<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">I agree that’s why I was saying to try a different user. If you add a user it will not be part of the admin anyhow, by default.<div><br></div><div>Remo </div><div><br><div><div>On Feb 6, 2014, at 11:09, Craig Jellick <<a href="mailto:cjellick@godaddy.com">cjellick@godaddy.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">If you're using the default policy.json file, this seems to be the<br>expected behavior.<br>The "list_user_projects" method has an access rule of "admin_or_owner".<br>All the other calls you mentioned have a rule of "admin_required".<br><br>So, I'd say that most likely the user you are using does not have the role<br>"admin".<br><br><br>/Craig J<br><br><br><br><br>On 2/6/14 8:19 AM, "Remo Mattei" <<a href="mailto:remo@italy1.com">remo@italy1.com</a>> wrote:<br><br><blockquote type="cite">Seems a permissions issue did you try a different user?<br><br>Remo<br><br>On Feb 6, 2014, at 10:09, Daniel Ellison <<a href="mailto:daniel@syrinx.net">daniel@syrinx.net</a>> wrote:<br><br><blockquote type="cite">Hey all,<br><br>I've run into an issue with a Havana Keystone install on CentOS 6.3.<br>When I issue a command such as:<br><br> keystone user-list<br><br>I get in response:<br><br> Unable to authorize user<br><br>This happens with service-list, endpoint-list, role-list, etc. Oddly,<br>it does NOT happen with tenant-list; I get a proper list of tenants in<br>response.<br><br>Running the commands with "--debug", the response body to a "/tokens"<br>request for all was identical aside from the token itself and<br>timestamps. The difference came after that, where most of the *-list<br>commands returned "Unable to authorize user" except for tenant-list,<br>which returned the list of tenants.<br><br>There is one reference to this issue at<br><a href="http://docs.openstack.org/havana/install-guide/install/yum/content/keysto">http://docs.openstack.org/havana/install-guide/install/yum/content/keysto</a><br>ne-verify.html#comment-1143923155 so I know I'm not the only one having<br>this issue. The key is that ONE of the commands works while all the rest<br>don't.<br><br>Any ideas?<br>_______________________________________________<br>Mailing list:<span class="Apple-converted-space"> </span><br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack<br>Post to : openstack@lists.openstack.org<br>Unsubscribe :<span class="Apple-converted-space"> </span><br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack<br><br><br><br></blockquote><br><br>_______________________________________________<br>Mailing list:<span class="Apple-converted-space"> </span><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>Post to : openstack@lists.openstack.org<br>Unsubscribe :<span class="Apple-converted-space"> </span><br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack<br></blockquote><br><br>!DSPAM:1,52f3b3e674461390257870!</div></blockquote></div><br></div></body></html>