[openstack-dev] The curious case of keystone token differences

Bhandaru, Malini K malini.k.bhandaru at intel.com
Fri May 10 17:25:50 UTC 2013


Hello Keystone folks!

I have a user in the system,
      name=barbican
      tenant=service.
      v2
Been creating tokens via curl for v2 for said user, and via the barbican. Then tokens in the database are different, some do not have tenant and meta-data information populated and thus behave differently for authentication purposes.
Why?

Thanks
Malini
=======================

The tokens created using the curl call http://docs.openstack.org/developer/keystone/api_curl_examples.html

curl -d '{"auth":{"passwordCredentials":{"username": "barbican", "password": "secret"}}}' -H "Content-type: application/json" http://localhost:35357/v2.0/tokens

Example:

| ec6ef5271a8f4045ba869e6b89744a21 | 2013-05-11 17:22:03 | {"key": "ec6ef5271a8f4045ba869e6b89744a21", "user": {"email": "barbican at rackspace.com", "tenantId": "7ddd3dee8a6a44e5a2b6569d03fb0d35", "enabled": true, "name": "barbican", "id": "326e5e2c3b4d4fcd83690c1279bbba19"}, "tenant": null, "metadata": {"roles": []}}                                                                                                                                                                      |     1 | NULL     | 326e5e2c3b4d4fcd83690c1279bbba19 |

| f84e1ff682944b1bb8b6813d39e4bef3 | 2013-05-11 09:10:04 | {"key": "f84e1ff682944b1bb8b6813d39e4bef3", "user": {"email": "barbican at rackspace.com", "tenantId": "7ddd3dee8a6a44e5a2b6569d03fb0d35", "enabled": true, "name": "barbican", "id": "326e5e2c3b4d4fcd83690c1279bbba19"}, "tenant": {"enabled": true, "description": null, "name": "service", "id": "7ddd3dee8a6a44e5a2b6569d03fb0d35"}, "metadata": {"roles": ["9fe2ff9ee4384b1894a90878d3e92bab", "3af169881abe4d1187a4a5d03a14fcce"]}} |     1 | NULL     | 326e5e2c3b4d4fcd83690c1279bbba19 |
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130510/3547415c/attachment.html>


More information about the OpenStack-dev mailing list