Re: [openstack-dev] [keystone] Using 'admin_token' option as token to create keystone client.

2014-10-10 Thread Nader Lahouti
Thanks Lei. On Thu, Oct 9, 2014 at 6:52 PM, Lei Zhang zhang.lei@gmail.com wrote: Yes. That will be more safer. On Fri, Oct 10, 2014 at 12:00 AM, Nader Lahouti nader.laho...@gmail.com wrote: Thanks Lei for the reply and clarification. So, instead of that we can use the following:

Re: [openstack-dev] [keystone] Using 'admin_token' option as token to create keystone client.

2014-10-09 Thread Lei Zhang
it should works but it is not safe to use admin_token. Because * It is a admin token which has the full privilege for the keystone service * The token will be always valid till the admin_token in the conf file is changed. It is dangerous when the token leak. Suggest that the admin_token is only

Re: [openstack-dev] [keystone] Using 'admin_token' option as token to create keystone client.

2014-10-09 Thread Nader Lahouti
Thanks Lei for the reply and clarification. So, instead of that we can use the following: from keystone client.v2_0 import Client keystone = Client(username=user, password=password, tenant_name=tenant, auth_url=url) with user, password, tenant and url can be obtained from cfg.CONF. Thanks,

Re: [openstack-dev] [keystone] Using 'admin_token' option as token to create keystone client.

2014-10-09 Thread Lei Zhang
Yes. That will be more safer. On Fri, Oct 10, 2014 at 12:00 AM, Nader Lahouti nader.laho...@gmail.com wrote: Thanks Lei for the reply and clarification. So, instead of that we can use the following: from keystone client.v2_0 import Client keystone = Client(username=user, password=password,