Ask Your Question

why I cannot create user through openstack CLI

asked 2015-03-10 17:43:27 -0500

Scott Zhang gravatar image

does any of you know what should I use for "openstack user create" authentication? I can list users with "admin" username ( openstack --os-identity-api-version=3 user list --debug). However, I cannot create a user with the same user (admin) within the same project ( openstack user create --password 123 --project admin sanjose --os-identity-api-version=3 --debug). It says "Unauthorized: The request you have made requires authentication. " It seems to me the policy allows admin to create a new user ( "identity:create_user": "rule:admin_required" in "/opt/stack/keystone/etc/policy.json").Any suggestions on this error? Thanks a lot.

edit retag flag offensive close merge delete


Can you post the complete command that is not working with the env varaibles? (i.e) please post printenv | grep -i OS_

Haneef Ali gravatar imageHaneef Ali ( 2015-03-11 01:33:12 -0500 )edit

2 answers

Sort by ยป oldest newest most voted

answered 2015-03-11 03:44:26 -0500

Vinoth gravatar image

Check your source file. It should have following lines in it.

export OS_USERNAME=admin export

OS_PASSWORD=[***] export

OS_TENANT_NAME=admin export


Note:- OS_AUTH_URL should have 35357 as port which is used for admin role authentication.

edit flag offensive delete link more


Thanks for your answer. I figured this issue out myself. It seems like "domain" is required while creating a new user (with keystone api 3.0). However, it says optional in the tutorial.

Scott Zhang gravatar imageScott Zhang ( 2015-03-11 12:53:20 -0500 )edit

answered 2015-03-11 07:28:50 -0500

bbronstein gravatar image

can we safely assume you've sourced the keystonerc file?

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-03-10 17:43:27 -0500

Seen: 400 times

Last updated: Mar 11 '15