Ask Your Question
0

Horizon : error 500 after activating multi domains support

asked 2013-12-19 11:50:18 -0500

Montesq gravatar image

updated 2013-12-23 10:43:40 -0500

Hi,

I've activated the multi domains parameters in Keystone and now the Domain field is displayed on the login page. I can log in with users from the "Default" domain without any issue. But when I try to log in with a user from a Domain != 'Default' , I get an error 500 in Horizon.

After activating the full logs, here are the logs I get : http://pastebin.com/raw.php?i=rYtHpwQi

As you can see: - the authentication against keystone works fine - novaclient and neutronclient fail because they use the token ID instead of the token provided in the header x-subject-token of the first query

edit retag flag offensive close merge delete

Comments

This bug is now reported in the Horizon bugtracker : https://bugs.launchpad.net/horizon/+bug/1264483%3C/p%3E (https://bugs.launchpad.net/horizon/+bug/1264483)

Montesq gravatar imageMontesq ( 2013-12-27 04:10:32 -0500 )edit

2 answers

Sort by ยป oldest newest most voted
0

answered 2013-12-30 09:53:41 -0500

Montesq gravatar image

Looks like the multi-domain can not be used before fixing the V3 support in nova : https://bugs.launchpad.net/python-novaclient/+bug/1262843

edit flag offensive delete link more
0

answered 2013-12-22 00:06:22 -0500

DennyZhang gravatar image

Looks like the username/password in horizon configuration is incorrect.

And remember we can only pick username/password authentication or token based authentication for keystone. Don't enable them both.

edit flag offensive delete link more

Comments

Hi DennyZhang, I guess this is not an issue with my credentials, because when I create a token via the API like:

{ "auth": { "identity": { "methods": [ "password" ], "password": { "user": { "domain": { "id": "3a56b9de675545da8edf8cc65dc0eb38" }, "name": "test-domaine", "password": "test-domaine" } } }, "scope": { "project": { "id": "d4df49cc3c7b4348950d56a0eabaade1" } } } } I get a 201 with the X-Subject-Token attribute. Of course, I use the same credentials to log into Horizon...

Moreover, when I look at the apache logs, the first line is:
"[error] Login successful for user "test-domaine"."

Montesq gravatar imageMontesq ( 2013-12-23 04:43:18 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2013-12-19 11:50:18 -0500

Seen: 292 times

Last updated: Dec 30 '13