Ask Your Question
0

I'm using keystoneclient in Nova API and got the error: AuthorizationFailure: Current authorization does not have a known management url

asked 2014-04-09 11:48:31 -0500

afaranha gravatar image

2014-04-09 16:41:57.331 TRACE nova.api.openstack keystone_client.users.list()

2014-04-09 16:41:57.331 TRACE nova.api.openstack File "/opt/stack/python-keystoneclient/keystoneclient/v2_0/users.py", line 119, in list

2014-04-09 16:41:57.331 TRACE nova.api.openstack return self._list("/users%s" % query, "users")

2014-04-09 16:41:57.331 TRACE nova.api.openstack File "/opt/stack/python-keystoneclient/keystoneclient/base.py", line 106, in _list

2014-04-09 16:41:57.331 TRACE nova.api.openstack resp, body = self.client.get(url)

2014-04-09 16:41:57.331 TRACE nova.api.openstack File "/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 590, in get

2014-04-09 16:41:57.331 TRACE nova.api.openstack return self._cs_request(url, 'GET', **kwargs)

2014-04-09 16:41:57.331 TRACE nova.api.openstack File "/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 587, in _cs_request

2014-04-09 16:41:57.331 TRACE nova.api.openstack 'Current authorization does not have a known management url')

2014-04-09 16:41:57.331 TRACE nova.api.openstack AuthorizationFailure: Current authorization does not have a known management url

I already read this https://bugs.launchpad.net/python-keystoneclient/+bug/1175833 (https://bugs.launchpad.net/python-key...) , but I still have the problem. I instantiating keystone in this way:

from keystoneclient import client

keystone_client = client.Client(token=context.auth_token, endpoint=auth_url, auth_url=auth_url)

And I don't think it's permission problem because I'm getting an admin token (admin user for admin project).

edit retag flag offensive close merge delete

Comments

When I use V3 keystone it works fine. I'll work with that but I don't if I should enable to work with V2 also.

this: from keystoneclient.v3 import client instead of this: from keystoneclient import client

afaranha gravatar imageafaranha ( 2014-04-09 13:06:38 -0500 )edit

In order to test a new Nova API functionality I need to add it in etc/policy.json AND ALSO in tests/fake_policy.

afaranha gravatar imageafaranha ( 2014-04-11 06:26:27 -0500 )edit

2 answers

Sort by ยป oldest newest most voted
0

answered 2014-04-09 12:32:28 -0500

afaranha gravatar image

Yes it have, my catalog list is the following:


{'endpoints': [

{'url': 'http://10.1.0.32:35357/v2.0', 'interface': 'admin', 'region': 'RegionOne', 'id': '3d715c057e9f43818f21b2f175a77299'},

{'url': 'http://10.1.0.32:5000/v2.0', 'interface': 'internal', 'region': 'RegionOne', 'id': 'b5cfe408a96145fb9207e449fce1115a'},

{'url': 'http://10.1.0.32:5000/v2.0', 'interface': 'public', 'region': 'RegionOne', 'id': 'd148c635fc504f0cb76793a2293726c0'}

],

'type': 'identity', 'id': '74eabcc634094124a664444401d497ca', 'name': 'keystone'}


I have the admin interface, but when I get the token I get using the public interface. Thank you.

edit flag offensive delete link more
0

answered 2014-04-09 12:17:12 -0500

updated 2014-04-09 12:55:01 -0500

Does your service catalog have an url of type "admin" ? Can you please check the endpoints table?

edit flag offensive delete link more

Comments

Actually I can do the following: "keystone_client.users" and don't get any errors message, but when I do: "keystone_client.users.list()" I get the error.

afaranha gravatar imageafaranha ( 2014-04-09 12:42:24 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2014-04-09 11:48:31 -0500

Seen: 385 times

Last updated: Apr 09 '14