Thanks a lot for the tip! Perhaps, "--os-url" is new parameter in *openstackclient *(can't remember it using in *keystoneclient*). By the way, a doc mentions that --os-url is a "URL to OpenStack service". Do they mean URL of the Nova API on controller node or something else, do you know?
On Mon, Jun 24, 2013 at 9:29 PM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) <mark.m.mil...@hp.com> wrote: > I struggled figuring out the v3 syntax myself. Here is the same command > in v2.0 and v3 format:**** > > ** ** > > openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url " > http://15.253.57.115:35357/v3"; --os-url "http://15.253.57.115:35357/v3"; > --log-file "/var/log/os.log" --os-identity-api-version 3 role list**** > > openstack --os-token 012345SECRET99TOKEN012345 --os-auth-url " > http://15.253.57.115:35357/v2.0"; --os-url "http://15.253.57.115:35357/v2.0"; > --log-file "/var/log/os.log" --os-identity-api-version 2.0 role list**** > > ** ** > > Mark**** > > ** ** > > ** ** > > *From:* Openstack [mailto:openstack-bounces+mark.m.miller= > hp....@lists.launchpad.net] *On Behalf Of *Ruslan Kiianchuk > *Sent:* Monday, June 24, 2013 11:09 AM > *To:* openstack@lists.launchpad.net > *Subject:* [Openstack] Keystone Identity API v3 interface**** > > ** ** > > Hello.**** > > ** ** > > I'm trying to exploit new features of Keystone Identity API v3 in Grizzly, > however I faced problems using* python-openstackclient*. If I specify to > use v3 API to the *openstackclient*, it still tries to obtain tokens > using v2.0 scheme and the server rejects such requests. So the first > problem is -- I couldn't set up* python-openstackclient *to work with > Identity API v3 (maybe any additional env variables or parameters need to > be passed?).**** > > ** ** > > I have also tried to talk with the API server using curl, but I couldn't > get detailed documentation on Identity v3 API. I found the draft API > description at > https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md > but > managed to only obtain token. Afterwards whatever request I do (get > .../v3/users > for example), I get 401 Unauthorized error from the server. The example > of a request I do:**** > > ** ** > > curl -i -H "Content-Type: application/json" -H "Accept: application/json" > -H "X-Auth-Token: ...<PKI token obtained from X-Subject-Token header at > /v3/auth/tokens/>..." http://localhost:5000/v3/users**** > > ** ** > > Could someone suggest the correct way of talking to Keystone Identity v3 > API? Either configuration/parameters for correct *openstackclient *usage > or plain curl requests would be highly appreciated.**** > > ** ** > > Thank you. > **** > > ** ** > > -- **** > > Sincerely, Ruslan Kiianchuk.**** > -- Sincerely, Ruslan Kiianchuk.
_______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
