Back to bug 1325475

Who When What Removed Added
Alexander Chuzhoy 2016-04-09 04:19:51 UTC Priority unspecified high
Target Release --- 8.0
Target Milestone --- ga
Severity unspecified high
Mike Burns 2016-04-11 13:36:33 UTC Status NEW CLOSED
Resolution --- DUPLICATE
Last Closed 2016-04-11 09:36:33 UTC
Mike Burns 2016-04-11 13:39:35 UTC Status CLOSED NEW
Resolution DUPLICATE ---
Keywords Reopened
Mike Burns 2016-04-11 15:02:51 UTC Target Milestone ga async
Zane Bitter 2016-04-11 15:05:33 UTC CC sasha, shardy, therve, zbitter
Target Milestone async ga
Summary rhel-osp-director: upgrade 7.3->8.0, that follows update 7.2->7.3, fails with "ERROR: Authentication failed: Authentication required" rhel-osp-director: upgrade 7.3->8.0, that follows update 7.2->7.3, times out due to os-collect-config auth failure
Flags needinfo?(sasha)
Zane Bitter 2016-04-11 15:06:33 UTC Target Milestone ga async
Alexander Chuzhoy 2016-04-11 15:23:55 UTC Flags needinfo?(sasha)
Zane Bitter 2016-04-11 23:17:50 UTC CC ramishra
Marius Cornea 2016-04-12 09:37:14 UTC CC mcornea
Daniel Becker 2016-04-13 10:39:38 UTC Flags needinfo?(sasha)
Zane Bitter 2016-04-14 20:54:22 UTC Flags needinfo?(shardy)
Steven Hardy 2016-04-15 12:10:14 UTC Flags needinfo?(sasha) needinfo?(shardy)
Steven Hardy 2016-04-15 12:49:26 UTC Flags needinfo?(sasha)
Alexander Chuzhoy 2016-04-16 04:48:04 UTC Flags needinfo?(sasha)
Thomas Hervé 2016-04-16 09:22:51 UTC Flags needinfo?(sasha)
Mike Burns 2016-04-18 13:13:35 UTC Assignee athomas therve
Thomas Hervé 2016-04-18 16:19:08 UTC Flags needinfo?(sasha)
Graeme Gillies 2016-04-19 09:01:24 UTC CC ggillies
Steve Baker 2016-05-04 21:24:05 UTC CC sbaker
Assignee therve shardy
Alexander Chuzhoy 2016-05-13 14:26:48 UTC CC ohochman
Zane Bitter 2016-06-01 16:05:18 UTC Flags needinfo?(sasha)
Alexander Chuzhoy 2016-06-01 19:53:59 UTC Flags needinfo?(sasha)
Zane Bitter 2016-06-01 20:14:31 UTC Status NEW ASSIGNED
Doc Text Cause: In the course of upgrading the undercloud from OSPd 7 to OSPd 8, the _member_ role is removed from the admin user because Keystone no longer uses that idiom. Trusts stored in the Heat database rely on the trustor user retaining all of their delegated roles, which includes the _member_ role.

Consequence: Heat stack updates after the undercloud upgrade fail with authentication errors.

Fix: Run the command:

openstack role add _member_ --user admin --project admin

to re-add the _member_ role to the admin user.

Result: The trusts work as expected to authenticate.
Doc Type Bug Fix Known Issue
Zane Bitter 2016-06-01 20:29:40 UTC Link ID OpenStack gerrit 307352
Jaromir Coufal 2016-06-28 15:32:09 UTC CC jcoufal
Omri Hochman 2016-07-12 14:10:51 UTC QA Contact achernet sasha
Jon Schlueter 2016-12-14 17:35:37 UTC CC jschluet
Sofer Athlan-Guyot 2016-12-16 12:47:21 UTC Status ASSIGNED ON_QA
CC sathlang
Flags needinfo?(sasha)
Omri Hochman 2016-12-20 20:07:37 UTC Status ON_QA ASSIGNED
Omri Hochman 2016-12-20 20:08:27 UTC Flags needinfo?(sasha)
Sofer Athlan-Guyot 2017-01-25 01:48:46 UTC Status ASSIGNED CLOSED
Resolution --- WORKSFORME
Last Closed 2016-04-11 09:36:33 UTC 2017-01-24 20:48:46 UTC
Irina Petrova 2017-12-07 11:40:37 UTC Blocks 1523192
Amit Ugol 2018-01-07 10:51:29 UTC CC augol

Back to bug 1325475