Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Self-service User Password Change - NotAuthorized

Juju deployed openstack-telemetry bundle on MaaS.

Openstack functions as normal except when any user (including domain_admin) tried to change their own password through the horizon dashboard, they get an unauthorized access error message: "Error: Unauthorized: Unable to change password." and "Error: Unauthorized. Please try logging in again."

The current web page (horizon/settings/password/) displays: "You are not authorized to access this page Login"

Horizon dashboard /var/log/apache2/error.log:

[Tue Nov 13 16:04:49.511064 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

[Tue Nov 13 16:04:49.511095 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

[Tue Nov 13 16:04:49.511099 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 67, in handle

[Tue Nov 13 16:04:49.511102 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] data['new_password'])

[Tue Nov 13 16:04:49.511105 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/api/keystone.py", line 573, in user_update_own_password

[Tue Nov 13 16:04:49.511109 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return client.users.update_password(origpassword, password)

[Tue Nov 13 16:04:49.511112 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/users.py", line 226, in update_password

[Tue Nov 13 16:04:49.511115 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self._update(base_url, params, method='POST', log=False)

[Tue Nov 13 16:04:49.511118 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 228, in _update

[Tue Nov 13 16:04:49.511121 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] **kwargs)

[Tue Nov 13 16:04:49.511123 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 334, in post

[Tue Nov 13 16:04:49.511126 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.request(url, 'POST', **kwargs)

[Tue Nov 13 16:04:49.511129 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 487, in request

[Tue Nov 13 16:04:49.511145 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] resp = super(LegacyJsonAdapter, self).request(args, *kwargs)

[Tue Nov 13 16:04:49.511148 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 213, in request

[Tue Nov 13 16:04:49.511151 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.session.request(url, method, **kwargs)

[Tue Nov 13 16:04:49.511153 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 869, in request

[Tue Nov 13 16:04:49.511156 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise exceptions.from_response(resp, method, url)

[Tue Nov 13 16:04:49.511158 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

[Tue Nov 13 16:04:49.514007 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized:

[Tue Nov 13 16:04:49.514031 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

[Tue Nov 13 16:04:49.514034 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/forms/views.py", line 185, in form_valid

[Tue Nov 13 16:04:49.514037 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] handled = form.handle(self.request, form.cleaned_data)

[Tue Nov 13 16:04:49.514040 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 36, in sensitive_variables_wrapper

[Tue Nov 13 16:04:49.514043 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return func(func_args, *func_kwargs)

[Tue Nov 13 16:04:49.514046 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 74, in handle

[Tue Nov 13 16:04:49.514048 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] _('Unable to change password.'))

[Tue Nov 13 16:04:49.514052 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 334, in handle

[Tue Nov 13 16:04:49.514054 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] log_method, log_entry, log_level)

[Tue Nov 13 16:04:49.514057 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 230, in handle_unauthorized

[Tue Nov 13 16:04:49.514059 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise NotAuthorized

[Tue Nov 13 16:04:49.514062 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] NotAuthorized

Self-service User Password Change - NotAuthorized

Juju deployed openstack-telemetry bundle on MaaS.

Openstack functions as normal except when any user (including domain_admin) tried to change their own password through the horizon dashboard, they get an unauthorized access error message: "Error: Unauthorized: Unable to change password." and "Error: Unauthorized. Please try logging in again."

The current web page (horizon/settings/password/) displays: "You are not authorized to access this page Login"

Horizon dashboard /var/log/apache2/error.log:

[Tue Nov 13 16:04:49.511064 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

[Tue Nov 13 16:04:49.511095 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

[Tue Nov 13 16:04:49.511099 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 67, in handle

[Tue Nov 13 16:04:49.511102 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] data['new_password'])

[Tue Nov 13 16:04:49.511105 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/api/keystone.py", line 573, in user_update_own_password

[Tue Nov 13 16:04:49.511109 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return client.users.update_password(origpassword, password)

[Tue Nov 13 16:04:49.511112 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/users.py", line 226, in update_password

[Tue Nov 13 16:04:49.511115 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self._update(base_url, params, method='POST', log=False)

[Tue Nov 13 16:04:49.511118 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 228, in _update

[Tue Nov 13 16:04:49.511121 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] **kwargs)

[Tue Nov 13 16:04:49.511123 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 334, in post

[Tue Nov 13 16:04:49.511126 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.request(url, 'POST', **kwargs)

[Tue Nov 13 16:04:49.511129 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 487, in request

[Tue Nov 13 16:04:49.511145 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] resp = super(LegacyJsonAdapter, self).request(args, *kwargs)

[Tue Nov 13 16:04:49.511148 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 213, in request

[Tue Nov 13 16:04:49.511151 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.session.request(url, method, **kwargs)

[Tue Nov 13 16:04:49.511153 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 869, in request

[Tue Nov 13 16:04:49.511156 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise exceptions.from_response(resp, method, url)

[Tue Nov 13 16:04:49.511158 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

[Tue Nov 13 16:04:49.514007 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized:

[Tue Nov 13 16:04:49.514031 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

[Tue Nov 13 16:04:49.514034 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/forms/views.py", line 185, in form_valid

[Tue Nov 13 16:04:49.514037 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] handled = form.handle(self.request, form.cleaned_data)

[Tue Nov 13 16:04:49.514040 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 36, in sensitive_variables_wrapper

[Tue Nov 13 16:04:49.514043 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return func(func_args, *func_kwargs)

[Tue Nov 13 16:04:49.514046 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 74, in handle

[Tue Nov 13 16:04:49.514048 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] _('Unable to change password.'))

[Tue Nov 13 16:04:49.514052 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 334, in handle

[Tue Nov 13 16:04:49.514054 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] log_method, log_entry, log_level)

[Tue Nov 13 16:04:49.514057 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 230, in handle_unauthorized

[Tue Nov 13 16:04:49.514059 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise NotAuthorized

[Tue Nov 13 16:04:49.514062 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] NotAuthorized

Self-service User Password Change - NotAuthorized

Juju deployed openstack-telemetry bundle on MaaS.

Openstack functions as normal except when any user (including domain_admin) tried to change their own password through the horizon dashboard, they get an unauthorized access error message: "Error: Unauthorized: Unable to change password." and "Error: Unauthorized. Please try logging in again."

The current web page (horizon/settings/password/) displays: "You are not authorized to access this page Login"

Horizon dashboard /var/log/apache2/error.log:

[Tue Nov 13 16:04:49.511064 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

req-d8991522-8179-4c8c-9aa2-c591b0df1c74) [Tue Nov 13 16:04:49.511095 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

last): [Tue Nov 13 16:04:49.511099 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 67, in handle

handle [Tue Nov 13 16:04:49.511102 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] data['new_password'])

data['new_password']) [Tue Nov 13 16:04:49.511105 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/api/keystone.py", line 573, in user_update_own_password

user_update_own_password [Tue Nov 13 16:04:49.511109 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return client.users.update_password(origpassword, password)

password) [Tue Nov 13 16:04:49.511112 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/users.py", line 226, in update_password

update_password [Tue Nov 13 16:04:49.511115 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self._update(base_url, params, method='POST', log=False)

log=False) [Tue Nov 13 16:04:49.511118 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 228, in _update

_update [Tue Nov 13 16:04:49.511121 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] **kwargs)

**kwargs) [Tue Nov 13 16:04:49.511123 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 334, in post

post [Tue Nov 13 16:04:49.511126 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.request(url, 'POST', **kwargs)

**kwargs) [Tue Nov 13 16:04:49.511129 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 487, in request

request [Tue Nov 13 16:04:49.511145 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] resp = super(LegacyJsonAdapter, self).request(args, *kwargs)

self).request(*args, **kwargs) [Tue Nov 13 16:04:49.511148 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 213, in request

request [Tue Nov 13 16:04:49.511151 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return self.session.request(url, method, **kwargs)

**kwargs) [Tue Nov 13 16:04:49.511153 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 869, in request

request [Tue Nov 13 16:04:49.511156 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise exceptions.from_response(resp, method, url)

url) [Tue Nov 13 16:04:49.511158 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d8991522-8179-4c8c-9aa2-c591b0df1c74)

req-d8991522-8179-4c8c-9aa2-c591b0df1c74) [Tue Nov 13 16:04:49.514007 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Unauthorized:

[Tue Nov 13 16:04:49.514031 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] Traceback (most recent call last):

last): [Tue Nov 13 16:04:49.514034 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/forms/views.py", line 185, in form_valid

form_valid [Tue Nov 13 16:04:49.514037 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] handled = form.handle(self.request, form.cleaned_data)

form.cleaned_data) [Tue Nov 13 16:04:49.514040 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 36, in sensitive_variables_wrapper

sensitive_variables_wrapper [Tue Nov 13 16:04:49.514043 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] return func(func_args, *func_kwargs)

func(*func_args, **func_kwargs) [Tue Nov 13 16:04:49.514046 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/openstack_dashboard/dashboards/settings/password/forms.py", line 74, in handle

handle [Tue Nov 13 16:04:49.514048 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] _('Unable to change password.'))

password.')) [Tue Nov 13 16:04:49.514052 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 334, in handle

handle [Tue Nov 13 16:04:49.514054 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] log_method, log_entry, log_level)

log_level) [Tue Nov 13 16:04:49.514057 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] File "/usr/lib/python2.7/dist-packages/horizon/exceptions.py", line 230, in handle_unauthorized

handle_unauthorized [Tue Nov 13 16:04:49.514059 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] raise NotAuthorized

NotAuthorized [Tue Nov 13 16:04:49.514062 2018] [wsgi:error] [pid 2483:tid 139843927574272] [remote 10.50.1.195:54560] NotAuthorized

NotAuthorized