Ask Your Question

Keystone v3 end-point

asked 2014-02-12 04:24:59 -0500

Y Sertdemir gravatar image


In my test environment, I installed havana following Ubuntu 12.04 guide. I am trying something to manage groups but asaik there is no keystone group-list commands in default install. I tried to use API commands but it gave me "code 401 Unauthroized" error. I realized that there is no "http://localhost:35357/v3/" end-point in keystone end-point list. I not sure that if I need to create a new end-point for v3 keystone or not. Do v2.0 and v3 works together or not?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2014-02-12 08:36:05 -0500

jpichon gravatar image

It's not planned for the keystone CLI tool to support v3 for shell commands, you should use the openstack common client instead.

See for more information on the client, and e.g. comment #2 with regard to v3 shell support in the keystoneclient.

edit flag offensive delete link more


In fact, I just want to enable v3 on my horizon dashboard, because I want to use groups. If there is no endpoint for keystone v3, I guess that Horizon uses v2 API commands.

Y Sertdemir gravatar imageY Sertdemir ( 2014-02-12 08:55:47 -0500 )edit

The library works with v3, and you can tell Horizon to use v3 by updating OPENSTACK_API_VERSIONS in the local settings, see (and restarting apache)

jpichon gravatar imagejpichon ( 2014-02-12 09:14:40 -0500 )edit

I enabled v3 in dashboard, but I cannot login anymore with admin or another user. It gives "An error occurred authenticating. Please try again later." in web page. In the apache logs, it says login failed for user. I also checked keystone logs: "Authorization failed. The request you have made requires authentication".

Y Sertdemir gravatar imageY Sertdemir ( 2014-02-12 09:47:50 -0500 )edit

Did you clear your cookies? Perhaps make sure that the OPENSTACK_KEYSTONE_URL points to v3 as well, this sounds like it could be related to .

jpichon gravatar imagejpichon ( 2014-02-12 10:32:19 -0500 )edit

OK I configured file to use v3 keystone and it works. I guess both OPENSTACK_API_VERSIONS and OPENSTACK_KEYSTONE_URL should be point to v3 endpoint. Thank you.

Y Sertdemir gravatar imageY Sertdemir ( 2014-02-13 06:47:28 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-02-12 04:24:59 -0500

Seen: 1,305 times

Last updated: Feb 12 '14