openstackclient auth problem in user list

asked 2017-01-23 12:59:55 -0600

nrey gravatar image

Hello, We have an Openstack installation running on 13.1.2 (Nova). Now I'm messing around with openstackclient to do some automation using Ansible, mostly for user creation.

I've managed to get it working as follows:

openstack --os-username nrey --os-password mypassw --os-tenant-id e211840000000000000  --os-project-domain-id 99064000000000000000 --os-identity-api-version 3 --os-auth-url

Commands like

server list

Works great! Giving me the entire list of servers that we have running now. Also most of the commands are running fine. Now for the user management that I'll looking into, I have a problem.

(openstack) user list
You are not authorized to perform the requested action: identity:list_users (HTTP 403) (Request-ID: req-753b457c-535a-4b49-b20a-8a40ab4113a0

And I don't know where the problem is. 'nrey' user has all the admin privileges, so I suppose there is no permissions problem.

Thank you!!

edit retag flag offensive close merge delete



Listing users and listing serves requires different credentials. Does user nrey have the admin role in the project and domain you provide?

It also seems to me that you have to provide user domain name or ID; see

Bernd Bausch gravatar imageBernd Bausch ( 2017-01-23 15:10:06 -0600 )edit

Hello Bernd, thanks for your fast reply!! yes, the user nrey have the admin role in the project AND in the domain. I'll take a look at the user domain name. Thanks again!

nrey gravatar imagenrey ( 2017-01-24 07:05:32 -0600 )edit

I've tried using user domain name / user domain id with no luck )-:

nrey gravatar imagenrey ( 2017-01-24 07:24:24 -0600 )edit