Open Stack

On 11 jul. 2013, at 20:43, "comiqadze" <comiq at yandex.ru> wrote:

> Hi, thank you Robert,
> 
> Sorry, but there is another issue now:
> 
> When I'm trying to associate floating-ip, according to the following link,:
> 
> http://docs.openstack.org/folsom/basic-install/content/basic-install_operate.html
> 
> it gives different errors, depending on the current tenant.
> 
> When the tenant is "admin":
> 
> # quantum floatingip-create --port_id 685d51dc-5a81-4986-b325-b943821cca08 0be7f38c-8dce-4e8b-aab7-94e4082d4937
> Bad floatingip request: Cannnot create floating IP and bind it to Port 685d51dc-5a81-4986-b325-b943821cca08, since that port is owned by a different tenant.
> 
> When the tenant is "demo":
> # quantum floatingip-create --port_id 33b8152c-6da9-45b2-bab3-29e4dc64d3f7 0be7f38c-8dce-4e8b-aab7-94e4082d4937
> {"error": {"message": "Invalid project", "code": 401, "title": "Not Authorized"}}
> 
> Basically, it's an error of limited access, because I cannot even view the port-list:
> 
> # quantum port-list
> {"error": {"message": "Invalid project", "code": 401, "title": "Not Authorized"}}
> 
> Is it a dead loop?
> 
> As usual, many thanks to any help.

Everything points to incorrect permission.
What user are you using and what access (roles) does the user have on the tenant you want to do the action on?
In the policy.json you can find / set what actions are allowed for which roles.


Cheers,
Robert van Leeuwenrjj