Open Stack

Hello, community!

I'm trying to use Tempest to run tests on DevStack environment that is set
up to use Identity API v3. Keystone uses
policy.v3cloudsample.json<https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json>
to enable domain and cloud admins. The environment itself works fine (VMs
boot successfully, etc).

However when I run tempest, the api.identity.admin.v3 tests fail with error
403 forbidden which happens during policy enforcement:

======================================================================
FAIL:
tempest.api.identity.admin.v3.test_tokens.UsersTestXML.test_tokens[gate,smoke]
----------------------------------------------------------------------
Traceback (most recent call last):
_StringException: Empty attachments:
  stderr
  stdout

pythonlogging:'': {{{
2014-03-13 16:39:14,225 Request: POST http://127.0.0.1:5000/v2.0/tokens
2014-03-13 16:39:14,717 Response Status: 200
2014-03-13 16:39:14,718 Request: POST http://127.0.0.1:35357/v3/users
2014-03-13 16:39:14,736 Response Status: 403
}}}

Traceback (most recent call last):
  File "/opt/stack/tempest/tempest/api/identity/admin/v3/test_tokens.py",
line 37, in test_tokens
    email=u_email)
  File
"/opt/stack/tempest/tempest/services/identity/v3/xml/identity_client.py",
line 100, in create_user
    self.headers)
  File "/opt/stack/tempest/tempest/common/rest_client.py", line 302, in post
    return self.request('POST', url, headers, body)
  File
"/opt/stack/tempest/tempest/services/identity/v3/xml/identity_client.py",
line 80, in request
    body=body)
  File "/opt/stack/tempest/tempest/common/rest_client.py", line 436, in
request
    resp, resp_body)
  File "/opt/stack/tempest/tempest/common/rest_client.py", line 478, in
_error_checker
    raise exceptions.Unauthorized()
Unauthorized: Unauthorized

It seems that user credentials passed to policy engine do not contain
domain_id for some reason. Has anyone faced similar problem or can point
into the right direction for resolving this?

Thank you.

-- 
Sincerely, Ruslan Kiianchuk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140313/018e19b9/attachment.html>