Re: [Openstack] [Keystone] List group members with policy.v3cloudsample.json

2016-08-08 Thread 林自均
Hi all, I found this issue was fixed by https://bugs.launchpad.net/keystone/+bug/1433402. Thanks. John Eugen Block 於 2016年8月4日 週四 下午9:20寫道: > I just tried to reproduce that with a test domain, but I didn't get > any errors. Did you make sure that your environment script uses the > right creden

Re: [Openstack] [Keystone] List group members with policy.v3cloudsample.json

2016-08-04 Thread Eugen Block
I just tried to reproduce that with a test domain, but I didn't get any errors. Did you make sure that your environment script uses the right credentials for (user)domain scope? I had my share with them a couple of times... Zitat von 林自均 : Hi Eugen, I have no problem with the cloud admi

Re: [Openstack] [Keystone] List group members with policy.v3cloudsample.json

2016-08-04 Thread 林自均
Hi Eugen, I have no problem with the cloud admin, so I guess your workaround doesn't work for me. What disturbing me is the unexpected behavior of the domain admin. John Eugen Block 於 2016年8月4日 週四 下午3:34寫道: > Hi, > > I had a similar issue recently [1], I had to adjust my policy file > because

Re: [Openstack] [Keystone] List group members with policy.v3cloudsample.json

2016-08-04 Thread Eugen Block
Hi, I had a similar issue recently [1], I had to adjust my policy file because for some reason "domain_id:default" was not applied, instead I use "user_domain_id:default" which works fine now. ---cut here--- control1:~ # grep "\"cloud_admin\":" /etc/keystone/policy.json "cloud_admin": "

[Openstack] [Keystone] List group members with policy.v3cloudsample.json

2016-08-03 Thread 林自均
Hi all, My OpenStack version is Mitaka. I updated my /etc/keystone/policy.json to policy.v3cloudsample.json . Most functions works as expected. However, when I wanted to list members in a group as a domain admin, an