Unable to authenticate to private OpenStack Keystone

[35359595]

Following the examples I'm constructing Scope, Password and then Session or Cloud. On last step (either of..) getting error below.

Not sure which format for IP based URL should be used.
Tried:
http://ip:port/v3
http://ip:port
http://ip
http://ip:port/v3/

Code in question:

    info!("Creating OpenStack scope");
    let scope = Scope::Project {
        project: IdOrName::from_name(&GC.openstack_project),
        domain: Some(IdOrName::from_id(&GC.openstack_project)),
    };
    info!("Creating OpenStack authentication");
    let auth = Password::new(
        &GC.openstack_api_address,
        &GC.openstack_user,
        &GC.openstack_password,
        &GC.openstack_project,
    )?
    .with_scope(scope);
    info!("Creating OpenStack session");
    let session = Session::new(auth.clone()).await?;
    info!("Creating OpenStack client");
    let openstack = Cloud::new(auth).await?;

Output:

INFO > Creating OpenStack scope
INFO > Creating OpenStack authentication
INFO > Creating OpenStack session
Error: Failed to authenticate: The request you have made requires authentication.

[dtantsur]

Hi! Can you re-run with setting RUST_LOG=openstack,osauth for more detailed logging (edit out passwords, of course).

[35359595]

hi @dtantsur here's an extra line I've managed to get:

TRACE osauth::client > HTTP request returned 401 Unauthorized; error: The request you have made requires authentication.
Error: Failed to authenticate: The request you have made requires authentication.

I've tried all listed addresses. Not sure if it's helpful but if I input wrong URL or port - I'm getting this error:

Error: Error when accessing the server: error sending request for url (http://:500/v3/auth/tokens)

where original input was http://<IP>:500/v3, which leads to conclusion that original attempted url of http://ip:port/v3 should work (it works with other http clients). Not sure if it's a bug and this library supports only https?

[dtantsur]

where original input was http://:500/v3

Are you sure it's 500, not 5000?

domain: Some(IdOrName::from_id(&GC.openstack_project)),

Are you sure about openstack_project here? Your domain name is the same as the project name?

Is there anything of interest in the Keystone logs?

[35359595]

Hi @dtantsur
500 was used to test wrong URL intentionally, which led to identify exact URL construction (concatenation) done by the library.

I am sure as for the purposes of simplicity I've used same string for both project and domain.

For some reason it started authorizing me. I'll keep monitoring but I see nothing changed in diff...
Correct address for custom install is keystone plus version, aka http[s]://<ip>:<port>/v3 wher port is 5000 by default.