Openstack API Authentication

Question

Openstack noob here. I have setup an Ubuntu VM with DevStack, and am trying to authenticate with Keystone to obtain a token to be used for subsequent Openstack API calls. The identity endpoint shown on the “API Access” page in Horizon is: http://<DEVSTACK_IP>/identity.

When I post the below JSON payload to this endpoint, I get the error get_version_v3() got an unexpected keyword argument 'auth’.

{
    "auth": {
        "identity": {
            "methods": [
                "password"
            ],
            "password": {
                "user": {
                    "name": "admin",
                    "domain": {
                        "name": "Default"
                    },
                    "password": “AdminPassword”
                }
            }
        }
    }
}

Based on the Openstack docs, I should be hitting http://<DEVSTACK_IP>/v3/auth/tokens to obtain a token, but when I hit that endpoint, I get 404 Not Found.

I'm currently using Postman for testing this, but will eventually be doing programmatically.

Does anybody have any experience with authenticating against the Openstack API that can help?

After installing Devstack, you should see a file (openrc). You have to source the file and run the OpenStack commands. — Tejaswi
Do I source the file as "stack" user? Which openstack commands do I run after that? — grizzthedj

Lucas H. Xu Lucas H. Xu · Accepted Answer · 2017-09-28T16:29:21

Not sure whether you want to do it in a python way, but if you do, here is a way to do it:

from keystoneauth1.identity import v3
from keystoneauth1 import session

v3_auth = v3.Password(auth_url=V3_AUTH_URL,
                      username=USERNAME,
                      password=PASSWORD,
                      project_name=PROJECT_NAME,
                      project_domain_name="default",
                      user_domain_name="default")

v3_ses = session.Session(auth=v3_auth)
auth_token = v3_ses.get_token()

And you V3_AUTH_URL should be http://<DEVSTACK_IP>:5000/v3 since keystone is using port 5000 as a default.

If you do have a multi-domain devstack, you can change the domains, otherwise, they should be default

Just in case you don't have the client library installed: pip install python-keystoneclient

Here is a good doc for you to read about it: https://docs.openstack.org/keystoneauth/latest/using-sessions.html

HTH

Openstack API Authentication

1 Answers