domain admin can't list projects in its own domain using CLI

[Yaguang Tang]

with domain credentials

azureuser@devstack:/opt/stack/python-openstackclient$ openstack project list --domain 16c14541fbb04e9fbfc358d98e0e4535
INFO: urllib3.connectionpool Starting new HTTP connection (1): localhost
INFO: urllib3.connectionpool Starting new HTTP connection (1): 172.16.0.5
ERROR: cliff.app 'NoneType' object has no attribute 'id'

openstackclient try to check if domain exists but domain admin isn't allowed to call get domain api

[Terry Howe (thowe-g)]

stack trace with the old --debug option would help. I'm trying to fix my devstack now.

[Terry Howe (thowe-g)]

My creds are admin and this command works fine for me:

(.venv)terry@brat:~/hp/python-openstackclient$ os project list --domain 8c45bf2c13ef4bcca0c671c2adf7e751
+----------------------------------+--------------+
| ID | Name |
+----------------------------------+--------------+
| 144806f06e5741819fc58dafc1ce004f | project_foot |
+----------------------------------+--------------+

What creds are you using? A --debug option would be useful to be sure, but I assume the exception is at:

https://github.com/openstack/python-openstackclient/blob/master/openstackclient/identity/v3/project.py#L162

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/96836

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/96836
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=b6384886973c652c0161a9caeac6f31066edace1
Submitter: Jenkins
Branch: master

commit b6384886973c652c0161a9caeac6f31066edace1
Author: Terry Howe <email address hidden>
Date: Fri May 30 10:38:20 2014 -0600

    Domain administrator cannot do project operations

    Domain administrator cannot do project operations because the
    require access to the domain API (which they don't have). When
    attempting to find a domain for project operations, ignore errors
    because the API returns nothing without indicating there is a
    problem. The domain administrators will have to use a domain id,
    but they will still be able to do project operations. If the user
    does not have permission to read the domain table, they cannot
    use domain names.

    Change-Id: Ieed5d420022a407c8296a0bb3569d9469c89d752
    Closes-Bug: #1317478
    Closes-Bug: #1317485