[openstack-dev] [keystone] Help consuming trusts

Steve Martinelli stevemar at ca.ibm.com
Fri Aug 16 15:42:52 UTC 2013


Hi Steven,

You can look at the unit tests being run.
https://github.com/openstack/keystone/blob/master/keystone/tests/test_v3_auth.py#L1782

It looks like you need to provide the trustee uname/password and the trust
id. Keep digging into 'build_authentication_request" to see how it's
structured, then it's just a call to /auth/tokens.

Thanks,

_____________________________________________
Steve Martinelli | A4-317 @ IBM Toronto Software Lab
Software Developer - OpenStack
Phone: (905) 413-2851
E-Mail: stevemar at ca.ibm.com



From:	Steven Hardy <shardy at redhat.com>
To:	openstack-dev at lists.openstack.org,
Date:	08/16/2013 11:38 AM
Subject:	[openstack-dev] [keystone] Help consuming trusts



Hi,

I'm looking for help, ideally some code or curl examples, figuring out why
I can't consume trusts in the manner specified in the documentation:

https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3-os-trust-ext.md


I've been working on getting Heat integrated with the trusts functionality,
and the first step was to add keystoneclient support:

https://review.openstack.org/#/c/39899/

All works fine in terms of the actual operations on the OS-TRUST path, I
can create, list, get, delete trusts with no issues.

However I'm strugging to actually *use* the trust, i.e obtain a
trust-scoped token using the trust ID, I always seem to get the opaque
"Authorization failed. The request you have made requires authentication."
message, despite the requests on authentication looking as per the API
docs.

Are there any curl examples or test code I can refer to?

Thanks,

Steve

_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130816/00979eb7/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130816/00979eb7/attachment.gif>


More information about the OpenStack-dev mailing list