Comment 2 for bug 1415588

Revision history for this message
Pavel Gluschak (scsnow) wrote :

Do you have multiple domains defined? I have first domain in sql backend and second one in ldap backend.

[root@juno1 ~(keystonev3_admin)]# cat keystonev3rc_admin
export OS_IDENTITY_API_VERSION=3
export OS_AUTH_URL=http://9.167.185.90:5000/v3
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_USERNAME=admin
export OS_PROJECT_NAME=admin
export OS_PASSWORD=*****
export PS1='[\u@\h \W(keystonev3_admin)]\$ '
[root@juno1 ~(keystonev3_admin)]# openstack user list
ERROR: openstack The request you have made requires authentication. (HTTP 401)
[root@juno1 ~(keystonev3_admin)]# openstack user list --domain default
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 0261a5e2252d4778866209c4834a73ad | nova |
| 0781c81c522642d689e3611a82ccb7f4 | neutron |
| 93e2632af4fa4c6297ce34e6208b3038 | heat |
| 965afb3c90304064b74cafdcc04647a4 | cinder |
| c8ffb935e7f3495593ee73a1f1d3f17f | admin |
| eec4197e03c842a2ae4c1176ee66540d | glance |
+----------------------------------+---------+

I have to specify --domain parameter, even I have OS_USER_DOMAIN_ID exported. I don't know whether it's bug or feature in keystone.