<div dir="ltr">Thanks a lot for the tip!<div><br></div><div style>Perhaps, "<span style="font-family:'courier new',monospace">--os-url</span>" is new parameter in <i>openstackclient </i>(can't remember it using in <i>keystoneclient</i>). By the way, a doc mentions that <span style="font-family:'courier new',monospace">--os-url </span><font face="arial, helvetica, sans-serif">is a "URL to OpenStack service". Do they mean URL of the Nova API on controller node or something else, do you know?</font></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jun 24, 2013 at 9:29 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) <span dir="ltr"><<a href="mailto:mark.m.miller@hp.com" target="_blank">mark.m.miller@hp.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I struggled figuring out the v3 syntax myself. Here is the same command in v2.0 and v3 format:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal">openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url "<a href="http://15.253.57.115:35357/" target="_blank">http://15.253.57.115:35357/</a><span style="background:yellow">v3</span>" --os-url "<a href="http://15.253.57.115:35357/" target="_blank">http://15.253.57.115:35357/</a><span style="background:yellow">v3</span>"
--log-file "/var/log/os.log" --os-identity-api-version <span style="background:yellow">
3</span> role list<u></u><u></u></p>
<p class="MsoNormal">openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url "<a href="http://15.253.57.115:35357/" target="_blank">http://15.253.57.115:35357/</a><span style="background:yellow">v2.0</span>" --os-url "<a href="http://15.253.57.115:35357/" target="_blank">http://15.253.57.115:35357/</a><span style="background:yellow">v2.0</span>"
--log-file "/var/log/os.log" --os-identity-api-version <span style="background:yellow">
2.0</span> role list<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Mark<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Openstack [mailto:<a href="mailto:openstack-bounces%2Bmark.m.miller" target="_blank">openstack-bounces+mark.m.miller</a>=<a href="mailto:hp.com@lists.launchpad.net" target="_blank">hp.com@lists.launchpad.net</a>]
<b>On Behalf Of </b>Ruslan Kiianchuk<br>
<b>Sent:</b> Monday, June 24, 2013 11:09 AM<br>
<b>To:</b> <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
<b>Subject:</b> [Openstack] Keystone Identity API v3 interface<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hello.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I'm trying to exploit new features of Keystone Identity API v3 in Grizzly, however I faced problems using<i> python-openstackclient</i>. If I specify to use v3 API to the
<i>openstackclient</i>, it still tries to obtain tokens using v2.0 scheme and the server rejects such requests. So the first problem is -- I couldn't set up<i> python-openstackclient
</i>to work with Identity API v3 (maybe any additional env variables or parameters need to be passed?).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I have also tried to talk with the API server using curl, but I couldn't get detailed documentation on Identity v3 API. I found the draft API description at <a href="https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md" target="_blank">https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md</a> but
managed to only obtain token. Afterwards whatever request I do (get ...<span style="font-family:"Courier New"">/v3/users for example</span>), I get 401 Unauthorized error from the server. The example of a request I do:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Courier New"">curl -i -H "Content-Type: application/json" -H "Accept: application/json" -H "X-Auth-Token: ...<PKI token obtained from X-Subject-Token header at /v3/auth/tokens/>..."
<a href="http://localhost:5000/v3/users" target="_blank">http://localhost:5000/v3/users</a></span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Could someone suggest the correct way of talking to Keystone Identity v3 API? Either configuration/parameters for correct
<i>openstackclient </i>usage or plain curl requests would be highly appreciated.</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">Thank you. </span><br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<p class="MsoNormal">Sincerely, Ruslan Kiianchuk.<u></u><u></u></p>
</div>
</div>
</div>
</div></div></div>
</div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div>Sincerely, Ruslan Kiianchuk.</div>
</div>