Re: [Openstack] Keystone Identity API v3 interface
On Mon, Jun 24, 2013 at 2:00 PM, Ruslan Kiianchuk ruslan.kiianc...@gmail.com wrote: Perhaps, --os-url is new parameter in openstackclient (can't remember it using in keystoneclient). By the way, a doc mentions that --os-url is a URL keystoneclient uses --os-endpoint for the same thing. to OpenStack service. Do they mean URL of the Nova API on controller node or something else, do you know? It is the service URL that would have otherwise been obtained from the service catalog. In the library CLIs it is obvious how it is used but in openstackclient it must match the API supporting the command that you are using...i.e: openstack ... --os-url http://169.254.169.200:9292/ server list will fail as you are sending a compute API command to the (presumably from the port) image API endpoint. dt -- Dean Troyer dtro...@gmail.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Keystone Identity API v3 interface
Hello. I'm trying to exploit new features of Keystone Identity API v3 in Grizzly, however I faced problems using* python-openstackclient*. If I specify to use v3 API to the *openstackclient*, it still tries to obtain tokens using v2.0 scheme and the server rejects such requests. So the first problem is -- I couldn't set up* python-openstackclient *to work with Identity API v3 (maybe any additional env variables or parameters need to be passed?). I have also tried to talk with the API server using curl, but I couldn't get detailed documentation on Identity v3 API. I found the draft API description at https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md but managed to only obtain token. Afterwards whatever request I do (get .../v3/users for example), I get 401 Unauthorized error from the server. The example of a request I do: curl -i -H Content-Type: application/json -H Accept: application/json -H X-Auth-Token: ...PKI token obtained from X-Subject-Token header at /v3/auth/tokens/... http://localhost:5000/v3/users Could someone suggest the correct way of talking to Keystone Identity v3 API? Either configuration/parameters for correct *openstackclient *usage or plain curl requests would be highly appreciated. Thank you. -- Sincerely, Ruslan Kiianchuk. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone Identity API v3 interface
I struggled figuring out the v3 syntax myself. Here is the same command in v2.0 and v3 format: openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url http://15.253.57.115:35357/v3; --os-url http://15.253.57.115:35357/v3; --log-file /var/log/os.log --os-identity-api-version 3 role list openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url http://15.253.57.115:35357/v2.0; --os-url http://15.253.57.115:35357/v2.0; --log-file /var/log/os.log --os-identity-api-version 2.0 role list Mark From: Openstack [mailto:openstack-bounces+mark.m.miller=hp@lists.launchpad.net] On Behalf Of Ruslan Kiianchuk Sent: Monday, June 24, 2013 11:09 AM To: openstack@lists.launchpad.net Subject: [Openstack] Keystone Identity API v3 interface Hello. I'm trying to exploit new features of Keystone Identity API v3 in Grizzly, however I faced problems using python-openstackclient. If I specify to use v3 API to the openstackclient, it still tries to obtain tokens using v2.0 scheme and the server rejects such requests. So the first problem is -- I couldn't set up python-openstackclient to work with Identity API v3 (maybe any additional env variables or parameters need to be passed?). I have also tried to talk with the API server using curl, but I couldn't get detailed documentation on Identity v3 API. I found the draft API description at https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md but managed to only obtain token. Afterwards whatever request I do (get .../v3/users for example), I get 401 Unauthorized error from the server. The example of a request I do: curl -i -H Content-Type: application/json -H Accept: application/json -H X-Auth-Token: ...PKI token obtained from X-Subject-Token header at /v3/auth/tokens/... http://localhost:5000/v3/users Could someone suggest the correct way of talking to Keystone Identity v3 API? Either configuration/parameters for correct openstackclient usage or plain curl requests would be highly appreciated. Thank you. -- Sincerely, Ruslan Kiianchuk. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone Identity API v3 interface
Thanks a lot for the tip! Perhaps, --os-url is new parameter in *openstackclient *(can't remember it using in *keystoneclient*). By the way, a doc mentions that --os-url is a URL to OpenStack service. Do they mean URL of the Nova API on controller node or something else, do you know? On Mon, Jun 24, 2013 at 9:29 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: I struggled figuring out the v3 syntax myself. Here is the same command in v2.0 and v3 format: ** ** openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url http://15.253.57.115:35357/v3; --os-url http://15.253.57.115:35357/v3; --log-file /var/log/os.log --os-identity-api-version 3 role list openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url http://15.253.57.115:35357/v2.0; --os-url http://15.253.57.115:35357/v2.0; --log-file /var/log/os.log --os-identity-api-version 2.0 role list ** ** Mark ** ** ** ** *From:* Openstack [mailto:openstack-bounces+mark.m.miller= hp@lists.launchpad.net] *On Behalf Of *Ruslan Kiianchuk *Sent:* Monday, June 24, 2013 11:09 AM *To:* openstack@lists.launchpad.net *Subject:* [Openstack] Keystone Identity API v3 interface ** ** Hello. ** ** I'm trying to exploit new features of Keystone Identity API v3 in Grizzly, however I faced problems using* python-openstackclient*. If I specify to use v3 API to the *openstackclient*, it still tries to obtain tokens using v2.0 scheme and the server rejects such requests. So the first problem is -- I couldn't set up* python-openstackclient *to work with Identity API v3 (maybe any additional env variables or parameters need to be passed?). ** ** I have also tried to talk with the API server using curl, but I couldn't get detailed documentation on Identity v3 API. I found the draft API description at https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md but managed to only obtain token. Afterwards whatever request I do (get .../v3/users for example), I get 401 Unauthorized error from the server. The example of a request I do: ** ** curl -i -H Content-Type: application/json -H Accept: application/json -H X-Auth-Token: ...PKI token obtained from X-Subject-Token header at /v3/auth/tokens/... http://localhost:5000/v3/users ** ** Could someone suggest the correct way of talking to Keystone Identity v3 API? Either configuration/parameters for correct *openstackclient *usage or plain curl requests would be highly appreciated. ** ** Thank you. ** ** -- Sincerely, Ruslan Kiianchuk. -- Sincerely, Ruslan Kiianchuk. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
