<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">Am 15.08.2014 10:22, schrieb sylecn:<br>
    </div>
    <blockquote
cite="mid:CACGNuiS26CGqYOLfmDWe=vUMD2M=jc3qc=_8J_9YQnN7QR=pBQ@mail.gmail.com"
      type="cite">
      <div dir="ltr"><br>
        <div class="gmail_extra">
          <div class="gmail_quote">
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
              0.8ex;border-left:1px solid
              rgb(204,204,204);padding-left:1ex">
              <div text="#000000" bgcolor="#FFFFFF"> so I create a
                special admin via<br>
                keystone user-create --name dsp --pass 123<br>
                keystone user-role-add --name dsp --role admin --tenant
                admin<br>
                then I unset OS_SERVICE_TOKEN<br>
                and try to get the user-role-list via<br>
                keystone --debug --os-username=dsp --os-auth-url=<a
                  moz-do-not-send="true"
                  href="http://172.23.56.78:35357/v2.0" target="_blank">http://172.23.56.78:35357/v2.0</a>
                --os-password=123  user-role-list <br>
                and just get no result.<br>
                But if I try to add some user-role-list entries,
                keystone tells, that this combination still exists. For
                my opinion, I should get some result for the keystone
                user-role-list or am I wrong?<br>
                <br>
                With the debug-option on, I get this:<br>
                "user": {"username": "dsp", "roles_links": [], "id":
                "11958972ebce4d97831f3139ab3465aa", "roles": [], "name":
                "dsp"}, "metadata": {"is_admin": 0, "roles": []}}}<br>
                Shouldn't the is_admin parameter set to 1?<br>
                <br>
              </div>
            </blockquote>
          </div>
          <br>
          Are you missing --os-tenant-name option or are you passing it
          via environment variable? Make sure tenant name used to do
          auth is admin. You should be able to tell which tenant you are
          using in the debug log.<br clear="all">
          <br>
          -- <br>
          <div dir="ltr">
            <div><span><span> </span><i>YY Inc. is hiring</i> openstack
                and python developers. Interested? Check <a
                  moz-do-not-send="true"
                  href="http://soa.game.yy.com/jobs.html"
                  target="_blank">http://soa.game.yy.com/jobs.html</a><br>
                <br>
              </span>--<br>
              Thanks,<br>
            </div>
            Yuanle<br>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
    Thats it<br>
    Thanks<br>
    Dan<br>
    <br>
  </body>
</html>