I can not get user list with project in openstack version epoxy
Dears: I can get user list with project in openstack version caracal. # openstack project list -f value 7fb2be327b4c4f9e83db04a4b5cb922b service c1bcb532eca44aadabb028b1ee715412 admin de4012f880e7408f9fb21b67930c21ac project_it # openstack user list -f value 84b39214b13148d68bf88242aa6abdf9 admin 62f7113645c24199a9946cd16911ca64 glance b21da7173fe3400f91d3eb73f392474d nova 95a6ff7b9bba42f9aadf3b07a0811330 placement 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project project_it 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project service 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder b21da7173fe3400f91d3eb73f392474d nova 62f7113645c24199a9946cd16911ca64 glance 95a6ff7b9bba42f9aadf3b07a0811330 placement # dpkg -l| grep keyston ii keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Daemons ii keystone-common 2:25.0.0-0ubuntu1 all OpenStack identity service - Common files ii python3-keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Python 3 library ii python3-keystoneauth1 5.6.0-0ubuntu1.1 all authentication library for OpenStack Identity - Python 3.x ii python3-keystoneclient 1:5.4.0-0ubuntu1 all client library for the OpenStack Keystone API - Python 3.x ii python3-keystonemiddleware 10.6.0-0ubuntu1 all Middleware for OpenStack Identity (Keystone) - Python 3.x But I can not get user list in epoxy version. # openstack project list -f value 0087125cb3564da39a5e87dc61aece78 project_it 8b6a848d2d7841118567f1dad2eeb9f5 admin dcaa69462fd3447ca75133a8ce4b95c3 service # openstack user list -f value 27bd419eb7bc4da58f9e246232a12720 placement 7c5a457f461440e5a24a368f827ecafc admin 846cca4cb4394d1ab4e8d95dffb63ce2 glance 92122f012abb4db38a0d3ca287c04122 nova ad039b4d1f4f4c42a59e69e56eef4f16 neutron ebde13fec7584f5180becb88afa0e1c7 cinder f4cf0b16f52e407d994e2aa729936580 test002 f9ee38a0a4cb412dbd293a83b5b32dc5 test001 # openstack user list -f value --project project_it Either group or user should be specified # openstack user list -f value --project service Either group or user should be specified What do I miss? I need to read which one document? 本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。 The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
Friend, Openstack client version can impact some behaviours. Check the python-openstackclient version you are running, and consider running the version directly compatible with the epoxy release. https://releases.openstack.org/teams/openstacksdk.html According the to link, Epoxy release expects client version >=7.2.0, and <= 7.5.0 The SDK/Client is meant to be backwards compatible, but I have run into issues where running the wrong version has meant commands don’t work as expected or at all – the issue I had was with setting an openstack User’s MFA; the –enable-mfa argument was not understood or processed correctly because of the version mismatch. Acquiring the correct version of the python-openstackclient resolved my problems. To ensure my colleagues did not run into similar issues, I containerised it so that we could have a consistent version with consistent plugins no matter our operating environment ( and it will allow for all tooling to be upgraded simultaneously when we upgrade the openstack version. ) Best of luck. Kind Regards, Joel McLean – Micron21 Pty Ltd From: cheung <cheung@ezfly.com> Sent: Tuesday, 23 September 2025 1:24 PM To: openstack-discuss@lists.openstack.org Subject: I can not get user list with project in openstack version epoxy Dears: I can get user list with project in openstack version caracal. # openstack project list -f value 7fb2be327b4c4f9e83db04a4b5cb922b service c1bcb532eca44aadabb028b1ee715412 admin de4012f880e7408f9fb21b67930c21ac project_it # openstack user list -f value 84b39214b13148d68bf88242aa6abdf9 admin 62f7113645c24199a9946cd16911ca64 glance b21da7173fe3400f91d3eb73f392474d nova 95a6ff7b9bba42f9aadf3b07a0811330 placement 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project project_it 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project service 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder b21da7173fe3400f91d3eb73f392474d nova 62f7113645c24199a9946cd16911ca64 glance 95a6ff7b9bba42f9aadf3b07a0811330 placement # dpkg -l| grep keyston ii keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Daemons ii keystone-common 2:25.0.0-0ubuntu1 all OpenStack identity service - Common files ii python3-keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Python 3 library ii python3-keystoneauth1 5.6.0-0ubuntu1.1 all authentication library for OpenStack Identity - Python 3.x ii python3-keystoneclient 1:5.4.0-0ubuntu1 all client library for the OpenStack Keystone API - Python 3.x ii python3-keystonemiddleware 10.6.0-0ubuntu1 all Middleware for OpenStack Identity (Keystone) - Python 3.x But I can not get user list in epoxy version. # openstack project list -f value 0087125cb3564da39a5e87dc61aece78 project_it 8b6a848d2d7841118567f1dad2eeb9f5 admin dcaa69462fd3447ca75133a8ce4b95c3 service # openstack user list -f value 27bd419eb7bc4da58f9e246232a12720 placement 7c5a457f461440e5a24a368f827ecafc admin 846cca4cb4394d1ab4e8d95dffb63ce2 glance 92122f012abb4db38a0d3ca287c04122 nova ad039b4d1f4f4c42a59e69e56eef4f16 neutron ebde13fec7584f5180becb88afa0e1c7 cinder f4cf0b16f52e407d994e2aa729936580 test002 f9ee38a0a4cb412dbd293a83b5b32dc5 test001 # openstack user list -f value --project project_it Either group or user should be specified # openstack user list -f value --project service Either group or user should be specified What do I miss? I need to read which one document? 本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。 The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
Dears: Thanks for your response. I test the command with older python-openstackclient and I can get user list from openstack version epoxy My test OS 1: debian 12 and python3-openstackclient=6.0.0-4 My test OS 2: ubuntu 24.04 and python3-openstackclient=6.6.0-0ubuntu2 It works well. $ openstack project list -f value 24f97efad46540d5a91b2ea0422f493c admin 8641dfe9da124e588a23218cc882dfe6 service $ openstack user list --project 8641dfe9da124e588a23218cc882dfe6 -f value 77c516d4b99b4bd489b33b3cbcb3de1e placement f5ba18970b344d31908c5a5570b2e45d nova 683db2023e03441592ab300b99c51d56 glance dbc436dd68d146819e5687a2488bfbd0 neutron 8d9cba7e6f1b4e8894078f38acfa2ae0 cinder b71d37ee96f64240b757f9c94d259b21 barbican Then I test the command with python3-openstackclient >=7.4 My test OS 1: debian 13 and python3-openstackclient=7.4.0-3 My test OS 2: ubuntu 24.04 with ubuntu's epoxy cloudrepository and python3-openstackclient=7.4.0-0ubuntu1~cloud0 It does not work. # openstack project list -f value 24f97efad46540d5a91b2ea0422f493c admin 8641dfe9da124e588a23218cc882dfe6 service # openstack user list --project 8641dfe9da124e588a23218cc882dfe6 Either group or user should be specified 於 週三，2025-09-24 於 00:13 +0000，Joel McLean 提到：
Friend, Openstack client version can impact some behaviours. Check the python-openstackclient version you are running, and consider running the version directly compatible with the epoxy release. https://releases.openstack.org/teams/openstacksdk.html According the to link, Epoxy release expects client version >=7.2.0, and <= 7.5.0 The SDK/Client is meant to be backwards compatible, but I have run into issues where running the wrong version has meant commands don’t work as expected or at all – the issue I had was with setting an openstack User’s MFA; the –enable-mfa argument was not understood or processed correctly because of the version mismatch. Acquiring the correct version of the python-openstackclient resolved my problems. To ensure my colleagues did not run into similar issues, I containerised it so that we could have a consistent version with consistent plugins no matter our operating environment ( and it will allow for all tooling to be upgraded simultaneously when we upgrade the openstack version. ) Best of luck. Kind Regards, Joel McLean – Micron21 Pty Ltd From: cheung <cheung@ezfly.com> Sent: Tuesday, 23 September 2025 1:24 PM To: openstack-discuss@lists.openstack.org Subject: I can not get user list with project in openstack version epoxy Dears: I can get user list with project in openstack version caracal. # openstack project list -f value 7fb2be327b4c4f9e83db04a4b5cb922b service c1bcb532eca44aadabb028b1ee715412 admin de4012f880e7408f9fb21b67930c21ac project_it # openstack user list -f value 84b39214b13148d68bf88242aa6abdf9 admin 62f7113645c24199a9946cd16911ca64 glance b21da7173fe3400f91d3eb73f392474d nova 95a6ff7b9bba42f9aadf3b07a0811330 placement 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project project_it 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project service 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder b21da7173fe3400f91d3eb73f392474d nova 62f7113645c24199a9946cd16911ca64 glance 95a6ff7b9bba42f9aadf3b07a0811330 placement # dpkg -l| grep keyston ii keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Daemons ii keystone-common 2:25.0.0-0ubuntu1 all OpenStack identity service - Common files ii python3-keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Python 3 library ii python3-keystoneauth1 5.6.0-0ubuntu1.1 all authentication library for OpenStack Identity - Python 3.x ii python3-keystoneclient 1:5.4.0-0ubuntu1 all client library for the OpenStack Keystone API - Python 3.x ii python3-keystonemiddleware 10.6.0-0ubuntu1 all Middleware for OpenStack Identity (Keystone) - Python 3.x But I can not get user list in epoxy version. # openstack project list -f value 0087125cb3564da39a5e87dc61aece78 project_it 8b6a848d2d7841118567f1dad2eeb9f5 admin dcaa69462fd3447ca75133a8ce4b95c3 service # openstack user list -f value 27bd419eb7bc4da58f9e246232a12720 placement 7c5a457f461440e5a24a368f827ecafc admin 846cca4cb4394d1ab4e8d95dffb63ce2 glance 92122f012abb4db38a0d3ca287c04122 nova ad039b4d1f4f4c42a59e69e56eef4f16 neutron ebde13fec7584f5180becb88afa0e1c7 cinder f4cf0b16f52e407d994e2aa729936580 test002 f9ee38a0a4cb412dbd293a83b5b32dc5 test001 # openstack user list -f value --project project_it Either group or user should be specified # openstack user list -f value --project service Either group or user should be specified What do I miss? I need to read which one document? 本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使 用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造 成損害，寄件人恕不負責。
The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。 The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
Cheung, I’ve been able to replicate your problem using the Openstack client v 7.5.0 installed on Ubuntu 24.04 with Python3.12 in it’s own venv, against a caracal OpenStack. The problem exists since about March 2024 versions of the client, as far as I can tell. I found there was an open bug, originally opened for a different cause, but is having the issues you’re reporting in it this month: https://bugs.launchpad.net/python-openstackclient/+bug/1616104 In the short term, I could recommend that you shop around versions (presuming you are using the pip-installed client) to find an openstack client version that works for you, with epoxy. I’m not sure if the openstacksdk changes will alter how keystone will respond, but I don’t think so; I think this is purely a behaviour of the client. For me, openstackclient 6.6.0 has been pretty good. In the bug report, a proposed alternate command `openstack role assignment list –project {project-id}` will give you a similar output to openstack user list –project {project-id}, just with user-id’s instead of usernames. Kind Regards, Joel McLean – Micron21 Pty Ltd From: cheung <cheung@ezfly.com> Sent: Wednesday, 24 September 2025 12:10 PM To: Joel McLean <joel.mclean@micron21.com>; openstack-discuss@lists.openstack.org Subject: Re: I can not get user list with project in openstack version epoxy Dears: Thanks for your response. I test the command with older python-openstackclient and I can get user list from openstack version epoxy My test OS 1: debian 12 and python3-openstackclient=6.0.0-4 My test OS 2: ubuntu 24.04 and python3-openstackclient=6.6.0-0ubuntu2 It works well. $ openstack project list -f value 24f97efad46540d5a91b2ea0422f493c admin 8641dfe9da124e588a23218cc882dfe6 service $ openstack user list --project 8641dfe9da124e588a23218cc882dfe6 -f value 77c516d4b99b4bd489b33b3cbcb3de1e placement f5ba18970b344d31908c5a5570b2e45d nova 683db2023e03441592ab300b99c51d56 glance dbc436dd68d146819e5687a2488bfbd0 neutron 8d9cba7e6f1b4e8894078f38acfa2ae0 cinder b71d37ee96f64240b757f9c94d259b21 barbican Then I test the command with python3-openstackclient >=7.4 My test OS 1: debian 13 and python3-openstackclient=7.4.0-3 My test OS 2: ubuntu 24.04 with ubuntu's epoxy cloudrepository and python3-openstackclient=7.4.0-0ubuntu1~cloud0 It does not work. # openstack project list -f value 24f97efad46540d5a91b2ea0422f493c admin 8641dfe9da124e588a23218cc882dfe6 service # openstack user list --project 8641dfe9da124e588a23218cc882dfe6 Either group or user should be specified 於 週三，2025-09-24 於 00:13 +0000，Joel McLean 提到： Friend, Openstack client version can impact some behaviours. Check the python-openstackclient version you are running, and consider running the version directly compatible with the epoxy release. https://releases.openstack.org/teams/openstacksdk.html<https://security.mailcloud.com.tw/mg-cgi/mg_redirect?dmn=ezfly.com&mid=68D337C5.00022142_10.0.0.118&mtime=1758672837&token=6c7ef1a18b47e0809656ee8fb3c45455&url=https%3A%2F%2Freleases%2Eopenstack%2Eorg%2Fteams%2Fopenstacksdk%2Ehtml> According the to link, Epoxy release expects client version >=7.2.0, and <= 7.5.0 The SDK/Client is meant to be backwards compatible, but I have run into issues where running the wrong version has meant commands don’t work as expected or at all – the issue I had was with setting an openstack User’s MFA; the –enable-mfa argument was not understood or processed correctly because of the version mismatch. Acquiring the correct version of the python-openstackclient resolved my problems. To ensure my colleagues did not run into similar issues, I containerised it so that we could have a consistent version with consistent plugins no matter our operating environment ( and it will allow for all tooling to be upgraded simultaneously when we upgrade the openstack version. ) Best of luck. Kind Regards, Joel McLean – Micron21 Pty Ltd From: cheung <cheung@ezfly.com<mailto:cheung@ezfly.com>> Sent: Tuesday, 23 September 2025 1:24 PM To: openstack-discuss@lists.openstack.org<mailto:openstack-discuss@lists.openstack.org> Subject: I can not get user list with project in openstack version epoxy Dears: I can get user list with project in openstack version caracal. # openstack project list -f value 7fb2be327b4c4f9e83db04a4b5cb922b service c1bcb532eca44aadabb028b1ee715412 admin de4012f880e7408f9fb21b67930c21ac project_it # openstack user list -f value 84b39214b13148d68bf88242aa6abdf9 admin 62f7113645c24199a9946cd16911ca64 glance b21da7173fe3400f91d3eb73f392474d nova 95a6ff7b9bba42f9aadf3b07a0811330 placement 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project project_it 1c1646579b5042a6bb463e8f46b7762f test001 57689f8310e744889dce33d6b32f4524 test002 # openstack user list -f value --project service 4ac268a8e75b4a4288f067e28ad14425 neutron 46fa578d54624e06ae2e0b3761a67de7 cinder b21da7173fe3400f91d3eb73f392474d nova 62f7113645c24199a9946cd16911ca64 glance 95a6ff7b9bba42f9aadf3b07a0811330 placement # dpkg -l| grep keyston ii keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Daemons ii keystone-common 2:25.0.0-0ubuntu1 all OpenStack identity service - Common files ii python3-keystone 2:25.0.0-0ubuntu1 all OpenStack identity service - Python 3 library ii python3-keystoneauth1 5.6.0-0ubuntu1.1 all authentication library for OpenStack Identity - Python 3.x ii python3-keystoneclient 1:5.4.0-0ubuntu1 all client library for the OpenStack Keystone API - Python 3.x ii python3-keystonemiddleware 10.6.0-0ubuntu1 all Middleware for OpenStack Identity (Keystone) - Python 3.x But I can not get user list in epoxy version. # openstack project list -f value 0087125cb3564da39a5e87dc61aece78 project_it 8b6a848d2d7841118567f1dad2eeb9f5 admin dcaa69462fd3447ca75133a8ce4b95c3 service # openstack user list -f value 27bd419eb7bc4da58f9e246232a12720 placement 7c5a457f461440e5a24a368f827ecafc admin 846cca4cb4394d1ab4e8d95dffb63ce2 glance 92122f012abb4db38a0d3ca287c04122 nova ad039b4d1f4f4c42a59e69e56eef4f16 neutron ebde13fec7584f5180becb88afa0e1c7 cinder f4cf0b16f52e407d994e2aa729936580 test002 f9ee38a0a4cb412dbd293a83b5b32dc5 test001 # openstack user list -f value --project project_it Either group or user should be specified # openstack user list -f value --project service Either group or user should be specified What do I miss? I need to read which one document? 本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。 The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication. 本電子郵件及其所有附件所含之資訊均屬機密，僅供指定之收件人使用，未經寄件人同意不得揭露、複製或散布本電子郵件。若您並非指定之收件人，請勿使用、保存或揭露本電子郵件之任何部分，並請立即通知寄件人並完全刪除本電子郵件。網路通訊可能含有病毒，收件人應自行確認本郵件是否安全，若因此造成損害，寄件人恕不負責。 The information contained in this communication and attachment is confidential and is intended only for the use of the recipient to which this communication is addressed. Any disclosure, copying or distribution of this communication without the sender's consents is strictly prohibited. If you are not the intended recipient, please notify the sender and delete this communication entirely without using, retaining, or disclosing any of its contents. Internet communications cannot be guaranteed to be virus-free. The recipient is responsible for ensuring that this communication is virus free and the sender accepts no liability for any damages caused by virus transmitted by this communication.
participants (2)
-
cheung
-
Joel McLean