<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 20 April 2016 at 14:02, Dolph Mathews <span dir="ltr"><<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class="">On Tue, Apr 19, 2016 at 10:40 PM, Kenny Ji-work <span dir="ltr"><<a href="mailto:jenkins-sdg@qq.com" target="_blank">jenkins-sdg@qq.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div style="font-family:'lucida Grande',Verdana,'Microsoft YaHei';line-height:23.8px">Hi all,</div><div style="font-family:'lucida Grande',Verdana,'Microsoft YaHei';line-height:23.8px"><br></div><div style="font-family:'lucida Grande',Verdana,'Microsoft YaHei';line-height:23.8px">I have installed openstack mitaka, when I execute any keystone's commands with the result displayed below:</div></div><div style="font-family:'lucida Grande',Verdana,'Microsoft YaHei';line-height:23.8px">But I execute `openstack role list`, the result is succeed.</div><div style="font-family:'lucida Grande',Verdana,'Microsoft YaHei';line-height:23.8px"><br></div><div><b>[root@devstack scripts]# keystone --debug role-list</b></div></div></blockquote></span></div></div></div></blockquote><div><br></div><div>You mix up two concepts here. `openstack role list` uses the python-openstackclient and is the correct call. `keystone --debug role list` uses the keystoneclient CLI which is deprecated and recently removed from upstream. This will not support v3 - depending on where this v3 configuration is set. <br><br></div><div>Keep using the openstack CLI you will find it more compatible with deployments. <br><br><br><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>/usr/lib/python2.7/site-packages/keystoneclient/shell.py:64: DeprecationWarning: The keystone CLI is deprecated in favor of python-openstackclient. For a Python library, continue using python-keystoneclient.</div><div> 'python-keystoneclient.', DeprecationWarning)</div><div>WARNING: unsupported identity-api-version 3, falling back to 2.0</div><div>/usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py:145: DeprecationWarning: Constructing an instance of the keystoneclient.v2_0.client.Client class without a session is deprecated as of the 1.7.0 release and may be removed in the 2.0.0 release.</div><div> 'the 2.0.0 release.', DeprecationWarning)</div><div>/usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py:147: DeprecationWarning: Using the 'tenant_name' argument is deprecated in version '1.7.0' and will be removed in version '2.0.0', please use the 'project_name' argument instead</div><div> super(Client, self).__init__(**kwargs)</div><div>/usr/lib/python2.7/site-packages/debtcollector/renames.py:45: DeprecationWarning: Using the 'tenant_id' argument is deprecated in version '1.7.0' and will be removed in version '2.0.0', please use the 'project_id' argument instead</div><div> return f(*args, **kwargs)</div><div>/usr/lib/python2.7/site-packages/keystoneclient/httpclient.py:371: DeprecationWarning: Constructing an HTTPClient instance without using a session is deprecated as of the 1.7.0 release and may be removed in the 2.0.0 release.</div><div> 'the 2.0.0 release.', DeprecationWarning)</div><div>/usr/lib/python2.7/site-packages/keystoneclient/session.py:140: DeprecationWarning: keystoneclient.session.Session is deprecated as of the 2.1.0 release in favor of keystoneauth1.session.Session. It will be removed in future releases.</div><div> DeprecationWarning)</div><div>/usr/lib/python2.7/site-packages/keystoneclient/auth/identity/base.py:56: DeprecationWarning: keystoneclient auth plugins are deprecated as of the 2.1.0 release in favor of keystoneauth1 plugins. They will be removed in future releases.</div><div> 'in future releases.', DeprecationWarning)</div><div>DEBUG:keystoneclient.auth.identity.v2:Making authentication request to <a href="http://10.240.227.233:35357/v3/tokens" target="_blank">http://10.240.227.233:35357/v3/tokens</a></div></div></blockquote><div><br></div></span><div>This line shows a v2 client making a request to a v3 endpoint. Do you have a versioned (v3) endpoint configured or hardcoded somewhere?</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><div><div>INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 10.240.227.233</div><div>DEBUG:requests.packages.urllib3.connectionpool:"POST /v3/tokens HTTP/1.1" 404 93</div><div>DEBUG:keystoneclient.session:Request returned failure status: 404</div><div><font color="#ff0000">Authorization Failed: The resource could not be found. (HTTP 404) (Request-ID: req-c71a1014-1c8d-47c0-bed5-cba6ad91881f)</font></div></div><div><font color="#ff0000"><br></font></div><div>Thank you for answering!</div><div><br></div><div>Sincerely!</div><span><font color="#888888"><div>Kenny Ji</div></font></span><br></span>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>