Comment 0 for bug 1198171

Revision history for this message
Evgeniy Afonichev (eafonichev) wrote :

Here's steps to reproduce
1) Set up keystone endpoints to v3
2) openstack --os-identity-api-version 3 domain create mydomain
3) openstack --os-identity-api-version 3 project create myproject --domain mydomain
4) openstack --os-identity-api-version 3 user create myuser --password test --domain mydomain
5) As I don't know how to grant user via openstack cli, I used v2 alternative
keystone --os-token ... --os-endpoint http://172.18.194.178:35357/v2.0 user-role-add --user myuser --tenant mytenant --role Member
6) openstack --os-identity-api-version 3 --os-username myuser --os-tenant-name myproject --os-password test user list
ERROR: cliff.app Could not find project: myproject (HTTP 401)

If I add user to tenant from default domain and try to authenticate again
openstack --os-identity-api-version 3 --os-username myuser --os-tenant-name demo --os-password test user list
ERROR: cliff.app Could not find user: myuser (HTTP 401)

Well, looking at the code I see that user is searched within default domain, not mydomain