The admin_token does not represent a user and carries no explicit authorization that can be delegated. It's just a magical hack for bootstrapping keystone and should be removed from the wsgi pipeline after that.
** Changed in: keystone Status: Confirmed => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1259440 Title: Cannot get info of a trust use admin_token Status in OpenStack Identity (Keystone): Invalid Bug description: Hi all. When I test the lastest code of master, I found the following bugs: If I use admin_token whitch is in the keystone.conf to access some V3 apis of trust, I will get this error message: '{"error": {"message": "Could not find token, tokentoken.", "code": 404, "title": "Not Found"}}'. The apis are as follow: curl -H "X-Auth-Token:tokentoken" -H "Content-Type:application/json" http://127.0.0.1:35357/v3/OS-TRUST/trusts/2a096d2e24f54429a744e388fa292c12 curl -X DELETE -H "X-Auth-Token:tokentoken" -H "Content-Type:application/json" http://127.0.0.1:35357/v3/OS-TRUST/trusts/2a096d2e24f54429a744e388fa292c12 curl -X HEAD -H "X-Auth-Token:tokentoken" -H "Content-Type:application/json" http://127.0.0.1:35357/v3/OS-TRUST/trusts/2a096d2e24f54429a744e388fa292c12/roles/4238a14d2fd34cf68e8f1ae7f2fb8f8a curl -i -X GET -H "X-Auth-Token:tokentoken" -H "Content-Type:application/json" http://127.0.0.1:35357/v3/OS-TRUST/trusts/2a096d2e24f54429a744e388fa292c12/roles The reason is that the function named "_get_user_id" in the file of "trust.controllers.py" will try to get token info from context. Because admin_token is not in db, a 404 exception will be raised. def _get_user_id(self, context): if 'token_id' in context: token_id = context['token_id'] token = self.token_api.get_token(token_id) user_id = token['user']['id'] return user_id return None To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1259440/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp