<div dir="ltr"><div><br></div><font face="verdana, sans-serif"><div><br></div>I'm not sure I understand you correctly. keystone is not associated properly with the role? Let met trace association and you will be able to tell me where the link is not good:</font><div><br></div><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace" color="#000000">user 4e51cf42393e478ba630233a1984e5ab admin associated to tenant admin <span style="text-align:-webkit-auto">bc8c91c4c321480a99c1d5c01f9ee2ee </span></font></pre><div><font face="courier new, monospace"><br></font></div><div><div class="gmail_extra"><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><span style="color:rgb(0,0,0)"># keystone user-role-list --user admin --tenant admin<br>WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br>+----------------------------------+----------+----------------------------------+----------------------------------+<br>| id | name | user_id | tenant_id |<br>+----------------------------------+----------+----------------------------------+----------------------------------+<br>| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | </span><font color="#000000">4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |<br>| e51a667a851f4768b3ee3fb7c4de711d | admin | </font><font color="#38761d">4e51cf42393e478ba630233a1984e5ab</font><font color="#000000"> | </font><font color="#bf9000">bc8c91c4c321480a99c1d5c01f9ee2ee</font><font color="#000000"> |<br>+----------------------------------+----------+----------------------------------+----------------------------------+
</font></font></pre><pre style="color:rgb(0,0,0);text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><br></font></pre><pre style="color:rgb(0,0,0);text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace">user_id is mapping to the correct user:</font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font color="#000000" face="courier new, monospace">
</font><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><font color="#000000"># keystone user-list<br>WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br>+----------------------------------+-------+---------+---------------------------------+<br>| id | name | enabled | email |<br>+----------------------------------+-------+---------+---------------------------------+<br>| </font><font color="#38761d">4e51cf42393e478ba630233a1984e5ab</font><font color="#000000"> | admin | True | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |<br>| 38ee12f0c8364218a7ffab0c39fbce5f | demo | True | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |<br>+----------------------------------+-------+---------+---------------------------------+
</font></font></pre></div><font color="#000000" face="courier new, monospace">
also associated to the right tenant:</font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace">
</font><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><span style="color:rgb(0,0,0)"># keystone tenant-list<br>WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br>+----------------------------------+---------+---------+<br>| id | name | enabled |<br>+----------------------------------+---------+---------+<br>| </span><font color="#bf9000">bc8c91c4c321480a99c1d5c01f9ee2ee</font><font color="#000000"> | admin | True |<br>| 9bddf495845e4138b6c05305917518b9 | demo | True |<br>| 2ba53d8ccf82496eb4c0ed91db73df41 | service | True |<br>+----------------------------------+---------+---------+
</font></font></pre></div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><br></font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><br></font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace">service keystone is associated correctly to endpoint:</font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><br></font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace" color="#000000">keystone <span style="text-align:-webkit-auto">cad84013496a4d33a132fd99026d1322 associated with endpoint </span><span style="text-align:-webkit-auto"> 9c5aa10925014e7c939ad392d8384b22</span></font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><br></font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><span style="color:rgb(0,0,0)"># keystone service-list<br>WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br>+----------------------------------+----------+----------+--------------------+<br>| id | name | type | description |<br>+----------------------------------+----------+----------+--------------------+<br>| </span><font color="#cc0000">cad84013496a4d33a132fd99026d1322</font><font color="#000000"> | keystone | identity | OpenStack Identity |<br>+----------------------------------+----------+----------+--------------------+
</font></font></pre></div><font face="courier new, monospace">
</font><div><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="courier new, monospace"><span style="color:rgb(0,0,0)"># keystone endpoint-list<br>WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br>+----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+<br>| id | region | publicurl | internalurl | adminurl | service_id |<br>+----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+<br>| 9c5aa10925014e7c939ad392d8384b22 | regionOne | <a href="http://cloud-pp-public-10-15-109-200.xxxx.com:5000/v2.0">http://cloud-pp-public-10-15-109-200.xxxx.com:5000/v2.0</a> | <a href="http://lecloud100:5000/v2.0">http://lecloud100:5000/v2.0</a> | http:///lecloud100:35357/v2.0 | </span><font color="#cc0000">cad84013496a4d33a132fd99026d1322</font></font><font color="#000000"><font face="courier new, monospace"> |<br>+----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+</font><font size="3">
</font></font></pre></div><font size="3">
</font></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><br></pre><pre style="text-align:-webkit-auto;margin-top:0px;margin-bottom:0px;padding:0px"><font face="verdana, sans-serif">Looking back at the documentation I don't see any missing links. What am I missing?</font></pre><font size="3">
</font><font face="verdana, sans-serif">Thanks,</font></pre><pre style="color:rgb(0,0,0);text-align:-webkit-auto;font-size:medium;margin-top:0px;margin-bottom:0px;padding:0px"><br></pre><pre style="color:rgb(0,0,0);text-align:-webkit-auto;font-size:medium;margin-top:0px;margin-bottom:0px;padding:0px"><br></pre></div><div class="gmail_quote">On Tue, Sep 9, 2014 at 10:06 AM, <span dir="ltr"><<a href="mailto:raghavendra.lad@accenture.com" target="_blank">raghavendra.lad@accenture.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255);font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Hi,<br>
</p>
<p><br>
</p>
<p>I did check the attached doc. I find that the keystone is not associated properly with the role.<br>
</p>
<p><br>
</p>
<p>You can try to unset and then keystone token-get, after which try executing the keystone commands by sourcing from the file.<br>
</p>
<p><br>
</p>
<p>Let me know if that helps.<br>
</p>
<p><br>
</p>
<p>Regards,<br>
</p>
<p>Raghavendra Lad<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Louis-Philippe Reid <<a href="mailto:louis.philippe.reid@gmail.com" target="_blank">louis.philippe.reid@gmail.com</a>><br>
<b>Sent:</b> Tuesday, September 9, 2014 7:25 PM<br>
<b>To:</b> Lad, Raghavendra<br>
<b>Cc:</b> <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>
<b>Subject:</b> Re: [Openstack] Keystone problem</font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr">Thanks for your quick reply, I found an error in my installation when I defined the endpoint. I used port 5000 for the adminurl. I restarted from scratch, once again just to be sure it was clean and made sure ton unset the token and service
endpoint has you suggested. I did use the --os commands. I did create admin and associate everything. Also, the error I get since I corrected the adminurl is now different.
<div><br>
</div>
<div>
<div>[root@lecloud100 ~]# env | grep OS_</div>
<div>OS_PASSWORD=xxxxxxxxxx</div>
<div>OS_AUTH_URL=<a href="http://lecloud100:35357/v2.0" target="_blank">http://lecloud100:35357/v2.0</a></div>
<div>OS_USERNAME=admin</div>
<div>OS_TENANT_NAME=admin</div>
</div>
<div><br>
</div>
<div>
<div># keystone user-list</div>
<div>'NoneType' object has no attribute 'encode'</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Here is all the information used to create the config, line by line and debug outputs:</div>
<div><br>
</div>
<div><a href="http://pastebin.com/6XWVqBqb" target="_blank">http://pastebin.com/6XWVqBqb</a><br>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
</div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal"><br></p></div></div>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</blockquote></div><br></div></div></div></div>