Juju deployed openstack-telemetry bundle on MaaS.
Openstack functions as normal except when any user (including domain_admin) tried to change their own password through the horizon dashboard, they get an unauthorized access error message: "Error: Unauthorized: Unable to change password." and "Error: Unauthorized. Please try logging in again."
The current web page (horizon/settings/password/) displays: "You are not authorized to access this page Login"
Horizon dashboard /var/log/apache2/error.log:
[Tue Nov 13 16:04:49.511064 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)
[Tue Nov 13 16:04:49.511095 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):
[Tue Nov 13 16:04:49.511099 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 67, in handle
[Tue Nov 13 16:04:49.511102 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] data['new_password'])
[Tue Nov 13 16:04:49.511105 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/api/keystone.py", line 573, in user_update_own_password
[Tue Nov 13 16:04:49.511109 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return client.users.update_password(origpassword, password)
[Tue Nov 13 16:04:49.511112 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/users.py", line 226, in update_password
[Tue Nov 13 16:04:49.511115 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self._update(base_url, params, method='POST', log=False)
[Tue Nov 13 16:04:49.511118 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 228, in _update
[Tue Nov 13 16:04:49.511121 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] **kwargs)
[Tue Nov 13 16:04:49.511123 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 334, in post
[Tue Nov 13 16:04:49.511126 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.request(url, 'POST', **kwargs)
[Tue Nov 13 16:04:49.511129 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 487, in request
[Tue Nov 13 16:04:49.511145 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] resp = super(LegacyJsonAdapter, self).request(args, *kwargs)
[Tue Nov 13 16:04:49.511148 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 213, in request
[Tue Nov 13 16:04:49.511151 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.session.request(url, method, **kwargs)
[Tue Nov 13 16:04:49.511153 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 869, in request
[Tue Nov 13 16:04:49.511156 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise exceptions.from_response(resp, method, url)
[Tue Nov 13 16:04:49.511158 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)
[Tue Nov 13 16:04:49.514007 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized:
[Tue Nov 13 16:04:49.514031 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):
[Tue Nov 13 16:04:49.514034 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/forms/views.py", line 185, in form_valid
[Tue Nov 13 16:04:49.514037 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] handled = form.handle(self.request, form.cleaned_data)
[Tue Nov 13 16:04:49.514040 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 36, in sensitive_variables_wrapper
[Tue Nov 13 16:04:49.514043 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return func(func_args, *func_kwargs)
[Tue Nov 13 16:04:49.514046 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 74, in handle
[Tue Nov 13 16:04:49.514048 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] _('Unable to change password.'))
[Tue Nov 13 16:04:49.514052 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 334, in handle
[Tue Nov 13 16:04:49.514054 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] log_method, log_entry, log_level)
[Tue Nov 13 16:04:49.514057 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 230, in handle_unauthorized
[Tue Nov 13 16:04:49.514059 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise NotAuthorized
[Tue Nov 13 16:04:49.514062 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] NotAuthorized