Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-10 Thread Joseph Heck
Mathews Sent: Wednesday, May 09, 2012 4:34 PM To: Joshua Harlow Cc: openstack Subject: Re: [Openstack] Keystone client, user belongs to many tenants? The user create command is actually creating discrete users, each with a default tenant reference. While that's fine for a lot of simple

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-10 Thread Dolph Mathews
-bounces+guang.yee=hp@lists.launchpad.net] On Behalf Of Dolph Mathews Sent: Wednesday, May 09, 2012 4:34 PM To: Joshua Harlow Cc: openstack Subject: Re: [Openstack] Keystone client, user belongs to many tenants? The user create command is actually creating discrete users, each

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-10 Thread Lorin Hochstein
Harlow Cc: openstack Subject: Re: [Openstack] Keystone client, user belongs to many tenants? The user create command is actually creating discrete users, each with a default tenant reference. While that's fine for a lot of simple use cases, it doesn't directly support a user accessing

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-10 Thread Dolph Mathews
*To:* Joshua Harlow *Cc:* openstack *Subject:* Re: [Openstack] Keystone client, user belongs to many tenants?* *** ** ** The user create command is actually creating discrete users, each with a default tenant reference. ** ** While that's fine for a lot of simple use cases, it doesn't directly

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-10 Thread Duncan McGreggor
to Bud Selid. Guang From: openstack-bounces+guang.yee=hp@lists.launchpad.net [mailto:openstack-bounces+guang.yee=hp@lists.launchpad.net] On Behalf Of Dolph Mathews Sent: Wednesday, May 09, 2012 4:34 PM To: Joshua Harlow Cc: openstack Subject: Re: [Openstack] Keystone client, user

[Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Joshua Harlow
A question, I am using anvil to setup the keystone roles/users/tenants. It seems like the python keystone client has the following command: client.users.create Which seems to take in the following: create(self, name, password, email, tenant_id=None, enabled=True): I would assume a user name

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Joseph Heck
users are defined as globally unique in keystone what's anvil? -joe On May 9, 2012, at 1:46 PM, Joshua Harlow wrote: A question, I am using anvil to setup the keystone roles/users/tenants. It seems like the python keystone client has the following command: client.users.create

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Dolph Mathews
The user create command is actually creating discrete users, each with a default tenant reference. While that's fine for a lot of simple use cases, it doesn't directly support a user accessing multiple tenants at all. Instead, create a role, and grant that role to a user-tenant pair, creating

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Gabriel Hurley
[mailto:openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] On Behalf Of Joshua Harlow Sent: Wednesday, May 09, 2012 1:46 PM To: openstack Subject: [Openstack] Keystone client, user belongs to many tenants? A question, I am using anvil to setup the keystone roles/users/tenants. It seems like

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Lorin Hochstein
On May 9, 2012, at 4:46 PM, Joshua Harlow wrote: A question, I am using anvil to setup the keystone roles/users/tenants. It seems like the python keystone client has the following command: client.users.create Which seems to take in the following: create(self, name, password,

Re: [Openstack] Keystone client, user belongs to many tenants?

2012-05-09 Thread Yee, Guang
Subject: Re: [Openstack] Keystone client, user belongs to many tenants? The user create command is actually creating discrete users, each with a default tenant reference. While that's fine for a lot of simple use cases, it doesn't directly support a user accessing multiple tenants at all