[Openstack] Odd Keystone Behaviour
Remo Mattei
remo at italy1.com
Thu Feb 6 16:13:42 UTC 2014
I agree that’s why I was saying to try a different user. If you add a user it will not be part of the admin anyhow, by default.
Remo
On Feb 6, 2014, at 11:09, Craig Jellick <cjellick at godaddy.com> wrote:
> If you're using the default policy.json file, this seems to be the
> expected behavior.
> The "list_user_projects" method has an access rule of "admin_or_owner".
> All the other calls you mentioned have a rule of "admin_required".
>
> So, I'd say that most likely the user you are using does not have the role
> "admin".
>
>
> /Craig J
>
>
>
>
> On 2/6/14 8:19 AM, "Remo Mattei" <remo at italy1.com> wrote:
>
>> Seems a permissions issue did you try a different user?
>>
>> Remo
>>
>> On Feb 6, 2014, at 10:09, Daniel Ellison <daniel at syrinx.net> wrote:
>>
>>> Hey all,
>>>
>>> I've run into an issue with a Havana Keystone install on CentOS 6.3.
>>> When I issue a command such as:
>>>
>>> keystone user-list
>>>
>>> I get in response:
>>>
>>> Unable to authorize user
>>>
>>> This happens with service-list, endpoint-list, role-list, etc. Oddly,
>>> it does NOT happen with tenant-list; I get a proper list of tenants in
>>> response.
>>>
>>> Running the commands with "--debug", the response body to a "/tokens"
>>> request for all was identical aside from the token itself and
>>> timestamps. The difference came after that, where most of the *-list
>>> commands returned "Unable to authorize user" except for tenant-list,
>>> which returned the list of tenants.
>>>
>>> There is one reference to this issue at
>>> http://docs.openstack.org/havana/install-guide/install/yum/content/keysto
>>> ne-verify.html#comment-1143923155 so I know I'm not the only one having
>>> this issue. The key is that ONE of the commands works while all the rest
>>> don't.
>>>
>>> Any ideas?
>>> _______________________________________________
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack at lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>>
>>
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
> !DSPAM:1,52f3b3e674461390257870!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140206/72e94282/attachment.html>
More information about the Openstack
mailing list