Ask Your Question

Horizon vs CLI passing tokens to user

asked 2017-06-29 08:20:11 -0500

Della gravatar image

Hello all. I've been trying to research and learn more about OpenStack, but I'm having trouble finding an answer to this one question online.

When is the token passed directly to the user? I believe Horizon passes the user a token ID, but what happens when you ssh in and use the command line?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2017-06-29 10:10:55 -0500

Bernd Bausch gravatar image

Normally, each time you issue a CLI command, a new token is issued. You can see the calls to Keystone when setting the --debug option.

Alternatively, you can issue a token with openstack token issue and use it with the --os-token option. Conceptually, this is what Horizon does: Obtain a token and use it until it expires.

edit flag offensive delete link more


Thanks for your answer! I was just confused, does Horizon give the token to the user? What I mean is, when I was looking through a tcpdump captured when a user logs in to Horizon, the token was passed between OS services, but never to the user. Does Horizon give the user a session ID or something?

Della gravatar imageDella ( 2017-06-29 13:02:22 -0500 )edit

I don't think that Horizon passes the token to the user. It's more likely that it's stored in session information. Unfortunately I am not very knowlegeable in this area.

Bernd Bausch gravatar imageBernd Bausch ( 2017-06-30 18:34:10 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2017-06-29 08:20:11 -0500

Seen: 33 times

Last updated: Jun 29