| 2014-01-30 00:39:18 |
Sergii Kashaba |
bug |
|
|
added bug |
| 2014-01-30 00:56:56 |
Sergii Kashaba |
description |
I tried to run few commands with the keystone setup for V3 API
1. http://127.0.0.1:35357/v3 and http://127.0.0.1:5000/v3 as an endpoints for identity service
2. https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json as a policy.json for keystone
3. Created domain 'example'
4. Created project 'example_project' in 'example' domain
4. Added user 'example_admin' and assigned him with an admin for 'example' domain
Using recent fix for https://bugs.launchpad.net/python-openstackclient/+bug/1198171 I was able to get token with a domain level scope, but it's still impossible to run project list and user list commands.
The reason is that the only way to run those commands is to put '?domain_id=XXXXXXXXXXXXX' to the URL. There is no such an option for these operations.
Could we add parameter to specify query string to be used for final CURL?
Also this can be more general issue considering the search mechanism used when you pass project/user names instead uuids.
CLI commands that was run in order to prepare an environmen:
#create domain
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX domain create example
#here I create user in a default domain. Because an LDAP is using as a source for auth
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX user create --password qwerty example_admin
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX project create --domain example example_project
And finally try to get project list
openstack -vvv --debug --os-identity-api-version 3 --os-domain-name example --os-username example_admin --os-user-domain-name default --os-password qwerty project list
>>Forbidden: You are not authorized to perform the requested action, identity:list_projects.
#and finally the curl to get it using the token from the previous output
curl -s -H "X-Auth-Token: 0a60cdb2110f46258e6b021ede1bb781" http://127.0.0.1:5000/v3/projects?domain_id=dc1f1ef2055c41de8eacd4cdc4fa10e5 |
I tried to run few commands with the keystone setup for V3 API.
Setup description:
1. http://127.0.0.1:35357/v3 and http://127.0.0.1:5000/v3 as an endpoints for identity service
2. https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json as a policy.json for keystone
3. Created domain 'example'
4. Created project 'example_project' in 'example' domain
4. Added user 'example_admin' and assigned him with an admin for 'example' domain
Using recent fix for https://bugs.launchpad.net/python-openstackclient/+bug/1198171 I was able to get token with a domain level scope, but it's still impossible to run project list and user list commands.
The reason is that the only way to run those commands is to put '?domain_id=XXXXXXXXXXXXX' to the URL. There is no such an option for these operations.
Could we add parameter to specify query string to be used for final CURL?
Also this can be more general issue considering the search mechanism used when you pass project/user names instead uuids.
Steps:
CLI commands that was run in order to prepare an environmen:
#create domain
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX domain create example
#here I create user in a default domain. Because an LDAP is using as a source for auth
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX user create --password qwerty example_admin
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX project create --domain example example_project
And finally try to get project list
openstack -vvv --debug --os-identity-api-version 3 --os-domain-name example --os-username example_admin --os-user-domain-name default --os-password qwerty project list
>>Forbidden: You are not authorized to perform the requested action, identity:list_projects.
#and finally the curl to get it using the token from the previous output
curl -s -H "X-Auth-Token: 0a60cdb2110f46258e6b021ede1bb781" http://127.0.0.1:5000/v3/projects?domain_id=dc1f1ef2055c41de8eacd4cdc4fa10e5 |
|
| 2014-01-30 00:57:34 |
Sergii Kashaba |
description |
I tried to run few commands with the keystone setup for V3 API.
Setup description:
1. http://127.0.0.1:35357/v3 and http://127.0.0.1:5000/v3 as an endpoints for identity service
2. https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json as a policy.json for keystone
3. Created domain 'example'
4. Created project 'example_project' in 'example' domain
4. Added user 'example_admin' and assigned him with an admin for 'example' domain
Using recent fix for https://bugs.launchpad.net/python-openstackclient/+bug/1198171 I was able to get token with a domain level scope, but it's still impossible to run project list and user list commands.
The reason is that the only way to run those commands is to put '?domain_id=XXXXXXXXXXXXX' to the URL. There is no such an option for these operations.
Could we add parameter to specify query string to be used for final CURL?
Also this can be more general issue considering the search mechanism used when you pass project/user names instead uuids.
Steps:
CLI commands that was run in order to prepare an environmen:
#create domain
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX domain create example
#here I create user in a default domain. Because an LDAP is using as a source for auth
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX user create --password qwerty example_admin
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX project create --domain example example_project
And finally try to get project list
openstack -vvv --debug --os-identity-api-version 3 --os-domain-name example --os-username example_admin --os-user-domain-name default --os-password qwerty project list
>>Forbidden: You are not authorized to perform the requested action, identity:list_projects.
#and finally the curl to get it using the token from the previous output
curl -s -H "X-Auth-Token: 0a60cdb2110f46258e6b021ede1bb781" http://127.0.0.1:5000/v3/projects?domain_id=dc1f1ef2055c41de8eacd4cdc4fa10e5 |
I tried to run few commands with the keystone setup for V3 API.
Setup description:
0. Havana release.
1. http://127.0.0.1:35357/v3 and http://127.0.0.1:5000/v3 as an endpoints for identity service
2. https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json as a policy.json for keystone
3. Created domain 'example'
4. Created project 'example_project' in 'example' domain
4. Added user 'example_admin' and assigned him with an admin for 'example' domain
Using recent fix for https://bugs.launchpad.net/python-openstackclient/+bug/1198171 I was able to get token with a domain level scope, but it's still impossible to run project list and user list commands.
The reason is that the only way to run those commands is to put '?domain_id=XXXXXXXXXXXXX' to the URL. There is no such an option for these operations.
Could we add parameter to specify query string to be used for final CURL?
Also this can be more general issue considering the search mechanism used when you pass project/user names instead uuids.
Steps:
CLI commands that was run in order to prepare an environmen:
#create domain
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX domain create example
#here I create user in a default domain. Because an LDAP is using as a source for auth
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX user create --password qwerty example_admin
openstack --os-identity-api-version 3 --os-url http://127.0.0.1:35357/v3 --os-token XXXX project create --domain example example_project
And finally try to get project list
openstack -vvv --debug --os-identity-api-version 3 --os-domain-name example --os-username example_admin --os-user-domain-name default --os-password qwerty project list
>>Forbidden: You are not authorized to perform the requested action, identity:list_projects.
#and finally the curl to get it using the token from the previous output
curl -s -H "X-Auth-Token: 0a60cdb2110f46258e6b021ede1bb781" http://127.0.0.1:5000/v3/projects?domain_id=dc1f1ef2055c41de8eacd4cdc4fa10e5 |
|
| 2014-02-28 00:24:08 |
Priti Desai |
bug |
|
|
added subscriber Priti Desai |
| 2014-02-28 17:26:54 |
Dean Troyer |
python-openstackclient: status |
New |
Triaged |
|
| 2014-02-28 17:26:59 |
Dean Troyer |
python-openstackclient: importance |
Undecided |
Medium |
|
| 2014-04-01 16:05:54 |
Terry Howe |
summary |
CLI doesn't provide possibility to point query string |
CLI doesn't provide possibility to point query string v3 |
|
| 2014-09-06 05:05:33 |
Dean Troyer |
python-openstackclient: status |
Triaged |
Incomplete |
|
| 2014-09-06 05:06:08 |
Dean Troyer |
python-openstackclient: importance |
Medium |
Low |
|
| 2014-09-06 13:22:54 |
Sergii Kashaba |
python-openstackclient: status |
Incomplete |
Fix Released |
|
