← Back to team overview

openstack team mailing list archive

Re: [Keystone] my token generated by curling http://localhost:35357/v2.0/tokens is too long...

 

+1

However, I'm curious as to what makes it "too" long, or what's not working.
Can you provide an example?

-Dolph


On Sat, Feb 23, 2013 at 12:33 PM, Anne Gentle <anne@xxxxxxxxxxxxx> wrote:

> I believe this is due to a change in default for grizzly-- token_format
> defaults to PKI instead of UUID in the [signing] section of the
> keystone.conf configuration file.
>
>
> http://docs.openstack.org/trunk/openstack-compute/admin/content/certificates-for-pki.html
>
> Anne
>
>
> On Sat, Feb 23, 2013 at 12:27 PM, Kun Huang <Academicgareth@xxxxxxxxx>wrote:
>
>> Hi, all
>> My token generated by curling http://localhost:35357/v2.0/tokens is too
>> long...
>>
>> Nearly 4000 chars in this token. I have change the max_token_size in
>> keystone.conf, but it doesn't work.
>>
>> For more, the token is not only long, and also not woring...
>>
>>
>> swift@storage-hk:~$ curl -s -d '{"auth": {"tenantName": "service",
>> "passwordCredentials": {"username": "swift", "password":"swiftpass"}}}' -H
>> 'Content-type: application/json' http://localhost:35357/v2.0/tokens |
>> python -mjson.tool
>> {
>>     "access": {
>>         "metadata": {
>>             "is_admin": 0,
>>             "roles": [
>>                 "9fe2ff9ee4384b1894a90878d3e92bab",
>>                 "acb42117c39945079ecf56bad7f441a1"
>>             ]
>>         },
>>         "serviceCatalog": [
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "
>> http://localhost:8774/v1.1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "id": "eeaec0b2f9af4ecbae58225f05f58a13",
>>                         "internalURL": "
>> http://localhost:8774/v1.1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "publicURL": "
>> http://localhost:8774/v1.1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "nova",
>>                 "type": "compute"
>>             },
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "http://localhost:9292";,
>>                         "id": "7fc9afcca89f44e68875b88e05681dea",
>>                         "internalURL": "http://localhost:9292";,
>>                         "publicURL": "http://localhost:9292";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "glance",
>>                 "type": "image"
>>             },
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "
>> http://localhost:8776/v1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "id": "d826fa55273d4ed8bed3b744628629cf",
>>                         "internalURL": "
>> http://localhost:8776/v1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "publicURL": "
>> http://localhost:8776/v1/a20b1ea54bb54614956697b5484c9de1";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "volume",
>>                 "type": "volume"
>>             },
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "http://localhost:8773/services/Admin
>> ",
>>                         "id": "83dd85b5af21449ba5d5b9f530602f87",
>>                         "internalURL": "
>> http://localhost:8773/services/Cloud";,
>>                         "publicURL": "
>> http://localhost:8773/services/Cloud";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "ec2",
>>                 "type": "ec2"
>>             },
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "http://localhost:8888/v1";,
>>                         "id": "674b345c9a9345978a74ed157f7f646d",
>>                         "internalURL": "
>> http://localhost:8888/v1/AUTH_a20b1ea54bb54614956697b5484c9de1";,
>>                         "publicURL": "
>> http://localhost:8888/v1/AUTH_a20b1ea54bb54614956697b5484c9de1";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "swift",
>>                 "type": "object-store"
>>             },
>>             {
>>                 "endpoints": [
>>                     {
>>                         "adminURL": "http://localhost:35357/v2.0";,
>>                         "id": "c7384f41b3b1487b9dda90577f46dda6",
>>                         "internalURL": "http://localhost:5000/v2.0";,
>>                         "publicURL": "http://localhost:5000/v2.0";,
>>                         "region": "RegionOne"
>>                     }
>>                 ],
>>                 "endpoints_links": [],
>>                 "name": "keystone",
>>                 "type": "identity"
>>             }
>>         ],
>>         "token": {
>>             "expires": "2013-02-24T18:19:09Z",
>>             "id":
>> "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-883tgQURgQ-HSZuPy0Nel2R5VISvDjy7J9cej1JfrafUecXUyV7BEczdZoozA==",
>>             "issued_at": "2013-02-23T18:19:09.055517",
>>             "tenant": {
>>                 "description": "Service Tenant",
>>                 "enabled": true,
>>                 "id": "a20b1ea54bb54614956697b5484c9de1",
>>                 "name": "service"
>>             }
>>         },
>>         "user": {
>>             "id": "5a67542c04084123ab7129c28a03ac01",
>>             "name": "swift",
>>             "roles": [
>>                 {
>>                     "name": "_member_"
>>                 },
>>                 {
>>                     "name": "admin"
>>                 }
>>             ],
>>             "roles_links": [],
>>             "username": "swift"
>>         }
>>     }
>> }
>>
>>
>>
>> By the way, though it's too long, it still works with GET
>> /tokens/{token_id}. How to make it short?
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
>>
>>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>

Follow ups

References