Excellent, thanks, that works. I was concerned that I had misconfigured something. Most appreciated.<div><br></div><div>-Asher<br><br><div class="gmail_quote">On Sat, Sep 29, 2012 at 4:00 PM, Dolph Mathews <span dir="ltr"><<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">By default, I believe it shows you your own roles. With a token/endpoint specified (bypassing auth), it should work if you specify a user & tenant:<div>
<br></div><div><div>$ keystone help user-role-list</div><div>usage: keystone user-role-list [--user-id <user-id>] [--tenant-id <tenant-id>]</div>
<div><br></div><div>List roles granted to a user</div><div><br></div><div>Optional arguments:</div><div> --user-id <user-id> List roles granted to a user</div><div> --tenant-id <tenant-id></div><div> List roles granted on a tenant</div>
<span class="HOEnZb"><font color="#888888">
<div><br></div>-Dolph</font></span><div><div class="h5"><br>
<br><br><div class="gmail_quote">On Sat, Sep 29, 2012 at 2:54 PM, heckj <span dir="ltr"><<a href="mailto:heckj@mac.com" target="_blank">heckj@mac.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">Hey Asher,<div><br></div><div>That's a bug in keystoneclient - the method for doing the role listing is making a bad assumption that you're authenticating with a username and password, not handing in a token, and is getting wrapped around the axle trying to figure out what tenant you are. If you create an admin account with the --token and --endpoint options, and then use those options for this same command, you should be OK.</div>
<div><br></div><div>This should definitely be filed as a bug :-) <a href="https://bugs.launchpad.net/python-keystoneclient/+bug/1058750" target="_blank">https://bugs.launchpad.net/python-keystoneclient/+bug/1058750</a></div>
<div><br></div><div>Use that link to subscribe to the bug if you want to track it's progress.</div><div><br></div><div>-joe</div><div><br><div><div><div><div>On Sep 29, 2012, at 5:35 AM, Asher Newcomer <<a href="mailto:ashernew@gmail.com" target="_blank">ashernew@gmail.com</a>> wrote:</div>
</div></div><blockquote type="cite"><div><div><div>It looks like user-role-list is a recently added command in keystone (<a href="https://answers.launchpad.net/keystone/+question/190656" target="_blank">launchpad</a>).</div>
<div><br></div><div>When I run it on a new keystone install in Ubuntu 12.04 I get: </div>
<div><br></div><div>keystone --token <mytoken> --endpoint <a href="http://192.168.1.11:35357/v2.0" target="_blank">http://192.168.1.11:35357/v2.0</a> user-role-list</div><div><br></div><div>'Client' object has no attribute 'auth_tenant_id'</div>
<div><br></div><div>It looks client side, and no corresponding entry in keystone.log. Bug?</div><div><br></div><div>Thanks,</div><div><br></div><div>Asher</div></div></div>
_______________________________________________<br>Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
</blockquote></div><br></div></div><br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div></div></div>
</blockquote></div><br></div>