[openstack-dev] Is Havana keystone rpm actually splitting identity and assignment?

Ben Nemec openstack at nemebean.com
Fri Nov 15 16:15:20 UTC 2013


This list is for development discussion only. Since this sounds like a
question specific to RHEL, might I suggest you ask it on
http://openstack.redhat.com/forum/ ? 



On 2013-11-15 10:13, Abhishek Lahiri wrote: 

>> I have installed openstack-keystone-2013.2-0.11.b3.el6.noarch rpm and I added a active directory user "test123" with role admin and tenant admin successfully. In Keystone.conf identity is pointed to ldap and assignment is pointed to SQL. I sourced keystonerc file with the correct credentials for user test123 and then trying to run a keystone commands. 
>> However when I run keystone get-token if gives me the following error: 
>> Authorization Failed: An unexpected error prevented the server from fulfilling your request. {'info': '000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), data 0n', 'desc': 'Operations error'} (HTTP 500)
>> I am not sure why keystone is still looking at the Active Directory for authorization?
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev [1]


[1] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20131115/faa1763e/attachment.html>

More information about the OpenStack-dev mailing list