Bug 1217663

Summary: Overridden default for Token Provider points to non-existent class
Product: [Community] RDO Reporter: Adam Young <ayoung>
Component: openstack-keystoneAssignee: Alan Pevec <apevec>
Status: CLOSED EOL QA Contact: Shai Revivo <srevivo>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: KiloCC: ayoung, srevivo
Target Milestone: ---   
Target Release: Kilo   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1217672 (view as bug list) Environment:
Last Closed: 2016-05-19 15:53:15 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1217672    

Description Adam Young 2015-05-01 00:40:40 UTC
Description of problem:
If a user installs and runs the Keystione packlage without packstack support, the token provider fails with:

ERROR keystone.common.wsgi [-] No module named backends.sql

This is due to the file /usr/share/keystone/keystone-dist.conf overriding the default config for the token provider, using old information.  The file has:

[token]
driver=keystone.token.backends.sql.Token


Which is no longer the correct path, it should be getting the default value which you can see in the sample config file:

driver = keystone.token.persistence.backends.sql.Token


If this value is explicitly st in /etc/keystone/keystone.conf  everything works correctly.

the keystone rpmshould not be shipping  /usr/share/keystone/keystone-dist.conf as it will continue to trip over default values that change from upstream.  For example, it has 


[database]
connection=mysql://keystone:keystone@localhost/keystone

Which is an example, but should not work;  it is a hardcoded password. 

The catalog section has:"

[catalog]
driver=keystone.catalog.backends.sql.Catalog
template_file=/etc/keystone/default_catalog.templates

This makes no sense:  the template value is only used if the template driver is enabled, not the SQL driver.

Comment 3 Chandan Kumar 2016-05-19 15:53:15 UTC
This bug is against a Version which has reached End of Life.
If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.