diff options
| -rw-r--r-- | ansible/roles/keystone/templates/httpd-keystone.conf.j2 | 2 | ||||
| -rw-r--r-- | releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml | 8 |
2 files changed, 9 insertions, 1 deletions
diff --git a/ansible/roles/keystone/templates/httpd-keystone.conf.j2 b/ansible/roles/keystone/templates/httpd-keystone.conf.j2 index 6d4692367..2d5bfb848 100644 --- a/ansible/roles/keystone/templates/httpd-keystone.conf.j2 +++ b/ansible/roles/keystone/templates/httpd-keystone.conf.j2 @@ -53,7 +53,7 @@ LogLevel info {% if keystone_enable_federation_openid | bool %} {% if keystone_federation_oidc_forwarded_headers | length > 0 %} - OIDCXForwardedHeaders "{{ keystone_federation_oidc_forwarded_headers }}" + OIDCXForwardedHeaders {{ keystone_federation_oidc_forwarded_headers }} {% endif %} OIDCClaimPrefix "OIDC-" OIDCClaimDelimiter "{{ keystone_federation_oidc_claim_delimiter }}" diff --git a/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml b/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml new file mode 100644 index 000000000..ef3fc14e2 --- /dev/null +++ b/releasenotes/notes/fix-oidc-forwarded-headers-2b3b670e3732ca86.yaml @@ -0,0 +1,8 @@ +--- +fixes: + - | + Fixes the ``OIDCXForwardedHeaders`` directive in the Keystone Apache + configuration. The value was previously wrapped in double quotes, which + caused Apache to treat the whole list as a single argument and prevented + configuring more than one forwarded header. See `LP#2155147 + <https://bugs.launchpad.net/kolla-ansible/+bug/2155147>`__. |