[Openstack] [nova] [keystone] admin user to launch VM's for specific tenant

ESWAR RAO eswar7028 at gmail.com
Thu Feb 4 02:02:53 UTC 2016


Hi All,


Pleas help me if I need to alter policy.json to achieve desired result.

In real world deployment will this be of any use-case ??

# keystone tenant-list

+----------------------------------+------------+---------+

|                id                |    name    | enabled |

+----------------------------------+------------+---------+

| 5c193081803c48c3a02f4f6986ba979f |   admin    |   True  |

| eeeb8dbd64e34e0087c920848910832d |    demo    |   True  |

| 9382dc55016d43d0b78dcd3cdd116d20 | nfv-tenant-1 |   True  |

| 7c0fcf128d0b4195bf7c55c0092424c2 |  services  |   True  |

+----------------------------------+------------+---------+


# keystone user-list

+----------------------------------+--------------+---------+-------------------+

|                id                |     name     | enabled |       email
    |

+----------------------------------+--------------+---------+-------------------+

| 5036f050bbc04b7a92f5a960ce7c6081 |    admin     |   True  |
test at orgname.com |

| aabeeba850184cc0a2a476adbf664242 |    cinder    |   True  |
cinder at localhost |

| 5add730b14cd4aac9b521a4fd415fe84 |     demo     |   True  |
test at orgname.com |

| 30b4c4ed705e43329a10964b003645cc |    glance    |   True  |
glance at localhost |

| faf72346666143baba5255b9d7fafdbc |     heat     |   True  |
heat at localhost  |

| 5e152a11ba2348d1804700e618912b7f |   neutron    |   True  |
neutron at localhost |

| 340c8f52bba948b988359e5f0c6c46a4 | nfv-tenant-1-user-1 |   True  |
user at gmail.com  |

| 48fd6141348f486593116585c487e75d |     nova     |   True  |
nova at localhost  |

+----------------------------------+--------------+---------+-------------------+


# nova --debug --os-username admin --os-password admin123
--os-tenant-name nfv-tenant-1 --os-auth-url 'http://10.213.6.12:5000/v2.0/'
boot --image xxxxx  --flavor 4 vm-1-1

RESP BODY: {"error": {"message": "User 5036f050bbc04b7a92f5a960ce7c6081 is
unauthorized for tenant 9382dc55016d43d0b78dcd3cdd116d20", "code": 401,
"title": "Unauthorized"}}

DEBUG (shell:777) Invalid OpenStack Nova credentials.


Thanks

Eswar Rao
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160204/f0e0d93a/attachment.html>


More information about the Openstack mailing list