yahoo-eng-team team mailing list archive

[Boris Bobrov <bbobrov@xxxxxxxxxxxx>]

This is by design and there is a unit-test that checks that
(test_v3_identity.py, test_list_users_with_multiple_backends). The
controller requires a domain to be specified either as a filter or by
using a domain scoped token. In your case you need to provide a domain
via --domain parameter of `openstack` cli. Also don't forget that this
parameter is available only if you use OS_IDENTITY_API_VERSION=3.

** Changed in: keystone
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1483212

Title:
  can't authenticate with os_token, in multidomain environment and
  keystone V3 API

Status in Keystone:
  Invalid

Bug description:
  multidomains are disabled (  domain_specific_drivers_enabled = False
  ):

  root@node-4:/etc/puppet/modules/fuel-plugin-ldap/deployment_scripts# /usr/bin/openstack user list --quiet --format csv --long --os-token p2Z73yRj --os-url http://192.168.0.3:35357/v3/
  "ID","Name","Project","Email","Enabled"
  "Administrator","Administrator","","",""
  "Guest","Guest","","",""
  "WIN-9FRJ87RBRG2","WIN-9FRJ87RBRG2","","",""

  root@node-4:/etc/puppet/modules/fuel-plugin-ldap/deployment_scripts# /usr/bin/openstack user list --quiet --format csv --long --os-token p2Z73yRj --os-url http://192.168.0.3:35357/v2.0/
  "ID","Name","Project","Email","Enabled"
  "Administrator","Administrator","","",""
  "Guest","Guest","","",""
  "WIN-9FRJ87RBRG2","WIN-9FRJ87RBRG2","","",""
  "krbtgt","krbtgt","","",""
  "admin_ad","admin_ad","","",""

  multidomains are enabled (  domain_specific_drivers_enabled = True )

  root@node-4:/etc/puppet/modules/fuel-plugin-ldap/deployment_scripts# /usr/bin/openstack user list --quiet --format csv --long --os-token p2Z73yRj --os-url http://192.168.0.3:35357/v2.0/
  "ID","Name","Project","Email","Enabled"
  "Administrator","Administrator","","",""
  "Guest","Guest","","",""

  root@node-4:/etc/puppet/modules/fuel-plugin-ldap/deployment_scripts# /usr/bin/openstack user list --quiet --format csv --long --os-token p2Z73yRj --os-url http://192.168.0.3:35357/v3/
  ERROR: openstack The request you have made requires authentication. (HTTP 401) (Request-ID: req-72256f63-68c6-4842-9a66-cac3c35a9770)

  I'm using keystone from kilo

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1483212/+subscriptions