To answer the second half of your question:
keystoneclient cli does not support list-roles-for-user
https://bugs.launchpad.net/keystone/+bug/932282
On Thu, Mar 8, 2012 at 4:46 PM, Jason Hedden <jhed...@mcs.anl.gov> wrote:
> It seems a little odd that the mapping of users to roles is stored
> in a python dictionary within a SQL table. With this data structure it
> would be more efficient and flexible if the data was stored in a table
> similarly to the previous version of Keystone. Why not let the database do
> its job?
>
> You can view a snippet of the Keystone metadata table @
> http://paste.openstack.org/show/7552/
>
> I came across this while trying to list the roles assigned to users, which
> I still don't know how to do via the keystone client utility. Is this even
> possible?
>
> Jason Hedden
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
