Verified on my QA lab with MOS 7.0 MU1.
Steps To Verify: 1. Login to OpenStack controller. 2. Run command 'openstack --debug user list'
Observed Result: user password are not presented in RESPONSE BODY:
INFO: openstackclient.common.clientmanager Using auth plugin: osc_password DEBUG: openstackclient.common.clientmanager Get auth_ref DEBUG: keystoneclient.session REQ: curl -g -i -X GET http://192.168.0.2:5000/v2.0/ -H "Accept: application/json" -H "User-Agent: python-keystoneclient" INFO: urllib3.connectionpool Starting new HTTP connection (1): 192.168.0.2 DEBUG: urllib3.connectionpool "GET /v2.0/ HTTP/1.1" 200 340 DEBUG: keystoneclient.session RESP: [200] content-length: 340 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:29 GMT content-type: application/json x-openstack-request-id: req-0bfca27e-c820-4add-ab70-2772b67e4dfd RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://172.18.161.182:5000/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}}
DEBUG: keystoneclient.auth.identity.v2 Making authentication request to http://172.18.161.182:5000/v2.0/tokens INFO: urllib3.connectionpool Starting new HTTP connection (1): 172.18.161.182 DEBUG: urllib3.connectionpool "POST /v2.0/tokens HTTP/1.1" 200 4404 DEBUG: openstackclient.identity.v2_0.user.ListUser take_action(Namespace(columns=[], formatter='table', long=False, max_width=0, project=None, quote_mode='nonnumeric')) DEBUG: openstackclient.identity.client Instantiating identity client: <class 'openstackclient.identity.client.IdentityClientv2'> DEBUG: keystoneclient.auth.identity.v2 Making authentication request to http://172.18.161.182:5000/v2.0/tokens INFO: urllib3.connectionpool Resetting dropped connection: 172.18.161.182 DEBUG: urllib3.connectionpool "POST /v2.0/tokens HTTP/1.1" 200 4404 DEBUG: keystoneclient.session REQ: curl -g -i -X GET http://192.168.0.2:35357/ -H "Accept: application/json" -H "User-Agent: python-keystoneclient" INFO: urllib3.connectionpool Starting new HTTP connection (1): 192.168.0.2 DEBUG: urllib3.connectionpool "GET / HTTP/1.1" 300 593 DEBUG: keystoneclient.session RESP: [300] content-length: 593 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:30 GMT content-type: application/json RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://192.168.0.2:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://192.168.0.2:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
DEBUG: keystoneclient.session REQ: curl -g -i -X GET http://192.168.0.2:35357/v2.0/users -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}da16c6f42f38c6439964a84e26025428b7059d47" INFO: urllib3.connectionpool Resetting dropped connection: 192.168.0.2 DEBUG: urllib3.connectionpool "GET /v2.0/users HTTP/1.1" 200 1161 DEBUG: keystoneclient.session RESP: [200] content-length: 1161 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:30 GMT content-type: application/json x-openstack-request-id: req-a0926e60-05ea-4c7a-a71f-694985fbdfa3 RESP BODY: {"users": [{"username": "admin", "name": "admin", "enabled": true, "email": "admin@localhost", "id": "0750f721c8e049ebaf75da5dc0d8b8a8"}, {"username": "heat-cfn", "name": "heat-cfn", "enabled": true, "email": "heat-cfn@localhost", "id": "119306c8dfb64ca5ba7961d74b470838"}, {"username": "nova", "name": "nova", "enabled": true, "email": "nova@localhost", "id": "261ba0b6b05e4a7381f12a0c4658d2a0"}, {"username": "heat", "name": "heat", "enabled": true, "email": "heat@localhost", "id": "39807be3ba2f4040ba912b36a618325b"}, {"username": "swift", "name": "swift", "enabled": true, "email": "swift@localhost", "id": "692bf1e5879c46a897b840e220393d0f"}, {"username": "cinder", "name": "cinder", "enabled": true, "email": "cinder@localhost", "id": "9042c9c4328f46f4aa61096abacc82a9"}, {"username": "glance", "name": "glance", "enabled": true, "email": "glance@localhost", "id": "91b41373ef15486b977b8eec8f80b1ad"}, {"username": "neutron", "name": "neutron", "enabled": true, "email": "neutron@localhost", "id": "bf0bf9258c19413e9529f1609082c02c"}, {"username": "fuel_stats_user", "enabled": true, "name": "fuel_stats_user", "id": "d8633277c61e4fc783e37b0d3235b769"}]}
+----------------------------------+-----------------+ | ID | Name | +----------------------------------+-----------------+ | 0750f721c8e049ebaf75da5dc0d8b8a8 | admin | | 119306c8dfb64ca5ba7961d74b470838 | heat-cfn | | 261ba0b6b05e4a7381f12a0c4658d2a0 | nova | | 39807be3ba2f4040ba912b36a618325b | heat | | 692bf1e5879c46a897b840e220393d0f | swift | | 9042c9c4328f46f4aa61096abacc82a9 | cinder | | 91b41373ef15486b977b8eec8f80b1ad | glance | | bf0bf9258c19413e9529f1609082c02c | neutron | | d8633277c61e4fc783e37b0d3235b769 | fuel_stats_user | +----------------------------------+-----------------+ DEBUG: openstackclient.shell clean_up ListUser
Verified on my QA lab with MOS 7.0 MU1.
Steps To Verify:
1. Login to OpenStack controller.
2. Run command 'openstack --debug user list'
Observed Result:
user password are not presented in RESPONSE BODY:
INFO: openstackclient .common. clientmanager Using auth plugin: osc_password .common. clientmanager Get auth_ref session REQ: curl -g -i -X GET http:// 192.168. 0.2:5000/ v2.0/ -H "Accept: application/json" -H "User-Agent: python- keystoneclient" connectionpool Starting new HTTP connection (1): 192.168.0.2 connectionpool "GET /v2.0/ HTTP/1.1" 200 340 session RESP: [200] content-length: 340 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:29 GMT content-type: application/json x-openstack- request- id: req-0bfca27e- c820-4add- ab70-2772b67e4d fd 17T00:00: 00Z", "media-types": [{"base": "application/json", "type": "application/ vnd.openstack. identity- v2.0+json" }], "id": "v2.0", "links": [{"href": "http:// 172.18. 161.182: 5000/v2. 0/", "rel": "self"}, {"href": "http:// docs.openstack. org/", "type": "text/html", "rel": "describedby"}]}}
DEBUG: openstackclient
DEBUG: keystoneclient.
INFO: urllib3.
DEBUG: urllib3.
DEBUG: keystoneclient.
RESP BODY: {"version": {"status": "stable", "updated": "2014-04-
DEBUG: keystoneclient. auth.identity. v2 Making authentication request to http:// 172.18. 161.182: 5000/v2. 0/tokens connectionpool Starting new HTTP connection (1): 172.18.161.182 connectionpool "POST /v2.0/tokens HTTP/1.1" 200 4404 .identity. v2_0.user. ListUser take_action( Namespace( columns= [], formatter='table', long=False, max_width=0, project=None, quote_mode= 'nonnumeric' )) .identity. client Instantiating identity client: <class 'openstackclien t.identity. client. IdentityClientv 2'> auth.identity. v2 Making authentication request to http:// 172.18. 161.182: 5000/v2. 0/tokens connectionpool Resetting dropped connection: 172.18.161.182 connectionpool "POST /v2.0/tokens HTTP/1.1" 200 4404 session REQ: curl -g -i -X GET http:// 192.168. 0.2:35357/ -H "Accept: application/json" -H "User-Agent: python- keystoneclient" connectionpool Starting new HTTP connection (1): 192.168.0.2 connectionpool "GET / HTTP/1.1" 300 593 session RESP: [300] content-length: 593 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:30 GMT content-type: application/json 30T00:00: 00Z", "media-types": [{"base": "application/json", "type": "application/ vnd.openstack. identity- v3+json" }], "id": "v3.4", "links": [{"href": "http:// 192.168. 0.2:35357/ v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04- 17T00:00: 00Z", "media-types": [{"base": "application/json", "type": "application/ vnd.openstack. identity- v2.0+json" }], "id": "v2.0", "links": [{"href": "http:// 192.168. 0.2:35357/ v2.0/", "rel": "self"}, {"href": "http:// docs.openstack. org/", "type": "text/html", "rel": "describedby"}]}]}}
INFO: urllib3.
DEBUG: urllib3.
DEBUG: openstackclient
DEBUG: openstackclient
DEBUG: keystoneclient.
INFO: urllib3.
DEBUG: urllib3.
DEBUG: keystoneclient.
INFO: urllib3.
DEBUG: urllib3.
DEBUG: keystoneclient.
RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-
DEBUG: keystoneclient. session REQ: curl -g -i -X GET http:// 192.168. 0.2:35357/ v2.0/users -H "User-Agent: python- keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}da16c6f42 f38c6439964a84e 26025428b7059d4 7" connectionpool Resetting dropped connection: 192.168.0.2 connectionpool "GET /v2.0/users HTTP/1.1" 200 1161 session RESP: [200] content-length: 1161 vary: X-Auth-Token server: Apache connection: close date: Wed, 11 Nov 2015 13:25:30 GMT content-type: application/json x-openstack- request- id: req-a0926e60- 05ea-4c7a- a71f-694985fbdf a3 ebaf75da5dc0d8b 8a8"}, {"username": "heat-cfn", "name": "heat-cfn", "enabled": true, "email": "heat-cfn@ localhost" , "id": "119306c8dfb64c a5ba7961d74b470 838"}, {"username": "nova", "name": "nova", "enabled": true, "email": "nova@localhost", "id": "261ba0b6b05e4a 7381f12a0c4658d 2a0"}, {"username": "heat", "name": "heat", "enabled": true, "email": "heat@localhost", "id": "39807be3ba2f40 40ba912b36a6183 25b"}, {"username": "swift", "name": "swift", "enabled": true, "email": "swift@localhost", "id": "692bf1e5879c46 a897b840e220393 d0f"}, {"username": "cinder", "name": "cinder", "enabled": true, "email": "cinder@localhost", "id": "9042c9c4328f46 f4aa61096abacc8 2a9"}, {"username": "glance", "name": "glance", "enabled": true, "email": "glance@localhost", "id": "91b41373ef1548 6b977b8eec8f80b 1ad"}, {"username": "neutron", "name": "neutron", "enabled": true, "email": "neutron@ localhost" , "id": "bf0bf9258c1941 3e9529f1609082c 02c"}, {"username": "fuel_stats_user", "enabled": true, "name": "fuel_stats_user", "id": "d8633277c61e4f c783e37b0d3235b 769"}]}
INFO: urllib3.
DEBUG: urllib3.
DEBUG: keystoneclient.
RESP BODY: {"users": [{"username": "admin", "name": "admin", "enabled": true, "email": "admin@localhost", "id": "0750f721c8e049
+------ ------- ------- ------- ------- +------ ------- ----+ ------- ------- ------- ------- +------ ------- ----+ baf75da5dc0d8b8 a8 | admin | 5ba7961d74b4708 38 | heat-cfn | 381f12a0c4658d2 a0 | nova | 0ba912b36a61832 5b | heat | 897b840e220393d 0f | swift | 4aa61096abacc82 a9 | cinder | b977b8eec8f80b1 ad | glance | e9529f1609082c0 2c | neutron | 783e37b0d3235b7 69 | fuel_stats_user | ------- ------- ------- ------- +------ ------- ----+ .shell clean_up ListUser
| ID | Name |
+------
| 0750f721c8e049e
| 119306c8dfb64ca
| 261ba0b6b05e4a7
| 39807be3ba2f404
| 692bf1e5879c46a
| 9042c9c4328f46f
| 91b41373ef15486
| bf0bf9258c19413
| d8633277c61e4fc
+------
DEBUG: openstackclient