[Yahoo-eng-team] [Bug 1091121] Re: openstack-db --init --service keystone fails

2013-03-06 Thread Launchpad Bug Tracker
[Expired for Keystone because there has been no activity for 60 days.] ** Changed in: keystone Status: Incomplete => Expired -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1091121

[Yahoo-eng-team] [Bug 1125239] Re: Username Harvesting

2013-03-06 Thread Dolph Mathews
You're running in debug mode :) Set debug = false in keystone.conf and the details of authentication failures will be suppressed. ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subsc

[Yahoo-eng-team] [Bug 933565] Re: GET /users/{user_id}/roles not implemented

2013-03-06 Thread Dolph Mathews
While this v2 API is still not implemented AFAIK, we've introduced the ability to list roles between user-project pairs, group-project pairs, user-domain pairs, and group-domains pairs... which obviously goes well beyond the murky functionality of this v2 call. ** Changed in: keystone Statu

[Yahoo-eng-team] [Bug 967926] Re: CORS unsupported

2013-03-06 Thread Dolph Mathews
Unassigning as I assume this isn't being pursued anymore. With the introduction of oslo, this sounds like a great common middleware that could be deployed on top of any openstack service as needed. ** Changed in: keystone Status: In Progress => Won't Fix ** Changed in: keystone Assig

[Yahoo-eng-team] [Bug 1098279] Re: Keystone credential api should define few standard credentials types

2013-03-06 Thread Dolph Mathews
I'd be happy to see the identity API amended with an acknowledged ("reserved") list of credential types, but there's no way for keystone to enforce or validate that list, as it would break deployments attempting to use proprietary types, or from existing deployments to support future clients, etc.

[Yahoo-eng-team] [Bug 1103033] Re: Admin users cannot use privileged commands if they have no tenant/project associated with them

2013-03-06 Thread Dolph Mathews
This appears to be two separate issues, the first of which is by design. Users do not have roles without requesting authorization on a tenant, but we're working towards supporting domain-admins, etc, to make the semantic more meaningful. On the second issue by "show a warning", are you referri

[Yahoo-eng-team] [Bug 1143998] Re: nova-api crash - keystone.middleware.auth_token broken

2013-03-06 Thread Mark McLoughlin
Dolph - there's still a keystone.middleware.auth_token module in there for compatibility. I suspect it's broken because keystone.config registers CLI options Either needs to be removed or fixed, I guess ** Changed in: keystone Status: Invalid => Confirmed -- You received this bug notific

[Yahoo-eng-team] [Bug 1143998] Re: nova-api crash - keystone.middleware.auth_token broken

2013-03-06 Thread Dolph Mathews
Sounds like this is resolved? auth_token has been moved to keystoneclient in Grizzly. ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.lau

[Yahoo-eng-team] [Bug 1149286] Re: Quantum client does not support sec group quotas

2013-03-06 Thread Mark McClain
Reassigning to python-quantumclient, since the bug and fix are in that project. ** Also affects: python-quantumclient Importance: Undecided Status: New ** Changed in: python-quantumclient Importance: Undecided => High ** Changed in: python-quantumclient Status: New => In Prog

[Yahoo-eng-team] [Bug 1108646] Re: ERROR u'tenant-id' when glance index

2013-03-06 Thread Dolph Mathews
The KeyError here is indicating that your public_url contains something like %(tenant-id)s which should instead be %(tenant_id)s ** Changed in: keystone Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to

[Yahoo-eng-team] [Bug 1109130] Re: keystone-manage db_sync giving error

2013-03-06 Thread Dolph Mathews
Marking as wont-fix since this is a mysql permissions issue; if this hasn't been resolved, I'd suggest pinging the mailing list. ** Changed in: keystone Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed

[Yahoo-eng-team] [Bug 1129485] Re: ComputeCapabilitiesFilter does not play well with baremetal driver

2013-03-06 Thread OpenStack Hudson
Reviewed: https://review.openstack.org/23454 Committed: http://github.com/openstack-dev/devstack/commit/2920b7decc6769707ea45552c94864701c55988e Submitter: Jenkins Branch:master commit 2920b7decc6769707ea45552c94864701c55988e Author: Devananda van der Veen Date: Mon Mar 4 11:47:14 2013 -0

[Yahoo-eng-team] [Bug 1108599] Re: Invalid service-catalog

2013-03-06 Thread Dolph Mathews
I'm not quite sure what the bug is here (what's "invalid"?) but I'm hoping the following will resolve any confusion: - Ideally unversioned endpoints should be provided to keystone, which in turn passes them to clients. - The service catalog should not have any awareness of versioned endpoints - C

[Yahoo-eng-team] [Bug 1117555] Re: SSH timeout in tempest.test.boto.test_ec2_instance_run

2013-03-06 Thread OpenStack Hudson
Reviewed: https://review.openstack.org/23666 Committed: http://github.com/openstack/tempest/commit/e14e5a47253bbe43fc5d265dc8907993b58b5314 Submitter: Jenkins Branch:master commit e14e5a47253bbe43fc5d265dc8907993b58b5314 Author: Attila Fazekas Date: Wed Mar 6 07:52:51 2013 +0100 Have

[Yahoo-eng-team] [Bug 1133198] Re: Startup failed if logdir doesn't exist

2013-03-06 Thread Dolph Mathews
The user running keystone should (in *most* cases) not be capable of creating and properly assigning permissions to the non-existant directory. I'd also argue that the currently provided error message is fairly explicit in indicating that the directory is not writable (No such file or directory: '

[Yahoo-eng-team] [Bug 1133724] Re: Table name 'group' is a reserved word in MySQL 5.x

2013-03-06 Thread Dolph Mathews
>From the cited link: "Names of built-in functions are permitted as identifiers but may require care to be used as such." "A reserved word can be used as an identifier if you quote it." ** Changed in: keystone Status: New => Won't Fix -- You received this bug notification because you are

[Yahoo-eng-team] [Bug 1127756] Re: the manager objects should be removed

2013-03-06 Thread Dolph Mathews
Managers act as common proxies to drivers. See keystone.catalog.core.Manager for an example of their value. ** Changed in: keystone Status: New => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://

[Yahoo-eng-team] [Bug 1032633] Re: Keystone's token table grows unconditionally when using SQL backend.

2013-03-06 Thread Dolph Mathews
Moving this issue to a BP: https://blueprints.launchpad.net/keystone/+spec/keystone-manage-token- flush ** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://

[Yahoo-eng-team] [Bug 904529] Re: Schema of ec2tokens is incompatible with XML

2013-03-06 Thread Dolph Mathews
Marking this as wont-fix because A) we can't really change that API anymore, and B) v3 has been implemented with a /v3/credentials API, which is (in part) intended to replace the EC2 v2 extension along with pluggable auth (we also haven't implemented an ec2 plugin yet). The above google doc has mov

[Yahoo-eng-team] [Bug 1097970] Re: Most of the entities doesn't support enable=true

2013-03-06 Thread Dolph Mathews
Domains, services and endpoints support 'enabled' on v3. Credentials and groups do not. I'm not sure there's any value in toggling an enable/disable on those entities? Either way, this should be a BP explaining the desired impact of disabling those entities. ** Changed in: keystone Status:

[Yahoo-eng-team] [Bug 1103158] Re: XenServer not cleaning up SM locks

2013-03-06 Thread John Garbutt
Moved to will not fix, since it is an issue in XenServer not OpenStack ** Changed in: nova Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/

[Yahoo-eng-team] [Bug 1149890] [NEW] Inconsistent behaviour when preventing creation of too small subnets

2013-03-06 Thread Julie Pichon
Public bug reported: The backport for bug #1102504 didn't cover creating a subnet from a network details page (as opposed to using the "Create network" button on the Networks page). This makes the experience a bit inconsistent, where sometimes the user will be prevented from creating a single IP s

[Yahoo-eng-team] [Bug 1025929] Re: Updating a tenant with a blank description does not work

2013-03-06 Thread Dolph Mathews
Marking this as invalid for keystone as I believe this issue was caused by keystoneclient and is now fixed. Please re-open if I'm mistaken. ** Changed in: keystone Status: Triaged => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which i

[Yahoo-eng-team] [Bug 1046538] Re: Disabling projects can lock the user out of the system

2013-03-06 Thread Dolph Mathews
Marking this as invalid because I think this is expected behavior for keystone. If a user does get themselves into this situation, the static admin_token defined by keystone.conf is intended exactly for this scenario- bootstrapping an admin user (or in this case, re-bootstrapping an admin user). *

[Yahoo-eng-team] [Bug 1116184] Re: nova-novncproxy allows directory listing

2013-03-06 Thread Thierry Carrez
This is not really under our control (part of novnc rather than nova), and not really a info leak (everyone can tell what the listing will be), so I'm opening this up and closing as Invalid. Feel free to reopen if you disagree. ** Information type changed from Private Security to Public ** Change

[Yahoo-eng-team] [Bug 1146443] Re: Resize states automatically confirmed after 24 hours but default value is disabled

2013-03-06 Thread OpenStack Hudson
Reviewed: https://review.openstack.org/23637 Committed: http://github.com/openstack/openstack-manuals/commit/264f05128ef3aef68663b8e49bd5bef1de145d90 Submitter: Jenkins Branch:master commit 264f05128ef3aef68663b8e49bd5bef1de145d90 Author: Michael J Fork Date: Wed Mar 6 00:54:24 2013 +

[Yahoo-eng-team] [Bug 861854] Re: Token in URL is a security risk

2013-03-06 Thread Thierry Carrez
** Changed in: keystone Status: Fix Committed => Fix Released ** Changed in: keystone Milestone: None => grizzly-3 -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/861854 Title: