<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 05/20/2016 06:14 AM,
<a class="moz-txt-link-abbreviated" href="mailto:magicboiz@hotmail.com">magicboiz@hotmail.com</a> wrote:<br>
</div>
<blockquote
cite="mid:BLU437-SMTP490B4648A8F428CFBBE9A2B04B0@phx.gbl"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
Hi <br>
<br>
I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL
works with fernet tokens. Because I have an old app which only
works with UUID, I have changed /etc/keyston/keyston.conf<br>
<br>
from:<br>
<pre class="programlisting">[token]
provider = keystone.token.providers.fernet.Provider</pre>
<br>
to:<br>
<pre class="programlisting">[token]
provider = keystone.token.providers.uuid.Provider</pre>
<br>
But now, I'm facing a strange behavior:<br>
<br>
as admin user, executing a simple "keystone user-list" doesn't
work and shows this error:<br>
<i><font size="-1">.................<br>
RESP BODY: {"error": {"message": "Non-default domain is not
supported (Disable debug mode to suppress these details.)",
"code": 401, "title": "Unauthorized"}}<br>
</font></i><i><font size="-1">.................</font></i><i><br>
<br>
</i>Executing "openstack user list" also gets the same error:<br>
<font size="-1"><i>Non-default domain is not supported (Disable
debug mode to suppress these details.) (HTTP 401) (Request-ID:
req-8285b64d-353a-4188-949f-679bbfaa1114)</i></font><br>
<br>
Also from Horizon dashboard, I cannot retrieve the user list.....<br>
</blockquote>
<br>
PLeaase upgrade the Fuel code to use the V3 Keystone API. It looks
like Fernet was forgiving on something it should not have been. The
"non-default-domain" error is due to passing a non default domain
along with a V2 token. <br>
<br>
<br>
<blockquote
cite="mid:BLU437-SMTP490B4648A8F428CFBBE9A2B04B0@phx.gbl"
type="cite"> <br>
<br>
But the funny/strange thing is that executing the same command
through V3 indentity admin interface (<font size="-1"><i>export
OS_IDENTITY_API_VERSION=3</i></font>) it works:<br>
<br>
<i><font size="-1">root@node-1:~# openstack user list<br>
+----------------------------------+-------------------+<br>
| ID | Name |<br>
+----------------------------------+-------------------+<br>
| 06c80b0440034f49a674bd0ef56385e1 | heat_admin |<br>
| 1b5ae288f1494efd91aa67cadd290939 | sahara |<br>
| 2c71b7342bfe421abdb1af34a05988ac | heat-cfn |<br>
| 4722750675d6416082be67a7cf9b03c3 | murano |<br>
| 6b020f2c8328430b9bc71400e8a8b661 | cinder |<br>
| 958dd93f02614f38b4575c05833b0884 | heat |<br>
| 97c015a3d9b2432090992027fdb16e44 | ceilometer |<br>
| 9fb385d757324bc0a62b502f4c3ae67c | swift |<br>
| cc1395223fd74ea2aa59242fccb279de | admin |<br>
| dc325906c9b6446a801a9d4914472b51 | neutron |<br>
| df265ea710294923991a5d10006dd9cb | nova |<br>
| ebcf0d3439c143d098d95212fa587b6a | glance |<br>
| fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user |<br>
+----------------------------------+-------------------+<br>
</font></i><br>
<br>
Anyone could help me?<br>
<br>
thanks in advance.<br>
J<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
</blockquote>
<br>
</body>
</html>