[Openstack] [Keystone] List projects as domain admin

Kseniya Tychkova ktychkova at mirantis.com
Wed Aug 31 09:09:26 UTC 2016


You should request by domain id not by domain name:
openstack --os-domain-id <test domain id> --os-user-domain-id <test domain
id> --os-username domain_admin --os-identity-api-version 3 project list
--domain *<test domain id>*

On Wed, Aug 31, 2016 at 11:13 AM, <Kostiantyn.Volenbovskyi at swisscom.com>
wrote:

> Hi,
>
> it might be helpful to follow [1]
> I suspect that /etc/keystone/policy.json is a culprit in your situation
>
> BR,
> Konstantin
> [1] https://www.rdoproject.org/documentation/domains/
>
>
> > -----Original Message-----
> > From: Сергей Филатов [mailto:filatecs at gmail.com]
> > Sent: Tuesday, August 30, 2016 3:26 PM
> > To: openstack at lists.openstack.org
> > Subject: [Openstack] [Keystone] List projects as domain admin
> >
> > Hi all,
> > I’m trying to test keystone v3 functionality in mitaka.
> >
> > As admin of non-default domain I cannot list domains -> when I’m doing
> list on
> > projects with —domain <domain> key it fails with cannot find domain.
> > Am I doing something wrong here?
> >
> > Steps to reproduce:
> >
> > openstack --os-domain-id default --os-user-domain-id default
> --os-identity-api-
> > version 3 domain create test openstack --os-domain-id default --os-user-
> > domain-id default --os-identity-api-version 3 user create domain_admin --
> > password admin --domain test
> >
> > openstack --os-domain-id default --os-user-domain-id default
> --os-identity-api-
> > version 3 role add admin --user domain_admin --domain test openstack
> --os-
> > domain-id <test domain id> --os-user-domain-id <test domain id>
> --os-username
> > domain_admin --os-identity-api-version 3 project list --domain test
> >
> > > Could not find resource test
> >
> > ..Sergey Filatov
> >
> >
> >
> >
> > _______________________________________________
> > Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/
> openstack
> > Post to     : openstack at lists.openstack.org
> > Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/
> openstack
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/
> openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/
> openstack
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160831/a0f8268b/attachment.html>


More information about the Openstack mailing list