V3Password as plugin auth doesn't work with kesytonemiddleware

[Haneef Ali]

My Configuration

[keystone_authtoken]
identity_uri = http://localhost:35357/
auth_section = v3password

[v3password]
auth_plugin = v3password
identity_uri = http://localhost:35357/
user-name = nova
user-domain-id = default
project-name = service
project-domain-id = default
password = DontTellAnyOne

Please have a look at this line
https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token.py#L1486

kwargs is never passed to the load pluggin, so it can't initialize.

Also even if we pass kwargs, not sure how it will work since all the arguments are not kwargs

https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/identity/v3.py#L212

[Jamie Lennox (jamielennox)]

So when defining options in a config file you need to use _ not -. AFAIK - is not a legal symbol in a config file.

Also the identity_uri in this case would need to have the /v3 url. The v2 and v3password plugins must point to the /v2.0 or /v3 endpoints. If you want to use the root url then you should use the straight password plugin.

In the line you point to regarding not passing kwargs, that is correct. At the moment you can only load plugins from the CONF object. We had expected this to allow us to deprecate passing options from paste, or instantiating AuthPlugin directly, this is unfortunately not going to happen, so we are looking into ways of being able to use plugins without using the CONF object.

[Haneef Ali (haneef)]

This is not a a defect and it works, but it still have couple more issues which I raised as a separate defect