Hi
That's already the case:
keystone role-list
+----------------------------------+---------------+
| id | name |
+----------------------------------+---------------+
| 223b60435d5d48ed87b1f4ac3653878e | Admin |
| 8d4fd15146f14f24947b75758377572a | Member |
| a152ec644e04427da3cb2066152bdc47 | ResellerAdmin |
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
+----------------------------------+---------------+
keystone tenant-list
+----------------------------------+----------+---------+
| id | name | enabled |
+----------------------------------+----------+---------+
| 3082dd3bda20452bada5d23b95c50c05 | admin | True |
| 5e96512c96b842d6b245de103afab018 | services | True |
+----------------------------------+----------+---------+
keystone user-role-list --user admin --tenant admin
+----------------------------------+-------+----------------------------------+----------------------------------+
| id | name | user_id
| tenant_id |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 223b60435d5d48ed87b1f4ac3653878e | Admin |
cec3bf881d6e4d92b2fc552416d3da0a | 3082dd3bda20452bada5d23b95c50c05 |
+----------------------------------+-------+----------------------------------+----------------------------------+
keystone user-role-list --user admin --tenant services
+----------------------------------+-------+----------------------------------+----------------------------------+
| id | name | user_id
| tenant_id |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 223b60435d5d48ed87b1f4ac3653878e | Admin |
cec3bf881d6e4d92b2fc552416d3da0a | 5e96512c96b842d6b245de103afab018 |
+----------------------------------+-------+----------------------------------+----------------------------------+
Regards,
Hennie Marais
On 4 January 2016 at 15:41, Rahul Sharma <[email protected]> wrote:
> Please have that user with admin only access to all projects.
>
>
> ________________________________________
> From: Users <[email protected]> on behalf of Hennie Marais
> <[email protected]>
> Sent: Monday, January 4, 2016 7:00 PM
> To: [email protected]
> Subject: [Users] Can't login into Contrail WebUI
>
> Hi
>
> I'm trying to install and setup Contrail 2.21 in our lab, but I've hit
> a problem and don't know how to proceed from here.
>
> Our lab, at the moment, consists of an Ubuntu OpenStack setup (so
> multiple hosts deployed with MAAS and OpenStack deployed using Juju),
> with individual nodes for the different OpenStack services.
>
> I've been following the guide that can be found here:
> https://www.juniper.net/techpubs/en_US/contrail2.21/information-products/pathway-pages/getting-started-pwp.pdf
>
> The fab commands all finish just fine and the compute nodes come back
> up after their reboot. However, when I try to login to the Contrail
> WebUI with the admin user, I get this:
> https://i.imgur.com/RiQbAI0.png
>
> This is despite using the fact that I can log into the Horizon
> dashboard using the admin user, and that I can see in the
> contrail-webui-stdout.log log file that the system was able to
> authenticate against keystone:
> 2016-01-04T13:24:30.798Z - ESC[34mdebugESC[39m: After Successful auth
> def_token:{"token":{"issued_at":"2016-01-04T13:24:30.769642","expires":"2016-01-04T14:24:30Z","id":"25261cbea87045fea85a441f9ce99ab7","tenant":{"description":"Created
> by
> Juju","enabled":true,"id":"3082dd3bda20452bada5d23b95c50c05","name":"admin"},"audit_ids":["qSl1ai9BSZaTXyrsEfky6w"]},"serviceCatalog":[{"endpoints":[{"adminURL":"http://192.168.60.32:8774/v2/3082dd3bda20452bada5d23b95c50c05","region":"RegionOne","internalURL":"http://192.168.60.32:8774/v2/3082dd3bda20452bada5d23b95c50c05","id":"6bc9f1a37ce94f3186f92e75d167361d","publicURL":"https://ncc.wingu.lab:8774/v2/3082dd3bda20452bada5d23b95c50c05"}],"endpoints_links":[],"type":"compute","name":"nova"},{"endpoints":[{"adminURL":"http://192.168.60.32:9696","region":"RegionOne","internalURL":"http://192.168.60.32:9696","id":"52f564306479480b9b7429e80f061ec2","publicURL":"https://ncc.wingu.lab:9696"}],"endpoints_links":[],"type":"network","name":"quantum"},{"endpoints":[{"adminURL":"http://192.168.60.35:8776/v2/3082dd3bda20452bada5d23b95c50c05","region":"RegionOne","internalURL":"http://192.168.60.35:8776/v2/3082dd3bda20452bada5d23b95c50c05","id":"4e7723a6abfa47baa7db3a1e2b0690b2","publicURL":
"https://cinder.wingu.lab:8776/v2/3082dd3bda20452bada5d23b95c50c05"}],"endpoints_links":[],"type":"volumev2","name":"cinderv2"},{"endpoints":[{"adminURL":"http://192.168.60.32:3333","region":"RegionOne","internalURL":"http://192.168.60.32:3333","id":"1ba663c77f7e4383b5cb6b5a35209c4a","publicURL":"https://ncc.wingu.lab:3333"}],"endpoints_links":[],"type":"s3","name":"s3"},{"endpoints":[{"adminURL":"http://192.168.60.33:9292","region":"RegionOne","internalURL":"http://192.168.60.33:9292","id":"156a1c464de54f94851752e60cab6e32","publicURL":"https://glance.wingu.lab:9292"}],"endpoints_links":[],"type":"image","name":"glance"},{"endpoints":[{"adminURL":"http://192.168.60.37:8777","region":"RegionOne","internalURL":"http://192.168.60.37:8777","id":"83da2e7ee979474984ea0aa270696718","publicURL":"https://ceilometer.wingu.lab:8777"}],"endpoints_links":[],"type":"metering","name":"ceilometer"},{"endpoints":[{"adminURL":"http://192.168.60.40:8000/v1","region":"RegionOne","internalURL":"http://
192.168.60.40:8000/v1","id":"7c2532b1c69e4007ae354ffb5cc78283","publicURL":"https://heat.wingu.lab:8000/v1"}],"endpoints_links":[],"type":"cloudformation","name":"heat-cfn"},{"endpoints":[{"adminURL":"http://192.168.60.35:8776/v1/3082dd3bda20452bada5d23b95c50c05","region":"RegionOne","internalURL":"http://192.168.60.35:8776/v1/3082dd3bda20452bada5d23b95c50c05","id":"014083a7981d443597541c8aa59caabc","publicURL":"https://cinder.wingu.lab:8776/v1/3082dd3bda20452bada5d23b95c50c05"}],"endpoints_links":[],"type":"volume","name":"cinder"},{"endpoints":[{"adminURL":"http://192.168.60.32:8773/services/Cloud","region":"RegionOne","internalURL":"http://192.168.60.32:8773/services/Cloud","id":"2075d6c0b429462fab6bc4d7c6099390","publicURL":"https://ncc.wingu.lab:8773/services/Cloud"}],"endpoints_links":[],"type":"ec2","name":"ec2"},{"endpoints":[{"adminURL":"http://192.168.60.40:8004/v1/3082dd3bda20452bada5d23b95c50c05","region":"RegionOne","internalURL":"http://192.168.60.40:8004/v1/3082dd3bda
20452bada5d23b95c50c05","id":"05b147de25f74fcab68236e259a9fe56","publicURL":"https://heat.wingu.lab:8004/v1/3082dd3bda20452bada5d23b95c50c05"}],"endpoints_links":[],"type":"orchestration","name":"heat"},{"endpoints":[{"adminURL":"http://192.168.60.36:80/swift","region":"RegionOne","internalURL":"http://192.168.60.36:80/swift/v1","id":"81a89493a9f94f6ab4c4c9f84c99dc7f","publicURL":"https://radosgw.wingu.lab:80/swift/v1"}],"endpoints_links":[],"type":"object-store","name":"swift"},{"endpoints":[{"adminURL":"http://192.168.60.31:35357/v2.0","region":"RegionOne","internalURL":"http://192.168.60.31:5000/v2.0","id":"6fd33d0b6b2f4e8c90e3f2064a3ce40b","publicURL":"https://keystone.wingu.lab:5000/v2.0"}],"endpoints_links":[],"type":"identity","name":"keystone"}],"user":{"username":"admin","roles_links":[],"id":"cec3bf881d6e4d92b2fc552416d3da0a","roles":[{"name":"Admin"}],"name":"admin"},"metadata":{"is_admin":0,"roles":["223b60435d5d48ed87b1f4ac3653878e"]}}
> 2016-01-04T13:24:30.941Z - ESC[34mdebugESC[39m: Set authApiVersion:v2.0
>
> Any ideas what the problem can be and how to go about fixing it?
>
> Here is the contents of my testbed.py file (passwords and tokens
> starred out) in case it's needed:
> from fabric.api import env
>
> host1 = '[email protected]'
> host2 = '[email protected]'
> host3 = '[email protected]'
>
> ext_routers = [('mx1', '172.16.16.1'), ('mx2', '172.16.16.2'), ('mx3',
> '172.16.16.3'), ('mx4', '172.16.16.4')]
>
> router_asn = 64512
>
> host_build = '[email protected]'
>
> env.roledefs = {
> 'all': [host1, host2, host3],
> 'openstack': [host1],
> 'cfgm': [host1],
> 'control': [host1],
> 'compute': [host2, host3],
> 'collector': [host1],
> 'webui': [host1],
> 'database': [host1],
> 'build': [host_build],
> }
>
> env.hostnames = {
> 'all': ['compute01', 'compute02', 'contrail01']
> }
>
> env.openstack_admin_password = '*****'
>
> env.passwords = {
> host1: '*****',
> host2: '*****',
> host3: '*****',
> host_build: '*****',
> }
>
> env.ostypes = {
> host1: 'ubuntu',
> host2: 'ubuntu',
> host3: 'ubuntu',
> }
>
> env.keystone = {
> 'keystone_ip' : '192.168.60.31',
> 'auth_protocol' : 'http', #Default is http
> 'auth_port' : '35357', #Default is 35357
> 'admin_token' : '*****', #admin_token in keystone.conf
> 'admin_user' : 'admin', #Default is admin
> 'admin_password' : '*****', #Default is contrail123
> 'service_tenant' : 'services', #Default is service
> 'admin_tenant' : 'admin', #Default is admin
> 'region_name' : 'RegionOne', #Default is RegionOne
> 'insecure' : 'True', #Default = False
> 'manage_neutron' : 'no', #Default = 'yes' ,
> Does configure neutron user/role in keystone required.
> }
>
> env.openstack = {
> 'service_token' : '*****', #Common service token for for all
> openstack services
> 'amqp_host' : '192.168.60.177', #IP of AMQP Server to
> be used in openstack
> 'manage_amqp' : 'yes', #Default no, Manage
> seperate AMQP for openstack services in openstack nodes.
> }
>
> Regards,
> Hennie Marais
>
> _______________________________________________
> Users mailing list
> [email protected]
> http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org
_______________________________________________
Users mailing list
[email protected]
http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org
