Re: [Openstack] Missing(?) keystone service catalog

2012-05-26 Thread Nick Lothian 
No, I have custom code running on Android, and I'm testing failures in
curl by copying the JSON and headers that are sent to a shell.

Nick

On Fri, May 25, 2012 at 9:54 PM, Jay Pipes jaypi...@gmail.com wrote:
 On 05/25/2012 05:48 AM, Nick Lothian wrote:

 In case anyone else is running into this problem: I was authenticating
 without using a tenant ID. This seems to work on some implementations
 (TryStack, Rackspace), but not in others (DevStack, HPCloud).


 Are you sure that your OS_TENANT_NAME or OS_TENANT_ID environment variables
 were not set when using TryStack? If you follow the tutorials that folks
 have put together on using it, you likely source'd an rc file that contained
 your tenant information (since all trystack users have a separate tenant)

 Best,
 -jay


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to     : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-25 Thread Nick Lothian 
In case anyone else is running into this problem: I was authenticating
without using a tenant ID. This seems to work on some implementations
(TryStack, Rackspace), but not in others (DevStack, HPCloud).


On Thu, May 3, 2012 at 2:08 PM, Nick Lothian nick.loth...@gmail.com wrote:
 I'm having some trouble using the Keystone API.

 When I run

 keystone --os_username=admin --os_password=password
 --os_auth_url=http://192.168.1.50:5000/v2.0/ service-list

 I get the following:

 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

 The resource could not be found.

    . (HTTP 404)


 The keystone log shows the following:

 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
 HTTP/1.1 404 176 0.008028


 Additionally, if I use curl to call the keystone API directly (as documented
 at http://keystone.openstack.org/api_curl_examples.html#id4) my whole
 serviceCatalog section is empty (serviceCatalog: {})

 I am using a default devstack installation.

 What am I missing?

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-25 Thread Jay Pipes 

On 05/25/2012 05:48 AM, Nick Lothian wrote:

In case anyone else is running into this problem: I was authenticating
without using a tenant ID. This seems to work on some implementations
(TryStack, Rackspace), but not in others (DevStack, HPCloud).


Are you sure that your OS_TENANT_NAME or OS_TENANT_ID environment 
variables were not set when using TryStack? If you follow the tutorials 
that folks have put together on using it, you likely source'd an rc file 
that contained your tenant information (since all trystack users have a 
separate tenant)


Best,
-jay

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-05 Thread Nick Lothian 
On Sat, May 5, 2012 at 12:57 AM, Dolph Mathews dolph.math...@gmail.com wrote:
 As a user with the admin role on
 35357: http://paste.openstack.org/raw/15160/


Thanks!

This works for me, mostly.

keystone --os_username=admin --os_password=password
--os_auth_url=http://192.168.1.50:35357/v2.0/ service-list
No handlers could be found for logger keystoneclient.v2_0.client
+--+--+-+-+
|id| name |   type  | description |
+--+--+-+-+
+--+--+-+-+

I don't understand why this is empty.

in /etc/keystone/keystone.conf I have:

[catalog]
template_file = /etc/keystone/default_catalog.templates
driver = keystone.catalog.backends.templated.TemplatedCatalog

Isn't the idea that it reads from the default_catalog.templates file?

That has entries like:

catalog.RegionOne.compute.publicURL = http://192.168.1.50:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.adminURL = http://192.168.1.50:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.internalURL =
http://192.168.1.50:8774/v2/$(tenant_id)s
catalog.RegionOne.compute.name = Compute Service

Why doesn't that show up?


 And then as joe on 5000: http://paste.openstack.org/raw/15161/


This does not work for me:

keystone --os_username=demo --os_password=password
--os_auth_url=http://192.168.1.50:5000/v2.0/ service-list
No handlers could be found for logger keystoneclient.v2_0.client
Unable to communicate with identity service: 404 Not Found

The resource could not be found.

   . (HTTP 404)


I appreciate all the help - I feel like I'm missing some critical
point that should be obvious!

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-04 Thread Dolph Mathews 
Replied inline.

On Thu, May 3, 2012 at 6:08 PM, Nick Lothian nick.loth...@gmail.com wrote:

 (Replying to list this time... Is there a reason why the reply-to isn't
 set to the list?!)

 Is this really the case? Why does service-list require the admin port?


GET /services requires admin privileges because it's really a CRUD
operation on a small portion of the service catalog equation. End users can
simply auth and get endpoints for the services they have access to.



 Running against TryStack (note that I don't supply a tenant):


I'm assuming your user account has a default tenant defined in keystone...
because you don't explicitly provide a tenant, keystone can assume you want
to use your default tenant, and provide the corresponding service catalog.
Alternatively, you can call GET /tenants,  select an alternative (if any),
and explicitly auth for another tenant.



 $ curl -k -X 'POST' -v https://nova-api.trystack.org:5443/v2.0/tokens -d
 '{aut
 h:{passwordCredentials:{username: username,
 password:password}}}' -H 'Content-type: application/json'


 {access: {token: {expires: 2012-05-04T23:01:56.797115, id:
 token, tenant: {id: tenant, name: username
 }}, serviceCatalog: [{endpoints: [{adminURL: 
 https://nova-api.trystack.or
 g:9774/v1.1/929, region: RegionOne, internalURL: 
 https://nova-api.trysta
 ck.org:9774/v1.1/tenent, publicURL: 
 https://nova-api.trystack.org:9774/v1.1/929
 }], type: compute, name: nova}, {endpoints: [{adminURL: 
 https://GL https://gl/
 ANCE_API_IS_NOT_DISCLOSED/v1.1/ tenent , region: RegionOne,
 internalURL: http
 s://GLANCE_API_IS_NOT_DISCLOSED/v1.1/ tenent , publicURL: 
 https://GLANCE_API_IS_N https://glance_api_is_n/
 OT_DISCLOSED/v1.1/ tenent }], type: image, name: glance},
 {endpoints: [{a
 dminURL: https://nova-api.trystack.org:5443/v2.0;, region:
 RegionOne, int
 ernalURL: https://keystone.thefreecloud.org:5000/v2.0;, publicURL:
 https://
 keystone.thefreecloud.org:5000/v2.0}], type: identity, name:
 keystone}]
 , user: {id: userid, roles: [{tenantId:  tenent , id: 2,
 name: Member
 }], name: username}}}

 On Fri, May 4, 2012 at 1:08 AM, Dolph Mathews dolph.math...@gmail.comwrote:

 service-list calls the admin API (port 35357), but the auth_url you
 provided was port 5000. I don't think the current keystoneclient is smart
 enough to try and switch to the correct endpoint. If you have an admin
 role, switching to port 35357 should work for you.

 Additionally, you won't get a service catalog without also providing a
 tenant, so that behavior is by design as well. Try --os_tenant_name or
 --os_tenant_id if using the client, or providing tenantName or tenantId
 in your auth object for curl.

 -Dolph

 On Wed, May 2, 2012 at 11:38 PM, Nick Lothian nick.loth...@gmail.comwrote:

 I'm having some trouble using the Keystone API.

 When I run

 keystone --os_username=admin --os_password=password --os_auth_url=
 http://192.168.1.50:5000/v2.0/ service-list

 I get the following:

 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

 The resource could not be found.

. (HTTP 404)


 The keystone log shows the following:

 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
 HTTP/1.1 404 176 0.008028


 Additionally, if I use curl to call the keystone API directly (as
 documented at http://keystone.openstack.org/api_curl_examples.html#id4)
 my whole serviceCatalog section is empty (serviceCatalog: {})

 I am using a default devstack installation.

 What am I missing?

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Rafael Durán Castañeda 

On 05/03/2012 06:38 AM, Nick Lothian wrote:

I'm having some trouble using the Keystone API.

When I run

keystone --os_username=admin --os_password=password 
--os_auth_url=http://192.168.1.50:5000/v2.0/ service-list


I get the following:

No handlers could be found for logger keystoneclient.v2_0.client
Unable to communicate with identity service: 404 Not Found

The resource could not be found.

   . (HTTP 404)


The keystone log shows the following:

(eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write 
192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services 
HTTP/1.1 404 176 0.008028



Additionally, if I use curl to call the keystone API directly (as 
documented at 
http://keystone.openstack.org/api_curl_examples.html#id4) my whole 
serviceCatalog section is empty (serviceCatalog: {})


I am using a default devstack installation.

What am I missing?


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp
I think DevStack is using TemplatedCatalog as catalog backend and it 
doesn't support CRUD. If you need CRUD operations you can use SQL backend.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Nick Lothian 
My /etc/keystone/keystone.conf says:

[catalog]
template_file = /etc/keystone/default_catalog.templates
# dynamic, sql-based backend (supports API/CLI-based management commands)
driver = keystone.catalog.backends.templated.TemplatedCatalog

(This is the default from devstack).

I did look at that, but made the mistake of assuming the comment was
correct and referred to the next line, especially since the next, commented
out entry said it was the file-based one. My mistake I guess - I'll try the
SQL one.

Shouldn't the API give a read-only view of the service catalog if CRUD
operations are unavailable?

On Thu, May 3, 2012 at 4:32 PM, Rafael Durán Castañeda 
rafadurancastan...@gmail.com wrote:

  On 05/03/2012 06:38 AM, Nick Lothian wrote:

 I'm having some trouble using the Keystone API.

  When I run

  keystone --os_username=admin --os_password=password --os_auth_url=
 http://192.168.1.50:5000/v2.0/ service-list

  I get the following:

  No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

  The resource could not be found.

 . (HTTP 404)


  The keystone log shows the following:

  (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
 HTTP/1.1 404 176 0.008028


  Additionally, if I use curl to call the keystone API directly (as
 documented at http://keystone.openstack.org/api_curl_examples.html#id4)
 my whole serviceCatalog section is empty (serviceCatalog: {})

  I am using a default devstack installation.

  What am I missing?


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

  I think DevStack is using TemplatedCatalog as catalog backend and it
 doesn't support CRUD. If you need CRUD operations you can use SQL backend.

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Dolph Mathews 
service-list calls the admin API (port 35357), but the auth_url you
provided was port 5000. I don't think the current keystoneclient is smart
enough to try and switch to the correct endpoint. If you have an admin
role, switching to port 35357 should work for you.

Additionally, you won't get a service catalog without also providing a
tenant, so that behavior is by design as well. Try --os_tenant_name or
--os_tenant_id if using the client, or providing tenantName or tenantId
in your auth object for curl.

-Dolph

On Wed, May 2, 2012 at 11:38 PM, Nick Lothian nick.loth...@gmail.comwrote:

 I'm having some trouble using the Keystone API.

 When I run

 keystone --os_username=admin --os_password=password --os_auth_url=
 http://192.168.1.50:5000/v2.0/ service-list

 I get the following:

 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

 The resource could not be found.

. (HTTP 404)


 The keystone log shows the following:

 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
 HTTP/1.1 404 176 0.008028


 Additionally, if I use curl to call the keystone API directly (as
 documented at http://keystone.openstack.org/api_curl_examples.html#id4)
 my whole serviceCatalog section is empty (serviceCatalog: {})

 I am using a default devstack installation.

 What am I missing?

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Adam Spiers 
Nick Lothian (nick.loth...@gmail.com) wrote:
 My /etc/keystone/keystone.conf says:
 
 [catalog]
 template_file = /etc/keystone/default_catalog.templates
 # dynamic, sql-based backend (supports API/CLI-based management commands)
 driver = keystone.catalog.backends.templated.TemplatedCatalog

[snipped]

 Shouldn't the API give a read-only view of the service catalog if CRUD
 operations are unavailable?

That's what I would have expected too.

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Joseph Heck 
The service-list should give you a list of the services in the catalog, driven 
by the template. What's in your catalog file at 
/etc/keystone/default_catalog.templates? It sounds like it's empty - that's 
what it's reading to report on services. You won't be able to use any of the 
add/remove CRUD operations unless you switch to the SQL based back-end, but 
service-list should do what you want.

When you did the curl, I assume you used the token retrieved from the admin 
user with the /tokens/{token_id}/endpoints call?

-joe

On May 3, 2012, at 2:54 AM, Nick Lothian wrote:

 My /etc/keystone/keystone.conf says:
 
 [catalog]
 template_file = /etc/keystone/default_catalog.templates
 # dynamic, sql-based backend (supports API/CLI-based management commands)
 driver = keystone.catalog.backends.templated.TemplatedCatalog
 
 (This is the default from devstack).
 
 I did look at that, but made the mistake of assuming the comment was correct 
 and referred to the next line, especially since the next, commented out entry 
 said it was the file-based one. My mistake I guess - I'll try the SQL one. 
 
 Shouldn't the API give a read-only view of the service catalog if CRUD 
 operations are unavailable?
 
 On Thu, May 3, 2012 at 4:32 PM, Rafael Durán Castañeda 
 rafadurancastan...@gmail.com wrote:
 On 05/03/2012 06:38 AM, Nick Lothian wrote:
 I'm having some trouble using the Keystone API.
 
 When I run 
 
 keystone --os_username=admin --os_password=password 
 --os_auth_url=http://192.168.1.50:5000/v2.0/ service-list
 
 I get the following:
 
 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found
 
 The resource could not be found.
 
. (HTTP 404)
 
 
 The keystone log shows the following:
 
 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write 
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services 
 HTTP/1.1 404 176 0.008028
 
 
 Additionally, if I use curl to call the keystone API directly (as documented 
 at http://keystone.openstack.org/api_curl_examples.html#id4) my whole 
 serviceCatalog section is empty (serviceCatalog: {})
 
 I am using a default devstack installation.
 
 What am I missing?
 
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp
 I think DevStack is using TemplatedCatalog as catalog backend and it doesn't 
 support CRUD. If you need CRUD operations you can use SQL backend.
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp
 
 
 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Nick Lothian 
(Replying to list this time... Is there a reason why the reply-to isn't set
to the list?!)

Is this really the case? Why does service-list require the admin port?

Running against TryStack (note that I don't supply a tenant):

$ curl -k -X 'POST' -v https://nova-api.trystack.org:5443/v2.0/tokens -d
'{aut
h:{passwordCredentials:{username: username,
password:password}}}' -H 'Content-type: application/json'


{access: {token: {expires: 2012-05-04T23:01:56.797115, id:
token, tenant: {id: tenant, name: username
}}, serviceCatalog: [{endpoints: [{adminURL: 
https://nova-api.trystack.or
g:9774/v1.1/929, region: RegionOne, internalURL: 
https://nova-api.trysta
ck.org:9774/v1.1/tenent, publicURL: 
https://nova-api.trystack.org:9774/v1.1/929
}], type: compute, name: nova}, {endpoints: [{adminURL: 
https://GL https://gl/
ANCE_API_IS_NOT_DISCLOSED/v1.1/ tenent , region: RegionOne,
internalURL: http
s://GLANCE_API_IS_NOT_DISCLOSED/v1.1/ tenent , publicURL: 
https://GLANCE_API_IS_N https://glance_api_is_n/
OT_DISCLOSED/v1.1/ tenent }], type: image, name: glance},
{endpoints: [{a
dminURL: https://nova-api.trystack.org:5443/v2.0;, region: RegionOne,
int
ernalURL: https://keystone.thefreecloud.org:5000/v2.0;, publicURL:
https://
keystone.thefreecloud.org:5000/v2.0}], type: identity, name:
keystone}]
, user: {id: userid, roles: [{tenantId:  tenent , id: 2,
name: Member
}], name: username}}}

On Fri, May 4, 2012 at 1:08 AM, Dolph Mathews dolph.math...@gmail.comwrote:

 service-list calls the admin API (port 35357), but the auth_url you
 provided was port 5000. I don't think the current keystoneclient is smart
 enough to try and switch to the correct endpoint. If you have an admin
 role, switching to port 35357 should work for you.

 Additionally, you won't get a service catalog without also providing a
 tenant, so that behavior is by design as well. Try --os_tenant_name or
 --os_tenant_id if using the client, or providing tenantName or tenantId
 in your auth object for curl.

 -Dolph

 On Wed, May 2, 2012 at 11:38 PM, Nick Lothian nick.loth...@gmail.comwrote:

 I'm having some trouble using the Keystone API.

 When I run

 keystone --os_username=admin --os_password=password --os_auth_url=
 http://192.168.1.50:5000/v2.0/ service-list

 I get the following:

 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

 The resource could not be found.

. (HTTP 404)


 The keystone log shows the following:

 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
 HTTP/1.1 404 176 0.008028


 Additionally, if I use curl to call the keystone API directly (as
 documented at http://keystone.openstack.org/api_curl_examples.html#id4)
 my whole serviceCatalog section is empty (serviceCatalog: {})

 I am using a default devstack installation.

 What am I missing?

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Missing(?) keystone service catalog

2012-05-03 Thread Nick Lothian 
/etc/keystone/default_catalog.templates looks like
https://github.com/openstack-dev/devstack/blob/master/files/default_catalog.templates
, with http://192.168.1.50 substituted for  %SERVICE_HOST%

My curl call uses the username  password, since it is to the /tokens URL:

curl -k -X 'POST' -v http://192.168.1.50:5000/v2.0/tokens -d
'{auth:{passwordCredentials:{username: admin,
password:password}}}' -H 'Content-type: application/json'

Returns:

{access: {token: {expires: 2012-05-05T00:11:03Z, id:
97d202e9c7af47dea4b0bc4dce02480e}, serviceCatalog: {}, user:
{username: admin, roles_links: [], id:
1a452182bec24b7f8ada531bdd2dc7f7, roles: [], name: admin}}}

(note the empty serviceCatalog entry)
Nick

On Fri, May 4, 2012 at 1:29 AM, Joseph Heck he...@me.com wrote:

 The service-list should give you a list of the services in the catalog, 
 driven by the template. What's in your catalog file at 
 /etc/keystone/default_catalog.templates? It sounds like it's empty - that's 
 what it's reading to report on services. You won't be able to use any of the 
 add/remove CRUD operations unless you switch to the SQL based back-end, but 
 service-list should do what you want.

 When you did the curl, I assume you used the token retrieved from the admin 
 user with the /tokens/{token_id}/endpoints call?

 -joe

 On May 3, 2012, at 2:54 AM, Nick Lothian wrote:

 My /etc/keystone/keystone.conf says:

 [catalog]
 template_file = /etc/keystone/default_catalog.templates
 # dynamic, sql-based backend (supports API/CLI-based management commands)
 driver = keystone.catalog.backends.templated.TemplatedCatalog

 (This is the default from devstack).

 I did look at that, but made the mistake of assuming the comment was correct 
 and referred to the next line, especially since the next, commented out entry 
 said it was the file-based one. My mistake I guess - I'll try the SQL one.

 Shouldn't the API give a read-only view of the service catalog if CRUD 
 operations are unavailable?

 On Thu, May 3, 2012 at 4:32 PM, Rafael Durán Castañeda 
 rafadurancastan...@gmail.com wrote:

 On 05/03/2012 06:38 AM, Nick Lothian wrote:

 I'm having some trouble using the Keystone API.

 When I run

 keystone --os_username=admin --os_password=password 
 --os_auth_url=http://192.168.1.50:5000/v2.0/ service-list

 I get the following:

 No handlers could be found for logger keystoneclient.v2_0.client
 Unable to communicate with identity service: 404 Not Found

 The resource could not be found.

    . (HTTP 404)


 The keystone log shows the following:

 (eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write 
 192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services 
 HTTP/1.1 404 176 0.008028


 Additionally, if I use curl to call the keystone API directly (as documented 
 at http://keystone.openstack.org/api_curl_examples.html#id4) my whole 
 serviceCatalog section is empty (serviceCatalog: {})

 I am using a default devstack installation.

 What am I missing?


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

 I think DevStack is using TemplatedCatalog as catalog backend and it doesn't 
 support CRUD. If you need CRUD operations you can use SQL backend.

 ___
 Mailing list: https://launchpad.net/~openstack
 Post to     : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp


 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Missing(?) keystone service catalog

2012-05-02 Thread Nick Lothian 
I'm having some trouble using the Keystone API.

When I run

keystone --os_username=admin --os_password=password --os_auth_url=
http://192.168.1.50:5000/v2.0/ service-list

I get the following:

No handlers could be found for logger keystoneclient.v2_0.client
Unable to communicate with identity service: 404 Not Found

The resource could not be found.

   . (HTTP 404)


The keystone log shows the following:

(eventlet.wsgi.server): 2012-05-03 14:03:12,840 DEBUG wsgi write
192.168.1.50 - - [03/May/2012 14:03:12] GET /v2.0/OS-KSADM/services
HTTP/1.1 404 176 0.008028


Additionally, if I use curl to call the keystone API directly (as
documented at http://keystone.openstack.org/api_curl_examples.html#id4) my
whole serviceCatalog section is empty (serviceCatalog: {})

I am using a default devstack installation.

What am I missing?
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp