devstack keystone authentication

asked 2019-05-27 06:52:49 -0600

sanjay khuntia gravatar image

Hi openstack users, This is regarding authentication done in keystone V3 and V2 in devstack stein release. I have my devstack multi node set up using stein. I can also access horizon using the horizon url generated after installation.

I want to verify whether keystone authentication is happening successfully using version 3 and 2 in stein. I have checked the keystone logs on controller node when I access the horizon ui using-

#sudo journalctl -f -u devstack@k*

I can see the log lines generated for REQUEST_METHOD, SCRIPT_NAME, and PATH_INFO in keystone log.

How can I confirm that keystone is working fine doing authentication using v3 and v2 calls? Also how can I fallback to version 2 in stein to do the tests and what kind of cli/api calls needed to verify this that keystone is working fine with v2 also? Whether V2 is still supported in devstack Stein release as v3 is the default one?

thank you for your hints and replies.

best regards,

edit retag flag offensive close merge delete

1 answer

Sort by » oldest newest most voted

answered 2019-05-27 17:25:15 -0600

updated 2019-05-27 19:23:10 -0600

v2 doesn’t exist anymore in Stein. See

As of the Queens release, Keystone solely implements the Identity API v3. Support for Identity API v2.0 has been removed in Queens in favor of the Identity API v3.

Just run any openstack command to check authentication. If authentication doesn’t work, neither does the command.

To confirm deployed API versions, use the “naked”, unversioned, endpoint, e.g. curl http://IPADDRESS/identity.

edit flag offensive delete link more


Thank you Bernd... your answer resolved all my doubts on the latest keystone. best regards

sanjay khuntia gravatar imagesanjay khuntia ( 2019-05-28 00:44:07 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2019-05-27 06:52:49 -0600

Seen: 76 times

Last updated: May 27 '19