.540915966

Liam Young (gnuoy)
Changed in swift-proxy (Juju Charms Collection):
status: New → Confirmed
importance: Undecided → High
assignee: nobody → Liam Young (gnuoy)
milestone: none → 16.10
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-swift-proxy (master)

Fix proposed to branch: master
Review: https://review.openstack.org/371554

Changed in swift-proxy (Juju Charms Collection):
status: Confirmed → In Progress
tags: added: canonical-bootstack
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-swift-proxy (master)

Reviewed: https://review.openstack.org/371554
Committed: https://git.openstack.org/cgit/openstack/charm-swift-proxy/commit/?id=5b8b04a2133cbaad84bf7d4bb58801c28f66a938
Submitter: Jenkins
Branch: master

commit 5b8b04a2133cbaad84bf7d4bb58801c28f66a938
Author: Liam Young <email address hidden>
Date: Fri Sep 16 13:53:13 2016 +0000

    Fix support for Keystone v3 API

    Swift proxy is currently rejecting valid v3 tokens because it is
    failing to validate them due to its credentials being in the v2
    format and missing domain information. This change examines the
    version of the API keystone has advertised down the identity-service
    relation and configures the proxy conf appropriately

    Change-Id: Id2215168ffbad1caf0e7203ded26c41913181306
    Closes-Bug: 1624304

Changed in swift-proxy (Juju Charms Collection):
status: In Progress → Fix Committed
James Page (james-page)
Changed in swift-proxy (Juju Charms Collection):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.