[Bug 1481105] Re: keystone middleware bug

[James Page]

Hi David

The default api-paste.ini provided by the Juno packages makes this
change; for an interactive upgrade, users would have been prompted to
review changes if the default api-paste.ini has been change.

As a policy, we don't endeavour to make automatic updates to
configuration files for the openstack packages as typically they are
being managed outside of packaging, and doing auto-updates just confuses
an already complex situation.

** Changed in: neutron (Ubuntu)
       Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to neutron in Ubuntu.
https://bugs.launchpad.net/bugs/1481105

Title:
  keystone middleware bug

Status in neutron package in Ubuntu:
  Invalid

Bug description:
  When upgrading from Juno to Kilo (with a system that was initially
  installed with Icehouse) a middleware error crops up in Neutron.

  It's easiest to show by showing what the dist sets in each of these
  releases:

  /etc/neutron/api-paste.ini (Icehouse)

  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

  /etc/neutron/api-paste.ini (Juno)
  [filter:authtoken]
  paste.filter_factory = keystonemiddleware.auth_token:filter_factory
  (note that this is the new default but the old setting still works as it is only deprecated, not removed)

  and

  /etc/neutron/api-paste.ini (Kilo)
  Where the new setting no longer works at all.

  This may be related to the changes in:
  http://packages.ubuntu.com/utopic-updates/python-keystonemiddleware

  The original Icehouse release had no dependency on python-
  keystonemiddleware (and in fact, the package did not exist.) It does
  have a dep on python-keystoneclient but that doesn't have a chained
  dep on the middleware.

  When Juno brought in the middleware package, it should have indicated,
  somehow, that the keystoneclient.middlware.auth_token:filter_factory
  was deprecated and should be changed to
  keystonemiddleware.auth_token:filter_factory. AND/OR Kilo should have
  done that for us.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/1481105/+subscriptions