<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">I found the source of the issue.<div class="">Into keystone configuration I set allow_rescope_scoped_token to false. Setting true this value horizon compute tab works.</div><div class=""><br class=""></div><div class="">But now the question is:</div><div class="">Why horizon try to rescope authentication token only for compute information?</div><div class=""><br class=""></div><div class="">Thanks</div><div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;"><b class="">Davide Panarese</b><br class="">Cloud & Solution Architect<br class=""><br class=""><b class="">Enter | The open network and cloud provider</b><br class=""><br class="">Via privata Stefanardo da Vimercate, 28 <br class="">20128 Milano<br class=""><a href="http://enter.eu" class="">enter.eu</a><br class=""><br class="">Mobile: +39 3386369591<br class="">Phone: +39 02 25514 837<br class=""><br class="">This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.</div>
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 28 Sep 2018, at 20:28, Erik McCormick <<a href="mailto:emccormick@cirrusseven.com" class="">emccormick@cirrusseven.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Add yourself as an admin of the domain. I think it uses a domain scored token for that tab. In V2 you would have only been admin of a project. <div dir="auto" class=""><br class=""></div><div dir="auto" class="">-Erik</div></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><div class="gmail_quote" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div dir="ltr" class="">On Fri, Sep 28, 2018, 11:47 AM Davide Panarese <<a href="mailto:dpanarese@enter.eu" class="">dpanarese@enter.eu</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word; line-break: after-white-space;" class="">It’s not nova-compute that report the issue but keystone authentication on computing tab.<div class="">As I said before, openstack cli working properly with all services, nova included.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><b class="">Davide Panarese</b><br class="">Cloud & Solution Architect<br class=""><br class=""><b class="">Enter | The open network and cloud provider</b><br class=""><br class="">Via privata Stefanardo da Vimercate, 28 <br class="">20128 Milano<br class=""><a href="http://enter.eu/" target="_blank" rel="noreferrer" class="">enter.eu</a><br class=""><br class="">Mobile: +39 3386369591<br class="">Phone: +39 02 25514 837<br class=""><br class="">This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.</div></div><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 28 Sep 2018, at 14:52, Eugen Block <<a href="mailto:eblock@nde.ag" target="_blank" rel="noreferrer" class="">eblock@nde.ag</a>> wrote:</div><br class="m_-1595699833471451548Apple-interchange-newline"><div class=""><div class="">Since nova-compute reports that failure, what is your auth_url in /etc/nova/nova.conf in the [placement] section?<br class=""><br class=""><br class=""><br class="">Zitat von Davide Panarese <<a href="mailto:dpanarese@enter.eu" target="_blank" rel="noreferrer" class="">dpanarese@enter.eu</a>>:<br class=""><br class=""><blockquote type="cite" class="">@Paul<br class="">Yes keystone:5000 is my endpoint.<br class=""><br class="">@Eugen<br class="">OPENSTACK_KEYSTONE_URL = "<a href="http://%s/v3" target="_blank" rel="noreferrer" class="">http://%s/v3</a><span class="Apple-converted-space"> </span><<a href="http://%s/v3" target="_blank" rel="noreferrer" class="">http://%s/v3</a>>" % OPENSTACK_HOST<br class=""><br class="">Still not working.<br class=""><br class=""><br class="">Davide Panarese<br class=""><br class=""><br class=""><blockquote type="cite" class="">On 28 Sep 2018, at 13:50, Eugen Block <<a href="mailto:eblock@nde.ag" target="_blank" rel="noreferrer" class="">eblock@nde.ag</a>> wrote:<br class=""><br class="">Hi,<br class=""><br class="">what is your current horizon configuration?<br class=""><br class="">control:~ # grep KEYSTONE_URL /srv/www/openstack-dashboard/openstack_dashboard/local/local_settings.py<br class="">OPENSTACK_KEYSTONE_URL = "<a href="http://%s:5000/v3" target="_blank" rel="noreferrer" class="">http://%s:5000/v3</a>" % OPENSTACK_HOST<br class=""><br class="">Maybe this still configured to v2?<br class=""><br class="">Regards,<br class="">Eugen<br class=""><br class=""><br class="">Zitat von Davide Panarese <<a href="mailto:dpanarese@enter.eu" target="_blank" rel="noreferrer" class="">dpanarese@enter.eu</a>>:<br class=""><br class=""><blockquote type="cite" class="">Goodmorning every one,<br class="">i'm finally approaching migration to keystone v3 but i want to maintain keystone v2 compatibility for all users that have custom scripts for authentication to our openstack.<br class="">Migration seems to be pretty simple, change endpoint direct into database changing<span class="Apple-converted-space"> </span><a href="http://keystone:5000/v2.0" target="_blank" rel="noreferrer" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "keystone:5000"<span class="Apple-converted-space"> </span></b></font>http://keystone:5000/v2.0</a><span class="Apple-converted-space"> </span>to<span class="Apple-converted-space"> </span><a href="http://keystone:5000/" target="_blank" rel="noreferrer" class="">http://keystone:5000</a><span class="Apple-converted-space"> </span><<a href="http://keystone:5000/" target="_blank" rel="noreferrer" class="">http://keystone:5000/</a>>; Openstack client have the capability to add /v2.0 or /v3 at the end of url retrieved from catalog.<br class="">But i'm stuck with horizon dashboard, login works but compute information are not available and error log show:<br class="">“ Forbidden: You are not authorized to perform the requested action: rescope a scoped token. (HTTP 403)"<br class="">All other tabs works properly.<br class="">I think that is a keystone issue but i don't understand why with openstack client works perfectly and with horizon not.<br class="">Anyone can explain what i missed in migration?<br class=""><br class="">Thanks a lot,<br class="">Davide Panarese<br class=""></blockquote><br class=""><br class=""><br class=""><br class="">_______________________________________________<br class="">Mailing list:<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" rel="noreferrer" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">Post to :<span class="Apple-converted-space"> </span><a href="mailto:openstack@lists.openstack.org" target="_blank" rel="noreferrer" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe :<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" rel="noreferrer" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class=""><br class="">--<br class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<br class="">Seguire il link qui sotto per segnalarlo come spam:<a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=D389145856.A899A" target="_blank" rel="noreferrer" class="">http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=D389145856.A899A</a><br class=""><br class=""><br class=""></blockquote></blockquote><br class=""><br class=""><br class=""><br class="">--<br class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<br class="">Seguire il link qui sotto per segnalarlo come spam:<a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=9946B46CDF.A2B74" target="_blank" rel="noreferrer" class="">http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=9946B46CDF.A2B74</a><br class=""><br class=""><br class=""></div></div></blockquote></div><br class=""></div></div>_______________________________________________<br class="">Mailing list:<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer noreferrer" target="_blank" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">Post to :<span class="Apple-converted-space"> </span><a href="mailto:openstack@lists.openstack.org" target="_blank" rel="noreferrer" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe :<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer noreferrer" target="_blank" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class=""></blockquote></div><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<span class="Apple-converted-space"> </span><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=953D5406E1.AD5CD" class="">Clicca qui per segnalarlo come spam.</a></font><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><span class="Apple-converted-space"> </span></span><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=953D5406E1.AD5CD" class="">Clicca qui per metterlo in blacklist</a></font><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><span class="Apple-converted-space"> </span></span><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Post to : <a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span></div></blockquote></div><br class=""></div></body></html>