VMware Cloud Community
dalo
Hot Shot
Hot Shot
Jump to solution

viocli inventory-admin and admin user in default domain

I'm trying to use the "viocli inventory-admin show-instances" command, but after the password it fails with: "viocli operation failed: Unable to authorize with keystone: The request you have made requires authentication."

In the keystone.log I found the entry: "...Could not find user: admin..."

It seems that the command tries to authenticate to the default domain, but there is no user "admin"

(openstack) user list --domain default

+--------------+----------------------+

| ID           | Name                 |

+--------------+----------------------+

| user1        | user1@mydomain       |

| user2        | user2@mydomain       |


but the Documentation says:

"For convenience, the admin user is also available on the Default domain."

What's wrong here?

Reply
0 Kudos
22 Replies
admin
Immortal
Immortal
Jump to solution

Hi Daniel,

seriously I hope that whit the following hits I can help you Smiley Happy

According with the documentation:

https://docs.vmware.com/en/VMware-Integrated-OpenStack/3.1/com.vmware.openstack.admin.doc/GUID-01B13...

and

https://docs.vmware.com/en/VMware-Integrated-OpenStack/3.1/com.vmware.openstack.admin.doc/GUID-E9610...

I was able to run "viocli inventory-admin show-instances" command.

In order to run the above command, I created the following credentials and project:

openstack --os-identity-api-version 3 --os-username admin --os-user-domain-name local --os-project-name admin --os-password PASSWORD --os-region-name nova project create --domain default --description "Demo Project" --or-show demo

+-------------+----------------------------------+

| Field       | Value                            |

+-------------+----------------------------------+

| description | Demo Project                     |

| domain_id   | default                          |

| enabled     | True                             |

| id          | f65c429620fb4b58a13b5b2851a486c5 |

| is_domain   | False                            |

| name        | demo                             |

| parent_id   | default                          |

+-------------+----------------------------------+

openstack --os-identity-api-version 3 --os-username admin --os-user-domain-name local --os-project-name admin --os-password PASSWORD --os-region-name nova role add --project demo --project-domain default --user niko@DOMAIN --user-domain default admin

using the following rc file:

#!/usr/bin/env bash

export OS_USERNAME="niko@DOMAIN"

export OS_PASSWORD="PASSWORD"

export OS_TENANT_NAME="demo"

export OS_USER_DOMAIN_NAME="default"

export OS_AUTH_URL=http://INTERNAL_VIP:35357/v3

export OS_ENDPOINT_TYPE="internalURL"

export VCENTER_USERNAME=administrator@vsphere.local

export VCENTER_PASSWORD="PASSWORD"

export VCENTER_HOSTNAME="HOST.DOMAIN"

export VCENTER_INSECURE="true"

Let me know if it helps.

Cheers,

Domenico

Reply
0 Kudos
dalo
Hot Shot
Hot Shot
Jump to solution

yeah, that was it!

I made now also a new demo project, assigned a AD user and tried the viocli again, and it works!

I've to look why this wasn't working as "admin" and "admin" tenant maybe some permissin issue.

Thank you so much for helping me!

Cheers

Daniel

Reply
0 Kudos
admin
Immortal
Immortal
Jump to solution

good! so happy for this!

Cheers,

Domenico

Reply
0 Kudos