Cheung,
I’ve been able to replicate your problem using the Openstack client v 7.5.0 installed on Ubuntu 24.04 with Python3.12 in it’s own venv, against a caracal OpenStack. The problem exists since about
March 2024 versions of the client, as far as I can tell.
I found there was an open bug, originally opened for a different cause, but is having the issues you’re reporting in it this month:
In the short term, I could recommend that you shop around versions (presuming you are using the pip-installed client) to find an openstack client version that works for you, with epoxy. I’m not sure
if the openstacksdk changes will alter how keystone will respond, but I don’t think so; I think this is purely a behaviour of the client.
For me, openstackclient 6.6.0 has been pretty good.
In the bug report, a proposed alternate command `openstack role assignment list –project {project-id}` will give you a similar output to openstack user list –project {project-id}, just with user-id’s
instead of usernames.
Kind Regards,
Joel McLean – Micron21 Pty Ltd
From: cheung <cheung@ezfly.com>
Sent: Wednesday, 24 September 2025 12:10 PM
To: Joel McLean <joel.mclean@micron21.com>; openstack-discuss@lists.openstack.org
Subject: Re: I can not get user list with project in openstack version epoxy
Dears:
Thanks for your response.
I test the command with older python-openstackclient and I can get user list from openstack version epoxy
My test OS 1: debian 12 and python3-openstackclient=6.0.0-4
My test OS 2: ubuntu 24.04 and python3-openstackclient=6.6.0-0ubuntu2
It works well.
$ openstack project list -f value
24f97efad46540d5a91b2ea0422f493c admin
8641dfe9da124e588a23218cc882dfe6 service
$ openstack user list --project 8641dfe9da124e588a23218cc882dfe6 -f value
77c516d4b99b4bd489b33b3cbcb3de1e placement
f5ba18970b344d31908c5a5570b2e45d nova
683db2023e03441592ab300b99c51d56 glance
dbc436dd68d146819e5687a2488bfbd0 neutron
8d9cba7e6f1b4e8894078f38acfa2ae0 cinder
b71d37ee96f64240b757f9c94d259b21 barbican
Then I test the command with python3-openstackclient >=7.4
My test OS 1: debian 13 and python3-openstackclient=7.4.0-3
My test OS 2: ubuntu 24.04 with ubuntu's epoxy cloudrepository and python3-openstackclient=7.4.0-0ubuntu1~cloud0
It does not work.
# openstack project list -f value
24f97efad46540d5a91b2ea0422f493c admin
8641dfe9da124e588a23218cc882dfe6 service
# openstack user list --project 8641dfe9da124e588a23218cc882dfe6
Either group or user should be specified
於
週三，2025-09-24 於 00:13 +0000，Joel McLean
提到：
Friend,
Openstack client version can impact some behaviours. Check the python-openstackclient version you are running, and consider running the version directly compatible with the epoxy release.
https://releases.openstack.org/teams/openstacksdk.html
According the to link, Epoxy release expects client version >=7.2.0, and <= 7.5.0
The SDK/Client is meant to be backwards compatible, but I have run into issues where running the wrong version has meant commands don’t work as expected or at all – the issue I had was with setting an openstack User’s MFA; the –enable-mfa argument was not understood or processed correctly because of the version mismatch.
Acquiring the correct version of the python-openstackclient resolved my problems. To ensure my colleagues did not run into similar issues, I containerised it so that we could have a consistent version with consistent plugins no matter our operating environment ( and it will allow for all tooling to be upgraded simultaneously when we upgrade the openstack version. )
Best of luck.
Kind Regards,
Joel McLean – Micron21 Pty Ltd
From: cheung <cheung@ezfly.com>
Sent: Tuesday, 23 September 2025 1:24 PM
To: openstack-discuss@lists.openstack.org
Subject: I can not get user list with project in openstack version epoxy
Dears:
I can get user list with project in openstack version caracal.
# openstack project list -f value
7fb2be327b4c4f9e83db04a4b5cb922b service
c1bcb532eca44aadabb028b1ee715412 admin
de4012f880e7408f9fb21b67930c21ac project_it
# openstack user list -f value
84b39214b13148d68bf88242aa6abdf9 admin
62f7113645c24199a9946cd16911ca64 glance
b21da7173fe3400f91d3eb73f392474d nova
95a6ff7b9bba42f9aadf3b07a0811330 placement
4ac268a8e75b4a4288f067e28ad14425 neutron
46fa578d54624e06ae2e0b3761a67de7 cinder
1c1646579b5042a6bb463e8f46b7762f test001
57689f8310e744889dce33d6b32f4524 test002
# openstack user list -f value --project project_it
1c1646579b5042a6bb463e8f46b7762f test001
57689f8310e744889dce33d6b32f4524 test002
# openstack user list -f value --project service
4ac268a8e75b4a4288f067e28ad14425 neutron
46fa578d54624e06ae2e0b3761a67de7 cinder
b21da7173fe3400f91d3eb73f392474d nova
62f7113645c24199a9946cd16911ca64 glance
95a6ff7b9bba42f9aadf3b07a0811330 placement
# dpkg -l| grep keyston
ii keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Daemons
ii keystone-common 2:25.0.0-0ubuntu1 all OpenStack identity service - Common files
ii python3-keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Python 3 library
ii python3-keystoneauth1 5.6.0-0ubuntu1.1 all authentication library for OpenStack Identity - Python 3.x
ii python3-keystoneclient 1:5.4.0-0ubuntu1 all client library for the OpenStack Keystone API - Python 3.x
ii python3-keystonemiddleware 10.6.0-0ubuntu1 all Middleware for OpenStack Identity (Keystone) - Python 3.x
But I can not get user list in epoxy version.
# openstack project list -f value
0087125cb3564da39a5e87dc61aece78 project_it
8b6a848d2d7841118567f1dad2eeb9f5 admin
dcaa69462fd3447ca75133a8ce4b95c3 service
# openstack user list -f value
27bd419eb7bc4da58f9e246232a12720 placement
7c5a457f461440e5a24a368f827ecafc admin
846cca4cb4394d1ab4e8d95dffb63ce2 glance
92122f012abb4db38a0d3ca287c04122 nova
ad039b4d1f4f4c42a59e69e56eef4f16 neutron
ebde13fec7584f5180becb88afa0e1c7 cinder
f4cf0b16f52e407d994e2aa729936580 test002
f9ee38a0a4cb412dbd293a83b5b32dc5 test001
# openstack user list -f value --project project_it
Either group or user should be specified
# openstack user list -f value --project service
Either group or user should be specified
What do I miss?
I need to read which one document?
本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。
The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。
The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents
is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient
is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.