[openstack-dev] The curious case of keystone token differences

Dolph Mathews dolph.mathews at gmail.com
Sun May 12 20:53:44 UTC 2013


There is no tenant specified by the curl command; try:

  curl -d '{"auth":{"passwordCredentials":{"username": "barbican",
"password": "secret"}, "tenantName": "service"}}' -H "Content-type:
application/json" http://localhost:35357/v2.0/tokens


-Dolph


On Fri, May 10, 2013 at 12:25 PM, Bhandaru, Malini K <
malini.k.bhandaru at intel.com> wrote:

>  Hello Keystone folks!****
>
> ** **
>
> I have a user in the system, ****
>
>       name=barbican ****
>
>       tenant=service.****
>
>       v2****
>
> Been creating tokens via curl for v2 for said user, and via the barbican.
> Then tokens in the database are different, some do not have tenant and
> meta-data information populated and thus behave differently for
> authentication purposes.****
>
> Why?****
>
> ** **
>
> Thanks****
>
> Malini****
>
> =======================****
>
> ** **
>
> The tokens created using the curl call
> http://docs.openstack.org/developer/keystone/api_curl_examples.html****
>
> ** **
>
> curl -d '{"auth":{"passwordCredentials":{"username": "barbican",
> "password": "secret"}}}' -H "Content-type: application/json"
> http://localhost:35357/v2.0/tokens****
>
> ** **
>
> Example:****
>
> ** **
>
> | ec6ef5271a8f4045ba869e6b89744a21 | 2013-05-11 17:22:03 | {"key":
> "ec6ef5271a8f4045ba869e6b89744a21", "user": {"email": "
> barbican at rackspace.com", "tenantId": "7ddd3dee8a6a44e5a2b6569d03fb0d35",
> "enabled": true, "name": "barbican", "id":
> "326e5e2c3b4d4fcd83690c1279bbba19"}, "tenant": null, "metadata":
> {"roles":
> []}}
>                                                                      |
> 1 | NULL     | 326e5e2c3b4d4fcd83690c1279bbba19 |****
>
> ** **
>
> | f84e1ff682944b1bb8b6813d39e4bef3 | 2013-05-11 09:10:04 | {"key":
> "f84e1ff682944b1bb8b6813d39e4bef3", "user": {"email": "
> barbican at rackspace.com", "tenantId": "7ddd3dee8a6a44e5a2b6569d03fb0d35",
> "enabled": true, "name": "barbican", "id":
> "326e5e2c3b4d4fcd83690c1279bbba19"}, "tenant": {"enabled": true,
> "description": null, "name": "service", "id":
> "7ddd3dee8a6a44e5a2b6569d03fb0d35"}, "metadata": {"roles":
> ["9fe2ff9ee4384b1894a90878d3e92bab", "3af169881abe4d1187a4a5d03a14fcce"]}}
> |     1 | NULL     | 326e5e2c3b4d4fcd83690c1279bbba19 | ****
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130512/e2e14bea/attachment.html>


More information about the OpenStack-dev mailing list