Hi,

I've managed to enable multi-domain support for my Mitaka environment, but there are still some things to configure properly. I have two questions regarding domains.

Log in as admin under the default domain, go to the Domains dashboard

1. How can I enable the domain view in Horizon? I can't see that tab in the dashboard, I'm not sure where to look anymore.

2. Has anyone a working separation of cloud_admin and domain_admin? I used the v3-policy file mentioned in the last response, changed the admin_domain_id to default as suggested, updated the keystone endpoints to v3, but now I can't execute some actions like list projects, list users etc. The logs say

You are not authorized to perform the requested action: identity:list_domains

So I take a look into the policy.json:

    "cloud_admin": "rule:admin_required and domain_id:default",
    "identity:list_domains": "rule:cloud_admin"

As far as I understand, I assigend the domain "default" to cloud_admin, so I assume that I should be able to list domains, projects etc. Until now I simply used the default config files for identity, can anyone advise how to configure that file properly?

Regards,
Eugen


Zitat von Brad Pokorny <brad_poko...@symantec.com>:

1. Yes, you can create new users in the "labA" domain via Horizon. Log in as admin under the default domain, go to the Domains dashboard, and click the "Set Domain Context" button for the "labA" domain. Then when you go back to the create user workflow, the "labA" domain will be automatically filled in for the user. 2. Go to the Domains tab, click the "Set Domain Context" button for the other domain, and go back to the Users dashboard.

If you later need to think about using a domain admin via Horizon, take a look at this blog post: http://www.symantec.com/connect/blogs/domain-support-horizon-here

Thanks,
Brad

From: zhihao wang <wangzhihao...@hotmail.com<mailto:wangzhihao...@hotmail.com>>
Date: Tuesday, May 31, 2016 at 8:40 AM
To: "openstack@lists.openstack.org<mailto:openstack@lists.openstack.org>" <openstack@lists.openstack.org<mailto:openstack@lists.openstack.org>>
Subject: [Openstack] Openstack Mitaka Domain question

Hi All

I setup the openstack Mitaka, and beside the "default" domain, I create another domain called "labA".

I login using labA domain.

My question are
1. Can I create different users and assign to different domain from Horizon dashboard GUI? or do i have to do it from a command line? 2. If I login as admin user under default domain, How can I see all the users with all different domain in horizon dashboard GUI?
.

Thanks a lot
wally


--
Eugen Block                             voice   : +49-40-559 51 75
NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
Postfach 61 03 15
D-22423 Hamburg                         e-mail  : ebl...@nde.ag

        Vorsitzende des Aufsichtsrates: Angelika Mozdzen
          Sitz und Registergericht: Hamburg, HRB 90934
                  Vorstand: Jens-U. Mozdzen
                   USt-IdNr. DE 814 013 983


_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to