Troubleshooting |
REST API request returns HTTP code 401
Symptom
Getting unauthorized HTTP code 401 for REST calls to the controller.
Cause
The role-based access control (RBAC) role is
not authorized with the token. HPE VAN SDN Controller 2.5 enforces a single
role. By default the single role is sdn-admin.
A user must have this role configured on the Keystone server for the
domain (tenant) that the user belongs to.
Action
Configure a user with the
sdn-adminrole on the Keystone server for the domain (tenant) that the user belongs to. The domain name and role configured for the user on the controller must match the domain name and role configured for that user in Keystone.Create a tenant:
curl –H "X-Auth-Token:ADMIN" –H "Contant-Type: application/json" –d '{"tenant": {"enabled": true, "name": "test-tenant", "description": "Test Tenant"}}' http://<controller-ip>:35357/v2.0/tenantsList tenants:
curl –H "X-Auth-Token:ADMIN" http://<controller-ip>:35357/v2.0/tenants
Create a user:
curl –H "X-Auth-Token:ADMIN" –H "Contant-Type: application/json" –d '{"user": {"email": "tester@test.rose.hp.com", "password": "somepass", "enabled": true, "name": "test-user", "tenantId": "2c851897a09f483fa452e2de11511f71"}}' http://<controller-ip>:35357/v2.0/usersList users:
curl –H "X-Auth-Token:ADMIN" http://<controller-ip>:35357/v2.0/users
Create a role:
curl –H "X-Auth-Token:ADMIN" –H "Contant-Type: application/json" –d '{"role": {"name": "test-role"}}' http:// <controller-ip>:35357/v2.0/OS-KSADM/rolesList users:
curl –H "X-Auth-Token:ADMIN" http://<controller-ip>:35357/v2.0/roles
Assign role:
curl –X PUT –H "X-Auth-Token:ADMIN" http://<controller-ip>:35357/v2.0/tenants/<tenant-id>/users/<user-id>/roles/OS-KSADM/<role-id>
List roles for a user:
curl –H "X-Auth-Token:ADMIN" http://<controller-ip>:35357/v2.0/OS-KSADM/roles/<user-id>
Use the
curlcommand to request authentication using the default username and password. You must include the keyword domain and the default domain name value, in this examplesdn, as follows:curl -sk -H 'Content-Type:application/json' -d '{"login":{"user":"sdn","password":"skyline","domain":"sdn"}}' https://<controller-ip>:8443/sdn/v2.0/auth)