Do you have multiple domains defined? I have first domain in sql backend and second one in ldap backend.
[root@juno1 ~(keystonev3_admin)]# cat keystonev3rc_admin export OS_IDENTITY_API_VERSION=3 export OS_AUTH_URL=http://9.167.185.90:5000/v3 export OS_PROJECT_DOMAIN_ID=default export OS_USER_DOMAIN_ID=default export OS_USERNAME=admin export OS_PROJECT_NAME=admin export OS_PASSWORD=***** export PS1='[\u@\h \W(keystonev3_admin)]\$ ' [root@juno1 ~(keystonev3_admin)]# openstack user list ERROR: openstack The request you have made requires authentication. (HTTP 401) [root@juno1 ~(keystonev3_admin)]# openstack user list --domain default +----------------------------------+---------+ | ID | Name | +----------------------------------+---------+ | 0261a5e2252d4778866209c4834a73ad | nova | | 0781c81c522642d689e3611a82ccb7f4 | neutron | | 93e2632af4fa4c6297ce34e6208b3038 | heat | | 965afb3c90304064b74cafdcc04647a4 | cinder | | c8ffb935e7f3495593ee73a1f1d3f17f | admin | | eec4197e03c842a2ae4c1176ee66540d | glance | +----------------------------------+---------+
I have to specify --domain parameter, even I have OS_USER_DOMAIN_ID exported. I don't know whether it's bug or feature in keystone.
Do you have multiple domains defined? I have first domain in sql backend and second one in ldap backend.
[root@juno1 ~(keystonev3_ admin)] # cat keystonev3rc_admin API_VERSION= 3 9.167.185. 90:5000/ v3 DOMAIN_ ID=default DOMAIN_ ID=default NAME=admin admin)] \$ ' admin)] # openstack user list admin)] # openstack user list --domain default ------- ------- ------- ------- +------ ---+ ------- ------- ------- ------- +------ ---+ 8866209c4834a73 ad | nova | 689e3611a82ccb7 f4 | neutron | 297ce34e6208b30 38 | heat | 4b74cafdcc04647 a4 | cinder | 593ee73a1f1d3f1 7f | admin | 2ae4c1176ee6654 0d | glance | ------- ------- ------- ------- +------ ---+
export OS_IDENTITY_
export OS_AUTH_URL=http://
export OS_PROJECT_
export OS_USER_
export OS_USERNAME=admin
export OS_PROJECT_
export OS_PASSWORD=*****
export PS1='[\u@\h \W(keystonev3_
[root@juno1 ~(keystonev3_
ERROR: openstack The request you have made requires authentication. (HTTP 401)
[root@juno1 ~(keystonev3_
+------
| ID | Name |
+------
| 0261a5e2252d477
| 0781c81c522642d
| 93e2632af4fa4c6
| 965afb3c9030406
| c8ffb935e7f3495
| eec4197e03c842a
+------
I have to specify --domain parameter, even I have OS_USER_DOMAIN_ID exported. I don't know whether it's bug or feature in keystone.