<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 06/03/2015 10:29 AM, Amy Zhang
wrote:<br>
</div>
<blockquote
cite="mid:CAP-eVZiL2pmwq3ChxdAgHPtyA0jZ1mTwp2LxOhXN=bsj+C6qWw@mail.gmail.com"
type="cite">
<div dir="ltr">Hi guys,
<div><br>
</div>
<div>I have installed Kilo and try to use identity v3. I am
using v3 policy file. I changed the domain_id for cloud admin
as "default". As cloud admin, I tried "openstack domain list"
and got the error message saying that I was not authorized.</div>
<div><br>
</div>
<div>The part I changed in policy.json:</div>
<div>
<p class="">"cloud_admin"<span class="">: </span>"rule:admin_required
and domain_id:default"<span class="">,</span></p>
<p class=""><span class=""><br>
</span></p>
<p class=""><span class="">The error I got from "openstack
domain list":</span></p>
<p class=""><span class="">
</span></p>
<p class="">ERROR: openstack You are not authorized to perform
the requested action: identity:create_domain (Disable debug
mode to suppress these details.) (HTTP 403) (Request-ID:
req-2f42b1da-9933-4494-9b39-c1664d154377)</p>
<div><br>
</div>
<div>Has anyone tried identity v3 in Kilo? Did you have this
problem? Any suggestions?</div>
</div>
</div>
</blockquote>
<br>
Can you paste your policy file somewhere? Did you restart the
keystone service after changing your policy? Can you provide your
exactly openstack command line arguments and/or the rc file you
sourced into your shell environment before running openstack?<br>
<br>
<blockquote
cite="mid:CAP-eVZiL2pmwq3ChxdAgHPtyA0jZ1mTwp2LxOhXN=bsj+C6qWw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div><br>
</div>
<div>Thanks</div>
<div>Amy </div>
-- <br>
<div class="gmail_signature">Best regards,<br>
Amy (Yun Zhang)<br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</body>
</html>