<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi Adam<br>
    <br>
    What do you mean with "upgrade the Fuel code to use the V3 Keystone
    API"?? Afaik I'm running the latest FUEL distro released, which is
    fuel 8.0....is there any new version available? <br>
    <br>
    <div class="moz-cite-prefix">On 20/05/16 17:16, Adam Young wrote:<br>
    </div>
    <blockquote cite="mid:573F2A4C.1050802@redhat.com" type="cite">
      <meta content="text/html; charset=windows-1252"
        http-equiv="Content-Type">
      <div class="moz-cite-prefix">On 05/20/2016 06:14 AM, <a
          moz-do-not-send="true" class="moz-txt-link-abbreviated"
          href="mailto:magicboiz@hotmail.com"><a class="moz-txt-link-abbreviated" href="mailto:magicboiz@hotmail.com">magicboiz@hotmail.com</a></a>
        wrote:<br>
      </div>
      <blockquote
        cite="mid:BLU437-SMTP490B4648A8F428CFBBE9A2B04B0@phx.gbl"
        type="cite">
        <meta http-equiv="content-type" content="text/html;
          charset=windows-1252">
        Hi <br>
        <br>
        I've deployed FUEL 8.0 (liberty) on my lab and noticed that FUEL
        works with fernet tokens. Because I have an old app which only
        works with UUID, I have changed /etc/keyston/keyston.conf<br>
        <br>
        from:<br>
        <pre class="programlisting">[token]
        provider = keystone.token.providers.fernet.Provider</pre>
        <br>
        to:<br>
        <pre class="programlisting">[token]
        provider = keystone.token.providers.uuid.Provider</pre>
         <br>
        But now, I'm facing a strange behavior:<br>
        <br>
        as admin user, executing a simple "keystone user-list" doesn't
        work and shows this error:<br>
        <i><font size="-1">.................<br>
            RESP BODY: {"error": {"message": "Non-default domain is not
            supported (Disable debug mode to suppress these details.)",
            "code": 401, "title": "Unauthorized"}}<br>
          </font></i><i><font size="-1">.................</font></i><i><br>
          <br>
        </i>Executing "openstack user list" also gets the same error:<br>
        <font size="-1"><i>Non-default domain is not supported (Disable
            debug mode to suppress these details.) (HTTP 401)
            (Request-ID: req-8285b64d-353a-4188-949f-679bbfaa1114)</i></font><br>
        <br>
        Also from Horizon dashboard, I cannot retrieve the user
        list.....<br>
      </blockquote>
      <br>
      PLeaase upgrade the Fuel code to use the V3 Keystone API.  It
      looks like Fernet was forgiving on something it should not have
      been.  The "non-default-domain" error is due to passing a non
      default domain along with a V2 token.  <br>
      <br>
      <br>
      <blockquote
        cite="mid:BLU437-SMTP490B4648A8F428CFBBE9A2B04B0@phx.gbl"
        type="cite"> <br>
        <br>
        But the funny/strange thing is that executing the same command
        through V3 indentity admin interface (<font size="-1"><i>export
            OS_IDENTITY_API_VERSION=3</i></font>) it works:<br>
        <br>
        <i><font size="-1">root@node-1:~# openstack user list<br>
            +----------------------------------+-------------------+<br>
            | ID                               | Name              |<br>
            +----------------------------------+-------------------+<br>
            | 06c80b0440034f49a674bd0ef56385e1 | heat_admin        |<br>
            | 1b5ae288f1494efd91aa67cadd290939 | sahara            |<br>
            | 2c71b7342bfe421abdb1af34a05988ac | heat-cfn          |<br>
            | 4722750675d6416082be67a7cf9b03c3 | murano            |<br>
            | 6b020f2c8328430b9bc71400e8a8b661 | cinder            |<br>
            | 958dd93f02614f38b4575c05833b0884 | heat              |<br>
            | 97c015a3d9b2432090992027fdb16e44 | ceilometer        |<br>
            | 9fb385d757324bc0a62b502f4c3ae67c | swift             |<br>
            | cc1395223fd74ea2aa59242fccb279de | admin             |<br>
            | dc325906c9b6446a801a9d4914472b51 | neutron           |<br>
            | df265ea710294923991a5d10006dd9cb | nova              |<br>
            | ebcf0d3439c143d098d95212fa587b6a | glance            |<br>
            | fc804ae3614349ea80f844bc7f102a59 | fuel_stats_user   |<br>
            +----------------------------------+-------------------+<br>
          </font></i><br>
        <br>
        Anyone could help me?<br>
        <br>
        thanks in advance.<br>
        J<br>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">_______________________________________________
Mailing list: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to     : <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
      </blockquote>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to     : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>