Ask Your Question

neutron + keystone v3

asked 2015-02-17 09:23:38 -0500

dodo gravatar image


We have a Juno deployment (test environment, but set up manually according to the documentation, not devstack)

Before we had set it up with keystone v2, then after a while i saw a comment in some documentation that is it deprecated and v3 should be used instead.

Everything went fine up until Neutron. It seems to have support for keystone v3 in the cli/shell client, but not sure about the actual python libs.

Basically we were trying setting auth_version to v3.0 as for the other services, but based on our debug info, it is still using the v2 way of authentication OR we are missing something obvious.

The information regarding this seems to be very scarse and we can't find a definitive answer: does neutron support keystone v3 auth?

i looked into git history and i found this commit: ( Which supposedly adds keystone v3 auth support, but most of the code has been rewritten, based on later commits and most of the code is in, leaving the in almost the same state as before.

Our current issue relating to this is that neutron doesn't see users in other domains besides Default ( also we have questions about the policies, but that's later )

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2015-02-17 21:56:31 -0500

Neutron and all the openstack services supports v3 auth. (i.e) If you get a v3 token and send it to neutron, it will work properly.

What you are trying to do is to make the service token use v3 auth. Service token being v2 or v3 doesn't matter unless keystone fully removes v2 support. You can make service token v3 only if you use upstream keystone middleware ( top of branch) or keystonemiddleware 1.3.X , Juno version won't work.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-02-17 09:23:38 -0500

Seen: 846 times

Last updated: Feb 17 '15