[Fiware-cloud] [FIWARE.Cloud] Question about keystone.

[FERNANDO LOPEZ AGUILAR]

Hi Andy,

Working with the Keystone, I have several questions about it that I hope that you can resolve me.

1) When to request a validation token to the keystone, it gives you a list of roles associated to a (this ?) user like the following:


{
    "access":{
        "token":{
            "expires":"2010-11-01T03:32:15-05:00",
            "id":"ab48a9efdfedb23ty3494"
        },
        "user":{
            "id":"123",
            "name":"jqsmith",
            "roles":[{
                    "id":"234",
                    "name":"compute:admin"
                },
                                {
                    "id":"234",
                    "name":"object-store:admin",
                    "tenantId":"1"
                }
            ],
            "roles_links":[]
        }
    }
}

- What is the role of each "role"?
- What is the responsible of them to create/delete/... them? I cannot find how to manage them in the API
- How can I know which type of operations we could use for a specific role?
- I can assume that the token id is directly associated to the user id and user name, what what is the different between role id and tenantId?

2) I assume that the portal receives the user & password and it authenticate through keystone. Keystone responses with the token of the user, the different roles and service available for this user. Those roles have to be the same that validate token responses. How can check afterward that the service (with the appropriate token) that I receive is valid or not?

BR,

Fernando López Aguilar
Cloud Computing
fla at tid dot es
+34 914 832 729
Telefónica I+D (R&D)
Ronda de la Comunicación s/n
Distrito C, Edificio Oeste 1, Planta 5
28050 Madrid, Spain

[cid:65E3CA3A-3DFE-41B6-8F69-2AD965EA42FA at hi.inet]


________________________________
Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-cloud/attachments/20120417/1f1c9a80/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-1.tiff
Type: image/tiff
Size: 66394 bytes
Desc: PastedGraphic-1.tiff
URL: <https://lists.fiware.org/private/old-fiware-cloud/attachments/20120417/1f1c9a80/attachment.tiff>