Updated OpenStack Identity packages that resolve various issues are nowavailable for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse)for RHEL 7.
Red Hat Enterprise Linux OpenStack Platform provides the facilities forbuilding a private or public infrastructure-as-a-service (IaaS) cloudrunning on commonly available physical hardware. This advisory includespackages for:* OpenStack Identity serviceThe OpenStack Identity service (keystone) authenticates and authorizesOpenStack users by keeping track of users and their permitted activities.The Identity service supports multiple forms of authentication includinguser name and password credentials, token-based systems, and AWS-stylelogins.This update addresses the following issues:* Rebase package(s) to version: 2014.1.4Highlights, important fixes, or notable enhancements:When a domain was disabled in keystone, the projects within that domain werestill enabled. This allowed a user from a different domain to obtain tokens froma project in a disabled domain. Keystone has been fixed to no longer allowtokens to be issue for projects within a disabled domain. (Launchpad #1315556)A race condition in keystone existed where two user add operations occurring atthe same time would conflict if the default role was not created yet. This wouldcause the user add operations to fail. This has been fixed to allow both useradd operations to complete successfully. (Launchpad #1419043)When running keystone in eventlet (keystone-all), an error in the way that thelogging is initialized could have led to a race condition under heavy load. Thisrace condition could have resulted in potential deadlocks. The initialization ofthe logging has been corrected to avoid this deadlock potential. (Launchpad#1420788) (BZ#1203266)
Before applying this update, ensure all previously released errata relevant toyour system have been applied.Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 runs on Re HatEnterprise Linux 7.1.The Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 Release Notes (seeReferences section) contain the following:* An explanation of the way in which the provided components interact to form aworking cloud computing environment.* Technology Previews, Recommended Practices, and Known Issues.* The channels required for Red Hat Enterprise Linux OpenStack Platform 5 forRHEL 7, including which channels need to be enabled and disabled.For details on how to apply this update, refer to:https://access.redhat.com/articles/11258
1203266 – Rebase openstack-keystone to 2014.1.4
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from: