[Openstack-operators] Keystone policy.v3cloudsample.json

Paul Belanger paul.belanger at polybeacon.com
Fri Dec 6 02:43:16 UTC 2013


Greetings list,

I wanted to see if anybody was using the policy.v3cloudsample.json[1]
file from Keystone? I'm having some troubles getting it working
properly and get the following error back:

   Unauthorized: You are not authorized to perform the requested
action, identity:list_users. (HTTP 403)

>From keystone.log I see the following errors:

2013-12-06 02:38:44.080 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_domain_filter
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
  kind, match = rule.split(':', 1)
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.080 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.081 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_project_filter
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
  kind, match = rule.split(':', 1)
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.081 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.084 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_domain_filter
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
  kind, match = rule.split(':', 1)
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.084 19783 TRACE keystone.openstack.common.policy
2013-12-06 02:38:44.085 19783 ERROR keystone.openstack.common.policy
[-] Failed to understand rule admin_on_project_filter
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
Traceback (most recent call last):
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
File "/usr/lib/python2.7/dist-packages/keystone/openstack/common/policy.py",
line 475, in _parse_check
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
  kind, match = rule.split(':', 1)
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy
ValueError: need more than 1 value to unpack
2013-12-06 02:38:44.085 19783 TRACE keystone.openstack.common.policy

Any suggestions or reading material I could read?

[1] https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json

-- 
Paul Belanger | PolyBeacon, Inc.
Jabber: paul.belanger at polybeacon.com | IRC: pabelanger (Freenode)
Github: https://github.com/pabelanger | Twitter: https://twitter.com/pabelanger



More information about the OpenStack-operators mailing list