openstack team mailing list archive

[Ruslan Kiianchuk <ruslan.kiianchuk@xxxxxxxxx>]

Thanks a lot for the tip!

Perhaps, "--os-url" is new parameter in *openstackclient *(can't remember
it using in *keystoneclient*). By the way, a doc mentions that --os-url is
a "URL to OpenStack service". Do they mean URL of the Nova API on
controller node or something else, do you know?


On Mon, Jun 24, 2013 at 9:29 PM, Miller, Mark M (EB SW Cloud - R&D -
Corvallis) <mark.m.miller@xxxxxx> wrote:

>  I struggled figuring out the v3 syntax myself. Here is the same command
> in v2.0 and v3 format:****
>
> ** **
>
> openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url "
> http://15.253.57.115:35357/v3"; --os-url "http://15.253.57.115:35357/v3";
> --log-file "/var/log/os.log"  --os-identity-api-version 3 role list****
>
> openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url "
> http://15.253.57.115:35357/v2.0"; --os-url "http://15.253.57.115:35357/v2.0";
> --log-file "/var/log/os.log"  --os-identity-api-version 2.0 role list****
>
> ** **
>
> Mark****
>
> ** **
>
> ** **
>
> *From:* Openstack [mailto:openstack-bounces+mark.m.miller=
> hp.com@xxxxxxxxxxxxxxxxxxx] *On Behalf Of *Ruslan Kiianchuk
> *Sent:* Monday, June 24, 2013 11:09 AM
> *To:* openstack@xxxxxxxxxxxxxxxxxxx
> *Subject:* [Openstack] Keystone Identity API v3 interface****
>
> ** **
>
> Hello.****
>
> ** **
>
> I'm trying to exploit new features of Keystone Identity API v3 in Grizzly,
> however I faced problems using* python-openstackclient*. If I specify to
> use v3 API to the *openstackclient*, it still tries to obtain tokens
> using v2.0 scheme and the server rejects such requests. So the first
> problem is -- I couldn't set up* python-openstackclient *to work with
> Identity API v3 (maybe any additional env variables or parameters need to
> be passed?).****
>
> ** **
>
> I have also tried to talk with the API server using curl, but I couldn't
> get detailed documentation on Identity v3 API. I found the draft API
> description at
> https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md but
> managed to only obtain token. Afterwards whatever request I do (get .../v3/users
> for example), I get 401 Unauthorized error from the server. The example
> of a request I do:****
>
> ** **
>
> curl -i -H "Content-Type: application/json" -H "Accept: application/json"
> -H "X-Auth-Token: ...<PKI token obtained from X-Subject-Token header at
> /v3/auth/tokens/>..." http://localhost:5000/v3/users****
>
> ** **
>
> Could someone suggest the correct way of talking to Keystone Identity v3
> API? Either configuration/parameters for correct *openstackclient *usage
> or plain curl requests would be highly appreciated.****
>
> ** **
>
> Thank you.
> ****
>
> ** **
>
> -- ****
>
> Sincerely, Ruslan Kiianchuk.****
>



-- 
Sincerely, Ruslan Kiianchuk.