Hi Xuyun, Creating a user with a password is all you need to authenticate and get a token. The 'keystone-manage credentials' command is to add any additional credentials like EC2 (AWS) credentials or API keys. I'm not an expert on the swift command, but I believe it might work if you pass the password as your API key… Regards, Ziad From: Xuyun Zhang <xyzhanggz at gmail.com<mailto:xyzhanggz at gmail.com>> Date: Sat, 14 Jan 2012 14:30:13 +1100 To: <openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net>> Subject: [Openstack] About keystone concepts: the difference between the key of a credential and the password of a user I was really confused by the concepts in keystone (I'm a beginner to OpenStack). When we create a user, we should set the username and password for this user. According the command "keystone-manage credentials add [username] [type] [key] [password]([tenant_name])", we still need a key and a password for a credential. But they are different from the username and password we created for a user. When we use swift command "swift -A <url> -U <user> -K <key> operation" to connect the swift proxy, the <user> and <key> appear to be the username and password created for a user. So, could anyone please help me to clear these concepts and the relationships among them? I'v got stuck to run swift and keystone for a while. Thanks Regards, Sean _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net> Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20120114/afc3ba53/attachment.html>