<div dir="ltr">Nothing stands out as obviously-wrong in your configuration, so I'd suggest starting with the following to debug:<div><br class="">Enable debug mode in keystone.conf and watch the log files in both keystone and barbican (those produced by auth_token) and attempt your request against barbican again.<br></div><div><br></div><div>Next, ensure that the credentials in your [filter:keystone_v3_authtoken] sections of paste config are valid by using them to manually get a token with the client.</div><div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Apr 7, 2015 at 1:34 PM, Asha Seshagiri <span dir="ltr"><<a href="mailto:asha.seshagiri@gmail.com" target="_blank">asha.seshagiri@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi All ,<div><br></div><div>Could anyone please help me on this integration issue.</div><div>I am unable to authenticate with keystone V3 for Barbican curl command .I have followed the procedure given in the following link :</div><div><br></div><div><a href="https://github.com/cloudkeep/barbican/wiki/Integration-with-Keystone-V3-API" target="_blank">https://github.com/cloudkeep/barbican/wiki/Integration-with-Keystone-V3-API</a></div><div><br></div><div>I was unable to authenticate with the keystone V3 even though the right token was provided in the curl command </div><div>Please find the command to get the token and the curl command to post the secret .</div><div><br></div><div>[root@keystone-versiontest ~]# openstack --insecure token issue <b>(Command to get token from keystone v3)</b></div><div><div>+------------+----------------------------------+</div><div>| Field | Value |</div><div>+------------+----------------------------------+</div><div>| expires | 2015-04-07T18:26:13.835641Z |</div><div>|<b> id | f28b93f27cce4bc09f9ac50d84bde736 |</b></div><div>| project_id | 9d37f9ecc481422aa8ab53674cb82410 |</div><div>| user_id | e7d02ed8e7e64b01a1d66bb86ffa90d8 |</div><div>+------------+----------------------------------+</div><div><br></div><div>[root@keystone-versiontest ~]# curl -X POST -H 'content-type:application/json' -H 'X-Project-Id:12345' \</div><div>> -H "X-Auth-Token:<b>f28b93f27cce4bc09f9ac50d84bde736</b>" -d '{"payload": "my-secret-here", "payload_content_type": "text/plain"}' <a href="http://localhost:9311/v1/secrets" target="_blank">http://localhost:9311/v1/secrets</a></div><div><b>Authentication required</b>[root@keystone-versiontest ~]#</div></div><div><br></div><div>The contents of the admin.opensrc file is as given below :</div><div><br></div><div><div>[root@keystone-versiontest ~]# cat admin.openrc</div><div>export OS_USERNAME=admin</div><div>export OS_TENANT_NAME=admin</div><div>export OS_PASSWORD=admin</div><div>export OS_AUTH_URL=<a href="https://169.54.204.69:35357/v3" target="_blank">https://169.54.204.69:35357/v3</a></div><div>export OS_REGION_NAME=RegionOne</div><div>export OS_IDENTITY_API_VERSION=3</div><div>export OS_USER_DOMAIN_ID=default</div><div>export OS_PROJECT_DOMAIN_ID=default</div><div><br></div></div><div><br></div><div>And also I have attached the barbican-api-paste.ini and barbican-admin-paste.ini files.</div><div><br></div><div>I would like to know why the curl command for posting the secret is not geting authenticated with Keystone V3</div><div><br></div><div>Any help would highly be appreciated. </div><span class=""><font color="#888888"><div>-- <br></div><div><div><div><em>Thanks and Regards,</em></div>
<div><em>Asha Seshagiri</em></div></div>
</div></font></span></div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div></div>