[Openstack-operators] Different tokens from "keystone token-get" and curl to port 35357

Alexander Rubtsov arubtsov at mirantis.com
Wed Aug 21 06:24:06 UTC 2013


Nick,

I think previously you got default(unscoped) token. It used to determine
which tenants you have access to.

For more information you can visit:
1)
http://docs.openstack.org/trunk/openstack-identity/admin/content/example-flows.html
2)
https://www.ibm.com/developerworks/community/blogs/e93514d3-c4f0-4aa0-8844-497f370090f5/entry/openstack_keystone_workflow_token_scoping


On Wed, Aug 21, 2013 at 8:11 AM, Nick Maslov <azpekt at gmail.com> wrote:

>
> Thanks Ahmed, that works per-fect-ly! :)
>
> But that token that I got previously, what was the point of it? Where it
> is used at?
>
> Thanks,
> NM
>
>
> On 08/20, Ahmed RAHAL wrote:
> > Hi Nick
> >
> > Le 2013-08-20 10:35, Nick Maslov a écrit :
> > [...]
> >
> > >Tokens I got from "keystone token-get" and one I got from curl -d
> '{"auth":{"passwordCredentials":{"username": "nik", "password":
> "password"}}}' -H "Content-type: application/json"
> http://IP:35357/v2.0/tokens are different. First one is much bigger
> (3,8Kb) than one from curl (800b).
> > >
> > >One I got from "keystone token-get" works with API calls, second one
> doesnt.
> > >
> >
> > I also got surprised by this as it gets you a token in both cases.
> > You need to add the tenantname in your request:
> > curl -d '{"auth":{"tenantName": "tenantname",
> > "passwordCredentials":{"username": "nik", "password": "password"}}}'
> > -H "Content-type: application/json" http://IP:35357/v2.0/tokens
> >
> >
> > This mainly gets you the endpoints that you need to call other APIs.
> >
> > Hope this helps, as it worked for me.
> >
> >
> > --
> > =================================================
> > Ahmed Rahal <arahal at iweb.com> / iWeb Technologies
> > Spécialiste de l'Architecture TI
> > / IT Architecture Specialist
> > =================================================
> >
> > _______________________________________________
> > OpenStack-operators mailing list
> > OpenStack-operators at lists.openstack.org
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>



-- 

Alexander R.
Technical Support Engineer
Mirantis, Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20130821/715b76c1/attachment.html>


More information about the OpenStack-operators mailing list