Description of problem: LDAP Domain not available anymore which is available with OSP7 and OSP8 For example, login to horizon as user “admin”, and then click “Identity” ---> “Domain”, only “Default” can be be found now. Version-Release number of selected component (if applicable): - OpenStack 9 - python-django-horizon-9.0.1-2.el7ost.noarch How reproducible: Steps to Reproduce: 1. Integrate OPEN Stack with IDM https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/paged/integrate-with-identity-service/chapter-2-identity-management-integration. It supposed to be same for Active Directory or generic LDAP. 2. Check if the Domain available via Command line ~~~~ # openstack domain list +----------------------------------+---------+---------+--------------------+ | ID | Name | Enabled | Description | +----------------------------------+---------+---------+--------------------+ | default | Default | True | The default domain | | e11330b788674772bea741a4bb571630 | LAB | True | | +----------------------------------+---------+---------+--------------------+ ~~~~ 3. login to horizon as user “admin”, and then click “Identity” ---> “Domain” Actual results: There is no Domain Option / Available Domain on OPS9 Horizon Dashboard. Expected results: Following same OSP 7 and 8 Doc and step, Domains are available "ogin to horizon as user “admin”, and then click “Identity” ---> “Domain”" Additional info:
It looks like for the domain-scoped tokens (and thus, the Domains tab) to work properly, the default session engine needs to be changed from "cookies" to something that provides more space to store all the tokens. The https://wiki.openstack.org/wiki/Horizon/DomainWorkFlow page recommends adding/changing this configuration: CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache', 'LOCATION': '127.0.0.1:11211', } } SESSION_ENGINE = 'django.contrib.sessions.backends.cache' Alternatively, if memcache is not available, an in-memory session engine can be also used: CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.locmem.LocMemCache', } } SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
I submitted a patch fixing this issue upstream: https://review.openstack.org/#/c/427125/ Once it's merged, I will propose backports.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2017-0466.html