keystone middleware bug

Bug #1481105 reported by David Medberry
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
neutron (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

When upgrading from Juno to Kilo (with a system that was initially installed with Icehouse) a middleware error crops up in Neutron.

It's easiest to show by showing what the dist sets in each of these releases:

/etc/neutron/api-paste.ini (Icehouse)

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

/etc/neutron/api-paste.ini (Juno)
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
(note that this is the new default but the old setting still works as it is only deprecated, not removed)

and

/etc/neutron/api-paste.ini (Kilo)
Where the new setting no longer works at all.

This may be related to the changes in:
http://packages.ubuntu.com/utopic-updates/python-keystonemiddleware

The original Icehouse release had no dependency on python-keystonemiddleware (and in fact, the package did not exist.) It does have a dep on python-keystoneclient but that doesn't have a chained dep on the middleware.

When Juno brought in the middleware package, it should have indicated, somehow, that the keystoneclient.middlware.auth_token:filter_factory was deprecated and should be changed to keystonemiddleware.auth_token:filter_factory. AND/OR Kilo should have done that for us.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in neutron (Ubuntu):
status: New → Confirmed
Revision history for this message
James Page (james-page) wrote :

Hi David

The default api-paste.ini provided by the Juno packages makes this change; for an interactive upgrade, users would have been prompted to review changes if the default api-paste.ini has been change.

As a policy, we don't endeavour to make automatic updates to configuration files for the openstack packages as typically they are being managed outside of packaging, and doing auto-updates just confuses an already complex situation.

Changed in neutron (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.