yahoo-eng-team team mailing list archive

[Julian Edwards <1479578@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

I set up a multi-domain config on my devstack and tried to do a simple:

$ openstack user list

with project-scoped environment variables (in fact I downloaded the
admin-openrc.sh from Horizon).

This results in:

ERROR: openstack The request you have made requires authentication.
(Disable debug mode to suppress these details.) (HTTP 401) (Request-ID:
req-b687e823-9896-4905-83d3-b1e45fa966ed)

If I disable domain-specific configs in the keystone.conf, it works
again.

If it *is* enabled, I can force a domain-specific request using
something like:

$ OS_TENANT_ID= OS_TENANT_NAME= OS_PROJECT_NAME= openstack --os-domain-
name <name> user list

However if I specify the default domain then I get this:

ERROR: openstack User 0fa9633d884a42448bbd386778ca6b87 has no access to
domain default (Disable debug mode to suppress these details.) (HTTP
401) (Request-ID: req-65e053e4-33c2-4b7b-aedf-30d3ef88735c)

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1479578

Title:
  Domain-specific config breaks some ops

Status in Keystone:
  New

Bug description:
  I set up a multi-domain config on my devstack and tried to do a
  simple:

  $ openstack user list

  with project-scoped environment variables (in fact I downloaded the
  admin-openrc.sh from Horizon).

  This results in:

  ERROR: openstack The request you have made requires authentication.
  (Disable debug mode to suppress these details.) (HTTP 401) (Request-
  ID: req-b687e823-9896-4905-83d3-b1e45fa966ed)

  If I disable domain-specific configs in the keystone.conf, it works
  again.

  If it *is* enabled, I can force a domain-specific request using
  something like:

  $ OS_TENANT_ID= OS_TENANT_NAME= OS_PROJECT_NAME= openstack --os-
  domain-name <name> user list

  However if I specify the default domain then I get this:

  ERROR: openstack User 0fa9633d884a42448bbd386778ca6b87 has no access
  to domain default (Disable debug mode to suppress these details.)
  (HTTP 401) (Request-ID: req-65e053e4-33c2-4b7b-aedf-30d3ef88735c)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1479578/+subscriptions