[Openstack-operators] Keystone policy.v3cloudsample.json
Paul Belanger
paul.belanger at polybeacon.com
Fri Dec 6 02:43:16 UTC 2013
Greetings list,
I wanted to see if anybody was using the policy.v3cloudsample.json[1]
file from Keystone? I'm having some troubles getting it working
properly and get the following error back:
Unauthorized: You are not authorized to perform the requested
action, identity:list_users. (HTTP 403)
>From keystone.log I see the following errors:
2013-12-06 02:38:44.080 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_domain_filter
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
kind, match = rule.split(':', 1)
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.081 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_project_filter
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
kind, match = rule.split(':', 1)
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.084 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_domain_filter
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
kind, match = rule.split(':', 1)
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.085 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_project_filter
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
kind, match = rule.split(':', 1)
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
Any suggestions or reading material I could read?
[1] https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json
--
Paul Belanger | PolyBeacon, Inc.
Jabber: paul.belanger at polybeacon.com | IRC: pabelanger (Freenode)
Github: https://github.com/pabelanger | Twitter: https://twitter.com/pabelanger
More information about the OpenStack-operators
mailing list