Reviewed: https://review.openstack.org/279908
Committed:
https://git.openstack.org/cgit/openstack/keystone/commit/?id=e913001cbedb4dd8748023ede31115a032de83f8
Submitter: Jenkins
Branch: master
commit e913001cbedb4dd8748023ede31115a032de83f8
Author: Steve Martinelli <steve...@ca.ibm.com>
Date: Sat Feb 13 20:42:30 2016 -0500
handle unicode names for federated users
the previous logic that handled getting the assertions from
the environment did not account for utf8 characters
Co-Authored-By: David Stanek <dsta...@dstanek.com>
Closes-Bug: 1525250
Change-Id: I90f4885161a72758986a652e845b4017f9cdcfb7
** Changed in: keystone
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1525250
Title:
Failure when federated user name contains non ascii characters
Status in OpenStack Identity (keystone):
Fix Released
Bug description:
When logging in with openid-connect, I get
'{"error": {"message": "An unexpected error prevented the server from
fulfilling your request: 'ascii' codec can't decode byte 0xc3 in
position 5: ordinal not in range(128) (Disable debug mode to suppress
these details.)", "code": 500, "title": "Internal Server Error"}}'
My name has an 'å'. I suspect there is a connection.
Coincidentally(?), if I do the following in python shell:
>>> unicode('Jon Kåre Hellan')
I get 'UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in
position 5: ordinal not in range(128)'
This is on liberty, using federation in contrib. On master, federation
has been moved up from contrib, but I couldn't see any code changes
that would help.
Stack trace:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 248,
in __call__
result = method(context, **params)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/controllers.py",
line 315, in federated_sso_auth
protocol_id)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/controllers.py",
line 297, in federated_authentication
return self.authenticate_for_token(context, auth=auth)
File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line
385, in authenticate_for_token
self.authenticate(context, auth_info, auth_context)
File "/usr/lib/python2.7/site-packages/keystone/auth/controllers.py", line
510, in authenticate
auth_context)
File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py",
line 69, in authenticate
self.identity_api)
File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py",
line 144, in handle_unscoped_token
federation_api, identity_api)
File "/usr/lib/python2.7/site-packages/keystone/auth/plugins/mapped.py",
line 188, in apply_mapping_filter
identity_provider, protocol, assertion)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/core.py", line
90, in evaluate
mapped_properties = rule_processor.process(assertion_data)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line
470, in process
new_local = self._update_local_mapping(local, direct_maps)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line
611, in _update_local_mapping
new_value = self._update_local_mapping(v, direct_maps)
File
"/usr/lib/python2.7/site-packages/keystone/contrib/federation/utils.py", line
613, in _update_local_mapping
new_value = v.format(*direct_maps)
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 5:
ordinal not in range(128)
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1525250/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
