Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 917208

Summary:	PKI tokens are broken after 24 hours
Product:	Red Hat OpenStack	Reporter:	Adam Young <ayoung>
Component:	openstack-keystone	Assignee:	Adam Young <ayoung>
Status:	CLOSED ERRATA	QA Contact:	Pavel Sedlák <psedlak>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	2.0 (Folsom)	CC:	apevec, ayoung
Target Milestone:	snapshot5	Keywords:	Triaged
Target Release:	2.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-keystone-2012.2.3-5.el6ost	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-04-04 20:23:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Adam Young 2013-03-02 03:21:22 UTC

Description of problem:

After 24 hours of being up the auth_token_middleware attempts to retrieve the certificate_revocation_list but fails because the admin token is expired. There is no retry logic in this code path like there is with the uuid tokens to generate a new admin token.

Fixed upstream.

Backport patch on launchpad is here:
https://review.openstack.org/#/c/23334/

Comment 2 Adam Young 2013-03-05 02:42:40 UTC

https://review.openstack.org/#/c/23334/ Has been updated and now passes the tests.  It should be considered a candidate for backport.  It depends on the patch https://review.openstack.org/#/c/23468/1  which should also be backported.

Comment 8 errata-xmlrpc 2013-04-04 20:23:00 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0708.html