环境中缺少实体 ID - Keystone SP

Question

当我将 Keystone 配置为 Service Provider + horizon 时，我在 /var/log/keystone/keystone-wsgi-public.log 中收到此错误，在尝试登录我的 IdP SimpleSamlPHP 后：

2017-03-15 01:32:26.240 29046 INFO keystone.common.wsgi [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] GET http://10.7.49.47:5000/v3/auth/OS-FEDERATION/identity_providers/myidp/protocols/mapped/websso?origin=http://10.7.49.47/horizon/auth/websso/
2017-03-15 01:32:26.241 29046 ERROR keystone.federation.controllers [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] http://10.7.49.47/horizon/auth/websso/ is not a trusted dashboard host
2017-03-15 01:32:26.242 29046 WARNING keystone.common.wsgi [req-022ef0af-1811-4038-9aad-bd9a3e9443ac - - - - -] Authorization failed. The request you have made requires authentication. from 10.7.49.11

在我的浏览器中我收到：{"error"：{"message"："The request you have made requires authentication."，"code"：401，"title"："Unauthorized"}}

编辑：我激活了调试，我得到了这个日志：

2017-03-15 12:29:58.960 5933 DEBUG keystone.federation.utils [req-e9875dd7-221b-463f-b2c1-ea184680fef3 - - - - -] Cannot find "remote_id_attribute" in configuration group mapped. Trying default location in group federation. get_remote_id_parameter /usr/local/lib/python2.7/dist-packages/keystone/federation/utils.py:296

Answer 1

我停止了 uwsgi，然后重新启动它。

环境中缺少实体 ID - Keystone SP

Missing entity ID from environment - Keystone SP

single-sign-on

openstack

federated-identity

keystone