Hello, community! I'm trying to use Tempest to run tests on DevStack environment that is set up to use Identity API v3. Keystone uses policy.v3cloudsample.json<https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json> to enable domain and cloud admins. The environment itself works fine (VMs boot successfully, etc).
However when I run tempest, the api.identity.admin.v3 tests fail with error 403 forbidden which happens during policy enforcement: ====================================================================== FAIL: tempest.api.identity.admin.v3.test_tokens.UsersTestXML.test_tokens[gate,smoke] ---------------------------------------------------------------------- Traceback (most recent call last): _StringException: Empty attachments: stderr stdout pythonlogging:'': {{{ 2014-03-13 16:39:14,225 Request: POST http://127.0.0.1:5000/v2.0/tokens 2014-03-13 16:39:14,717 Response Status: 200 2014-03-13 16:39:14,718 Request: POST http://127.0.0.1:35357/v3/users 2014-03-13 16:39:14,736 Response Status: 403 }}} Traceback (most recent call last): File "/opt/stack/tempest/tempest/api/identity/admin/v3/test_tokens.py", line 37, in test_tokens email=u_email) File "/opt/stack/tempest/tempest/services/identity/v3/xml/identity_client.py", line 100, in create_user self.headers) File "/opt/stack/tempest/tempest/common/rest_client.py", line 302, in post return self.request('POST', url, headers, body) File "/opt/stack/tempest/tempest/services/identity/v3/xml/identity_client.py", line 80, in request body=body) File "/opt/stack/tempest/tempest/common/rest_client.py", line 436, in request resp, resp_body) File "/opt/stack/tempest/tempest/common/rest_client.py", line 478, in _error_checker raise exceptions.Unauthorized() Unauthorized: Unauthorized It seems that user credentials passed to policy engine do not contain domain_id for some reason. Has anyone faced similar problem or can point into the right direction for resolving this? Thank you. -- Sincerely, Ruslan Kiianchuk.
_______________________________________________ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev