On 12/12/16 19:05, Taisto Qvist wrote:
So this is unsupported then? Dashboard cant handle multiple domains?
TQ
2016-12-01 22:30 GMT+01:00 Taisto Qvist <taisto.qvist(a)gmail.com
<mailto:taisto.qvist@gmail.com>>:
I am not sure if I am trying something that shouldn't work (yet),
but I cant make horizon list all domains available for an admin
user, either in Newton or Mitaka, using latest centos/rdo-release repos.
I created
https://ask.openstack.org/en/question/99391/is-horizondashboard-not-fully...
<
https://ask.openstack.org/en/question/99391/is-horizondashboard-not-fully...
but hasnt got any answers, and now I tried with Newton with the same
results.
Horizon has a button for "Set Domain Context" which I have
understood as IF i set it, the listing of projects and users, will
be in that domain context. But its kind of difficult to use, since I
can never se any additional domains, apart from the domain of the
user that is logged into horizon.
I havent started using the domains-version of policy.json yet(since
then non domain-wide admin users cant even do "show" on their own
project/domain *name*), but I dont t h i n k that should be the
reason....?
If I had policy problems, surely dashboard would complain when
trying to list domains, if that was the issue, and NOT using the
domains-enabled policy file makes the admin role/rights "wider", not
more restrictive. Anyway, it is certainly quick to complain otherwise...
Do I need to run delorean repos?
Here is a link to the admin users("teacher") rights/roles, etc, if
that helps.
http://pastebin.com/KmKshF8P
Thankful for any help you can provide.
The tokens are scoped to a single domain. Horizons multi domain support
was a bit ancient in mitaka, I don't have an insight how that changed in
newton.
Unfortunately, terms are mixed and misused. What you get in Horizon is
not what keystone supports. (Horizon emulated multi domains by querying
multiple keystones).
--
Matthias Runge <mrunge(a)redhat.com>
Red Hat GmbH,
http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham,
Michael O'Neill, Eric Shander