← Back to team overview

yahoo-eng-team team mailing list archive

  1. yahoo-eng-team team
  2. Mailing list archive
  3. Message #03235

[Bug 1161778] Re: inconsistent response of authentication with tenant, tenantID and tenantName

  Thread Previous • Date Previous • • Thread Next 
The only example here that is working properly is tenantName --
"tenantID" should in fact be "tenantId" and "tenant" is simply not
supported (nor has it ever.. is that documented somewhere?).

> According to current keystone document, tenantId is documented as the
example. However the tenantId doesn't work.

The documentation is correct. In your case "tenantID" is simply being
ignored as it's a non-contract attribute and you're getting a 401 when
you specify "admin" as "tenantId" because "admin" is a user-assigned
name, not an ID.

I don't see any bugs here, unless "tenant" is documented as a working
example somewhere.

** Changed in: keystone
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1161778

Title:
  inconsistent response of authentication with tenant, tenantID and
  tenantName

Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  You will got two different formatted results by using tenant, tenantID or tenantName in keystone authentication.
  According to current keystone document,  tenantId is documented as the example.  However the tenantId doesn't work.
  you should use tenantID (upper case).

  The format of Resp1  is aligned with Resp2, but different from Resp3 which will include additional information such as 
  tenant and serviceCatalog.

  And when you use the token id in Resp1 or Resp2 to access nova api, it will always reported "401 Unauthorized"
  "This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required."

  ==================================================================
  Req1 :  Request by tenant
  curl -d '{"auth":{"passwordCredentials": {"username": "admin", "password": "openstack"}, "tenant": "admin"}}' -H "Content-type: application/json" http://9.123.125.189:5000/v2.0/tokens

  Resp1:
  {"access": {"token": {"issued_at": "2013-03-29T09:31:37.654475", "expires": "2013-03-30T09:31:37Z", "id": "MIICbgYJKoZIhvcNAQcCoIICXzCCAlsCAQExCTAHBgUrDgMCGjCCAUcGCSqGSIb3DQEHAaCCATgEggE0eyJhY2Nlc3MiOiB7InRva2VuIjogeyJpc3N1ZWRfYXQiOiAiMjAxMy0wMy0yOVQwOTozMTozNy42NTQ0NzUiLCAiZXhwaXJlcyI6ICIyMDEzLTAzLTMwVDA5OjMxOjM3WiIsICJpZCI6ICJwbGFjZWhvbGRlciJ9LCAic2VydmljZUNhdGFsb2ciOiBbXSwgInVzZXIiOiB7InVzZXJuYW1lIjogImFkbWluIiwgInJvbGVzX2xpbmtzIjogW10sICJpZCI6ICJlODdlMWI2ZmMwMTg0Y2M0YjM3ZjliOGU1OTE0OTgyZiIsICJyb2xlcyI6IFtdLCAibmFtZSI6ICJhZG1pbiJ9LCAibWV0YWRhdGEiOiB7ImlzX2FkbWluIjogMCwgInJvbGVzIjogW119fX0xgf8wgfwCAQEwXDBXMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVW5zZXQxDjAMBgNVBAcTBVVuc2V0MQ4wDAYDVQQKEwVVbnNldDEYMBYGA1UEAxMPd3d3LmV4YW1wbGUuY29tAgEBMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUABIGAvLYiEz3f8aMezYlXZdUCKo7umoLcNIarvQOqOqCzBgW7dG+6W5UCizJCmVJ+I1gcWMFzB776xg9gBxLTimAcEi943GHURgaiL4MoCvjB6NK2Iq51vA7Z-ooiYwcVWZMzBtndCYOhO9OTMsjd8SUG1v6GyIdy5j3O8ruaD0fdmL8="}, "serviceCatalog": [], "user": {"username": "admin", "roles_links": [], "id": "e87e1b6fc0184cc4b37f9b8e5914982f", "roles": [], "name": "admin"}, "metadata": {"is_admin": 0, "roles": []}}}

  Req2  : Request by tenantID
  curl -d '{"auth":{"passwordCredentials": {"username": "admin", "password": "openstack"}, "tenantID": "admin"}}' -H "Content-type: application/json" http://9.123.125.189:5000/v2.0/tokens

  Resp2 :
  {"access": {"token": {"issued_at": "2013-03-29T09:32:24.546528", "expires": "2013-03-30T09:32:24Z", "id": "MIICbgYJKoZIhvcNAQcCoIICXzCCAlsCAQExCTAHBgUrDgMCGjCCAUcGCSqGSIb3DQEHAaCCATgEggE0eyJhY2Nlc3MiOiB7InRva2VuIjogeyJpc3N1ZWRfYXQiOiAiMjAxMy0wMy0yOVQwOTozMjoyNC41NDY1MjgiLCAiZXhwaXJlcyI6ICIyMDEzLTAzLTMwVDA5OjMyOjI0WiIsICJpZCI6ICJwbGFjZWhvbGRlciJ9LCAic2VydmljZUNhdGFsb2ciOiBbXSwgInVzZXIiOiB7InVzZXJuYW1lIjogImFkbWluIiwgInJvbGVzX2xpbmtzIjogW10sICJpZCI6ICJlODdlMWI2ZmMwMTg0Y2M0YjM3ZjliOGU1OTE0OTgyZiIsICJyb2xlcyI6IFtdLCAibmFtZSI6ICJhZG1pbiJ9LCAibWV0YWRhdGEiOiB7ImlzX2FkbWluIjogMCwgInJvbGVzIjogW119fX0xgf8wgfwCAQEwXDBXMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVW5zZXQxDjAMBgNVBAcTBVVuc2V0MQ4wDAYDVQQKEwVVbnNldDEYMBYGA1UEAxMPd3d3LmV4YW1wbGUuY29tAgEBMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUABIGAVYkW93AQ1sEgYpn9NMWIeugXC+fzWmRzR4NagBU7cBf9cIBmfrxoWL2NbwgrWvLz34dUNGhVMCqa-+H4kMKRfsXB-K2ZbruelLfyYd8gQQJ0ArT3YU+vckEvZa1u-hYjQsz9-x22OHfIHAeCerQvCUs9Fm5iYC0iK2jHpTN8U5U="}, "serviceCatalog": [], "user": {"username": "admin", "roles_links": [], "id": "e87e1b6fc0184cc4b37f9b8e5914982f", "roles": [], "name": "admin"}, "metadata": {"is_admin": 0, "roles": []}}}

  Req3 :  Request by tenantName
  curl -d '{"auth":{"passwordCredentials": {"username": "admin", "password": "openstack"}, "tenantName": "admin"}}' -H "Content-type: application/json" http://9.123.125.189:5000/v2.0/tokens

  Resp3:
  {"access": {"token": {"issued_at": "2013-03-29T09:36:23.673473", "expires": "2013-03-30T09:36:23Z", "id": "MIIM4QYJKoZIhvcNAQcCoIIM0jCCDM4CAQExCTAHBgUrDgMCGjCCC7oGCSqGSIb3DQEHAaCCC6sEgguneyJhY2Nlc3MiOiB7InRva2VuIjogeyJpc3N1ZWRfYXQiOiAiMjAxMy0wMy0yOVQwOTozNjoyMy42NzM0NzMiLCAiZXhwaXJlcyI6ICIyMDEzLTAzLTMwVDA5OjM2OjIzWiIsICJpZCI6ICJwbGFjZWhvbGRlciIsICJ0ZW5hbnQiOiB7ImRlc2NyaXB0aW9uIjogbnVsbCwgImVuYWJsZWQiOiB0cnVlLCAiaWQiOiAiM2ViYTUwZDM2MzQ5NGQ1YTkxZjNlZTkwMmY1MjVjZDMiLCAibmFtZSI6ICJhZG1pbiJ9fSwgInNlcnZpY2VDYXRhbG9nIjogW3siZW5kcG9pbnRzIjogW3siYWRtaW5VUkwiOiAiaHR0cDovLzkuMTIzLjEyNS4xODk6ODc3NC92Mi8zZWJhNTBkMzYzNDk0ZDVhOTFmM2VlOTAyZjUyNWNkMyIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5Ojg3NzQvdjIvM2ViYTUwZDM2MzQ5NGQ1YTkxZjNlZTkwMmY1MjVjZDMiLCAiaWQiOiAiMDJkMWJlNWQ4MWJhNDE4MWE3YzA0MTI0MTc2YzgwNzciLCAicHVibGljVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5Ojg3NzQvdjIvM2ViYTUwZDM2MzQ5NGQ1YTkxZjNlZTkwMmY1MjVjZDMifV0sICJlbmRwb2ludHNfbGlua3MiOiBbXSwgInR5cGUiOiAiY29tcHV0ZSIsICJuYW1lIjogIm5vdmEifSwgeyJlbmRwb2ludHMiOiBbeyJhZG1pblVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo5Njk2LyIsICJyZWdpb24iOiAiUmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5Ojk2OTYvIiwgImlkIjogIjNhNDBjZDczMzJjZjQ1MmE4ZTczZjhkYjRjM2ZiYmQxIiwgInB1YmxpY1VSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo5Njk2LyJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJuZXR3b3JrIiwgIm5hbWUiOiAicXVhbnR1bSJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5OjMzMzMiLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTozMzMzIiwgImlkIjogIjJkYzg4YzI5MWY2MjQ4OGM5YzYxYWRjYzZkMjVmZjE1IiwgInB1YmxpY1VSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTozMzMzIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogInMzIiwgIm5hbWUiOiAiczMifSwgeyJlbmRwb2ludHMiOiBbeyJhZG1pblVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo5MjkyIiwgInJlZ2lvbiI6ICJSZWdpb25PbmUiLCAiaW50ZXJuYWxVUkwiOiAiaHR0cDovLzkuMTIzLjEyNS4xODk6OTI5MiIsICJpZCI6ICI3YWE3ZWIxMGU0NjU0ZTdhOTEzYjlkZTY0MzJmNTEyMCIsICJwdWJsaWNVUkwiOiAiaHR0cDovLzkuMTIzLjEyNS4xODk6OTI5MiJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJpbWFnZSIsICJuYW1lIjogImdsYW5jZSJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5Ojg3NzYvdjEvM2ViYTUwZDM2MzQ5NGQ1YTkxZjNlZTkwMmY1MjVjZDMiLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo4Nzc2L3YxLzNlYmE1MGQzNjM0OTRkNWE5MWYzZWU5MDJmNTI1Y2QzIiwgImlkIjogIjIyZWRjODlhODllMjQyYTE5ZjgyZjk5ZmFkZjgyMjk5IiwgInB1YmxpY1VSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo4Nzc2L3YxLzNlYmE1MGQzNjM0OTRkNWE5MWYzZWU5MDJmNTI1Y2QzIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogInZvbHVtZSIsICJuYW1lIjogImNpbmRlciJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5Ojg3NzMvc2VydmljZXMvQWRtaW4iLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo4NzczL3NlcnZpY2VzL0Nsb3VkIiwgImlkIjogIjJkYmY3ZmZhYjNhNzQwZjk4YjQ0ZjYxMWVkZmQyNWI4IiwgInB1YmxpY1VSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo4NzczL3NlcnZpY2VzL0Nsb3VkIn1dLCAiZW5kcG9pbnRzX2xpbmtzIjogW10sICJ0eXBlIjogImVjMiIsICJuYW1lIjogImVjMiJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5OjgwODAiLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo4MDgwL3YxL0FVVEhfM2ViYTUwZDM2MzQ5NGQ1YTkxZjNlZTkwMmY1MjVjZDMiLCAiaWQiOiAiMTIyMTQ0MWI4YTcyNGRjZjgzYmY1NjdmNzJlMDNlZjIiLCAicHVibGljVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5OjgwODAvdjEvQVVUSF8zZWJhNTBkMzYzNDk0ZDVhOTFmM2VlOTAyZjUyNWNkMyJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJvYmplY3Qtc3RvcmUiLCAibmFtZSI6ICJzd2lmdCJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5OjM1MzU3L3YyLjAiLCAicmVnaW9uIjogIlJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vOS4xMjMuMTI1LjE4OTo1MDAwL3YyLjAiLCAiaWQiOiAiOWY0NjI2YTY1YjNkNGU2MDk1ZDk4ZTQ0NzYxMzk1N2YiLCAicHVibGljVVJMIjogImh0dHA6Ly85LjEyMy4xMjUuMTg5OjUwMDAvdjIuMCJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJpZGVudGl0eSIsICJuYW1lIjogImtleXN0b25lIn1dLCAidXNlciI6IHsidXNlcm5hbWUiOiAiYWRtaW4iLCAicm9sZXNfbGlua3MiOiBbXSwgImlkIjogImU4N2UxYjZmYzAxODRjYzRiMzdmOWI4ZTU5MTQ5ODJmIiwgInJvbGVzIjogW3sibmFtZSI6ICJhZG1pbiJ9XSwgIm5hbWUiOiAiYWRtaW4ifSwgIm1ldGFkYXRhIjogeyJpc19hZG1pbiI6IDAsICJyb2xlcyI6IFsiYjM1YzcxOGQzMTliNGY2M2EzZTA3OTA5YzI3NGU4OWQiXX19fTGB-zCB-AIBATBcMFcxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVVbnNldDEOMAwGA1UEBxMFVW5zZXQxDjAMBgNVBAoTBVVuc2V0MRgwFgYDVQQDEw93d3cuZXhhbXBsZS5jb20CAQEwBwYFKw4DAhowDQYJKoZIhvcNAQEBBQAEgYCjdKRHHiJVre3gI7SozC5jk-AE6HPhTEcQUUCNicBzTx3Ssk00I8mYn6Pa8CYGDoixVfiJU79bIkrucB+BpXIeJ9F4k9HPlFhquwzvQrxzgc6fTV1Q0Bv+TBdMbSaKZxphY6aBzkQFqvtQ48OEADfVi-halhHqbu5I-e5VleZFjA==", "tenant": {"description": null, "enabled": true, "id": "3eba50d363494d5a91f3ee902f525cd3", "name": "admin"}}, "serviceCatalog": [{"endpoints": [{"adminURL": "http://9.123.125.189:8774/v2/3eba50d363494d5a91f3ee902f525cd3";, "region": "RegionOne", "internalURL": "http://9.123.125.189:8774/v2/3eba50d363494d5a91f3ee902f525cd3";, "id": "02d1be5d81ba4181a7c04124176c8077", "publicURL": "http://9.123.125.189:8774/v2/3eba50d363494d5a91f3ee902f525cd3"}], "endpoints_links": [], "type": "compute", "name": "nova"}, {"endpoints": [{"adminURL": "http://9.123.125.189:9696/";, "region": "RegionOne", "internalURL": "http://9.123.125.189:9696/";, "id": "3a40cd7332cf452a8e73f8db4c3fbbd1", "publicURL": "http://9.123.125.189:9696/"}], "endpoints_links": [], "type": "network", "name": "quantum"}, {"endpoints": [{"adminURL": "http://9.123.125.189:3333";, "region": "RegionOne", "internalURL": "http://9.123.125.189:3333";, "id": "2dc88c291f62488c9c61adcc6d25ff15", "publicURL": "http://9.123.125.189:3333"}], "endpoints_links": [], "type": "s3", "name": "s3"}, {"endpoints": [{"adminURL": "http://9.123.125.189:9292";, "region": "RegionOne", "internalURL": "http://9.123.125.189:9292";, "id": "7aa7eb10e4654e7a913b9de6432f5120", "publicURL": "http://9.123.125.189:9292"}], "endpoints_links": [], "type": "image", "name": "glance"}, {"endpoints": [{"adminURL": "http://9.123.125.189:8776/v1/3eba50d363494d5a91f3ee902f525cd3";, "region": "RegionOne", "internalURL": "http://9.123.125.189:8776/v1/3eba50d363494d5a91f3ee902f525cd3";, "id": "22edc89a89e242a19f82f99fadf82299", "publicURL": "http://9.123.125.189:8776/v1/3eba50d363494d5a91f3ee902f525cd3"}], "endpoints_links": [], "type": "volume", "name": "cinder"}, {"endpoints": [{"adminURL": "http://9.123.125.189:8773/services/Admin";, "region": "RegionOne", "internalURL": "http://9.123.125.189:8773/services/Cloud";, "id": "2dbf7ffab3a740f98b44f611edfd25b8", "publicURL": "http://9.123.125.189:8773/services/Cloud"}], "endpoints_links": [], "type": "ec2", "name": "ec2"}, {"endpoints": [{"adminURL": "http://9.123.125.189:8080";, "region": "RegionOne", "internalURL": "http://9.123.125.189:8080/v1/AUTH_3eba50d363494d5a91f3ee902f525cd3";, "id": "1221441b8a724dcf83bf567f72e03ef2", "publicURL": "http://9.123.125.189:8080/v1/AUTH_3eba50d363494d5a91f3ee902f525cd3"}], "endpoints_links": [], "type": "object-store", "name": "swift"}, {"endpoints": [{"adminURL": "http://9.123.125.189:35357/v2.0";, "region": "RegionOne", "internalURL": "http://9.123.125.189:5000/v2.0";, "id": "9f4626a65b3d4e6095d98e447613957f", "publicURL": "http://9.123.125.189:5000/v2.0"}], "endpoints_links": [], "type": "identity", "name": "keystone"}], "user": {"username": "admin", "roles_links": [], "id": "e87e1b6fc0184cc4b37f9b8e5914982f", "roles": [{"name": "admin"}], "name": "admin"}, "metadata": {"is_admin": 0, "roles": ["b35c718d319b4f63a3e07909c274e89d"]}}}
  ===============================================================

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1161778/+subscriptions
  Thread Previous • Date Previous • • Thread Next