Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

can't use federated keystone token against other services

Hey I was testing keystone with federation in devstack, I successfully set it up with testshib idp and was able to get a federated token for a federated user(scoped either to a project or a domain depending on user's choice). But I have no idea how should I pass the token to other services. I suppose the token should work with keystoneclient session, by passing the token to keystoneclient.auth.identity.v3.Token and construct a session to pass to other services.

However it report error "user not found" (as the user does not exist in keystone db) What is the correct way to do it? Or is there somewhere in other services that I should customize?

can't use federated keystone token against other services

Hey I was testing keystone with federation in devstack, I successfully set it up with testshib idp and was able to get a federated token for a federated user(scoped either to a project or a domain depending on user's choice). choice).The token can be validated via keystone v3/auth/tokens api. But I have no idea how should I pass the token to other services.
I suppose the token should work with keystoneclient session, by passing the token to keystoneclient.auth.identity.v3.Token and construct a session to pass to other services.

However it report error "user not found" (as the user does not exist in keystone db) What is the correct way to do it? Or is there somewhere in other services that I should customize?

can't use federated keystone token against other services

Hey I was testing keystone with federation in devstack, I successfully set it up with testshib idp and was able to get a federated token for a federated user(scoped either to a project or a domain depending on user's choice).The token can be validated via keystone v3/auth/tokens api. I can also use project scoped token to call nova api like 'http://172.16.1.21:8774/v2/projec-id/flavors' to get flavor information. But I have no idea how should I pass the token to other services. services' clients.
I suppose the token should work with keystoneclient session, by passing the token to keystoneclient.auth.identity.v3.Token and construct a session to pass to other services.

However it report error "user not found" (as the user does not exist in keystone db) What is the correct way to do it? Or is there somewhere in other services that I should customize?

can't use federated keystone token against other services

Hey I was testing keystone with federation in devstack, I successfully set it up with testshib idp and was able to get a federated token for a federated user(scoped either to a project or a domain depending on user's choice).The token can be validated via keystone v3/auth/tokens api. I can also use project scoped token to call nova api like 'http://172.16.1.21:8774/v2/projec-id/flavors' to get flavor information. But I have no idea how should I pass the token to other services' clients. clients and openstack CLI
I suppose the token should work with keystoneclient session, by passing the token to keystoneclient.auth.identity.v3.Token and construct a session to pass to other services.

However it report error "user not found" (as the user does not exist in keystone db) What is the correct way to do it? Or is there somewhere in other services that I should customize?