[Openstack] Odd Keystone Behaviour
Craig Jellick
cjellick at godaddy.com
Thu Feb 6 16:09:57 UTC 2014
If you're using the default policy.json file, this seems to be the
expected behavior.
The "list_user_projects" method has an access rule of "admin_or_owner".
All the other calls you mentioned have a rule of "admin_required".
So, I'd say that most likely the user you are using does not have the role
"admin".
/Craig J
On 2/6/14 8:19 AM, "Remo Mattei" <remo at italy1.com> wrote:
>Seems a permissions issue did you try a different user?
>
>Remo
>
>On Feb 6, 2014, at 10:09, Daniel Ellison <daniel at syrinx.net> wrote:
>
>> Hey all,
>>
>> I've run into an issue with a Havana Keystone install on CentOS 6.3.
>>When I issue a command such as:
>>
>> keystone user-list
>>
>> I get in response:
>>
>> Unable to authorize user
>>
>> This happens with service-list, endpoint-list, role-list, etc. Oddly,
>>it does NOT happen with tenant-list; I get a proper list of tenants in
>>response.
>>
>> Running the commands with "--debug", the response body to a "/tokens"
>>request for all was identical aside from the token itself and
>>timestamps. The difference came after that, where most of the *-list
>>commands returned "Unable to authorize user" except for tenant-list,
>>which returned the list of tenants.
>>
>> There is one reference to this issue at
>>http://docs.openstack.org/havana/install-guide/install/yum/content/keysto
>>ne-verify.html#comment-1143923155 so I know I'm not the only one having
>>this issue. The key is that ONE of the commands works while all the rest
>>don't.
>>
>> Any ideas?
>> _______________________________________________
>> Mailing list:
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack at lists.openstack.org
>> Unsubscribe :
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>> !DSPAM:1,52f3a79a32901637212605!
>>
>
>
>_______________________________________________
>Mailing list:
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>Post to : openstack at lists.openstack.org
>Unsubscribe :
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
More information about the Openstack
mailing list