[Containers] Cannot authenticate with Registry-v2 via Portus token service *** DISREGARD ***

Chris Wolf cwolf.algo at gmail.com
Mon Sep 21 15:41:26 MDT 2015


The issue I was having was messing up copy/pasting big, long token
strings.  The token auth service works fine, as shown below.

Regards,

Chris Wolf

# attempt to access catalog resource
$ curl --include http://192.168.1.142:5000/v2/_catalog
HTTP/1.1 401 Unauthorized
Content-Type: application/json; charset=utf-8
Docker-Distribution-Api-Version: registry/2.0
Www-Authenticate: Bearer
realm="http://localhost:3000/v2/token",service="localhost:5000",scope="registry:catalog:*"
Date: Mon, 21 Sep 2015 20:21:11 GMT
Content-Length: 161

{"errors":[{"code":"UNAUTHORIZED","message":"access to the requested
resource is not
authorized","detail":[{"Type":"registry","Name":"catalog","Action":"*"}]}]}

# get auth token to access resource...

$ curl --include --user cwolf
'http://192.168.1.142:3000/v2/token?service=localhost:5000&scope=registry:catalog:*'
Enter host password for user 'cwolf':
HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: application/json; charset=utf-8
ETag: W/"a909904f123cab7b6402cbe0f78a2e95"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _portus_session=VzFacjc2WW9VVVB6eUFSbXdmRndRUDJObTBVY0Z3bHdoKzI3ZWNuTGxMVG1UTndVcU9NRjhraUlld1VWQnhYL1EzNmMzOUJDUVB2cjZVam96cTdoanc9PS0teUQ4RlA3b0FLZTJsbkxFZmhPWHJtZz09--34d368eb343f2b6f27d4c5550f21430211bb6e02;
path=/; HttpOnly
X-Request-Id: 7e455fad-b58b-4df0-8d63-2adfcc6508d8
X-Runtime: 0.135983
Connection: close
Server: thin

{"token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlBUV1Q6Rk5KRTo3VFc3OlVMSTc6RFpRQTpKSkpJOlJESlE6Mk03NjpIRDZHOlpSU0M6VlBJRjpPNUJVIn0.eyJpc3MiOiJwb3J0dXMudGVzdC5sYW4iLCJzdWIiOm51bGwsImF1ZCI6ImxvY2FsaG9zdDo1MDAwIiwiaWF0IjoxNDQyODcwNzY4LCJuYmYiOjE0NDI4NzA3NjMsImV4cCI6MTQ0Mjg3MTA2OCwianRpIjoiUzZLdlVZNkZnSnpTOXFrbWVvOWJ0RlZNUENaZmdOWXZKQ29oOXBxQmJ4IiwiYWNjZXNzIjpbeyJ0eXBlIjoicmVnaXN0cnkiLCJuYW1lIjoiY2F0YWxvZyIsImFjdGlvbnMiOlsiKiJdfV19.sAi-3DJH0WO_K4jNFzfq7jMTOnvMSsBYSwszZxFcy3yRijoDOCcGef-GwlvkNMJ1I3tjIgQTC1mzqGMUc0nGMLUd81kJbfyu72kTpPNcW1JmLDt0XgNQ4dzlgR_RQRSq3ieBqjx266_FbK6PULMPxPJB2KOT_79uhd3PftUa1522OoJEminmOmHX83Zm_VZ-vbCQO9s0J4esxVlw2FLb-S3SfPK8_kN3cOj4NfleraQH4bYmYcTO7MFKNd89VmlZgAiingDRz2_W4fiT6xh2S2qcSvzJhCWL5nxY20eN4enpqUPTTHwVK7zhjG-KcM0Q2PoZIW1tuhyfnu-YrBMUJptDcxLUEQfKZOxHnpkzTDrqvn4eeY1lMTC2jKt02pxZTXZDoEQvBuMy8vPSMWZwaUc4JyxxCGPwdWvJgogSAH1XQO8gArq8zAarcSbcEgyCVMpAgmpFcL4PV_vW4G5e0FHGGZtD_X2ZOP0Q9xF0wJgwD_UWExeoBu5r5SD_1wL6y-_cExSIGrVTVl90VejUq0d_dECR_25Mt7tOVdkaUwJdWbJOtfueNenJqYGQKeVfE83_G7l3YvCHJ2_JDWO6sR95mrPiOm3EtCPc5bDzqWfrRAoUGZUThPOhkitjqTO9TuJNB_48-xTcSg6zDGNikMm_BcmSwEQWHPq2EtMWL2E"}

# Now use token to access resource...

$ curl --include -H "Authorization: Bearer
eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IlBUV1Q6Rk5KRTo3VFc3OlVMSTc6RFpRQTpKSkpJOlJESlE6Mk03NjpIRDZHOlpSU0M6VlBJRjpPNUJVIn0.eyJpc3MiOiJwb3J0dXMudGVzdC5sYW4iLCJzdWIiOm51bGwsImF1ZCI6ImxvY2FsaG9zdDo1MDAwIiwiaWF0IjoxNDQyODcwNzY4LCJuYmYiOjE0NDI4NzA3NjMsImV4cCI6MTQ0Mjg3MTA2OCwianRpIjoiUzZLdlVZNkZnSnpTOXFrbWVvOWJ0RlZNUENaZmdOWXZKQ29oOXBxQmJ4IiwiYWNjZXNzIjpbeyJ0eXBlIjoicmVnaXN0cnkiLCJuYW1lIjoiY2F0YWxvZyIsImFjdGlvbnMiOlsiKiJdfV19.sAi-3DJH0WO_K4jNFzfq7jMTOnvMSsBYSwszZxFcy3yRijoDOCcGef-GwlvkNMJ1I3tjIgQTC1mzqGMUc0nGMLUd81kJbfyu72kTpPNcW1JmLDt0XgNQ4dzlgR_RQRSq3ieBqjx266_FbK6PULMPxPJB2KOT_79uhd3PftUa1522OoJEminmOmHX83Zm_VZ-vbCQO9s0J4esxVlw2FLb-S3SfPK8_kN3cOj4NfleraQH4bYmYcTO7MFKNd89VmlZgAiingDRz2_W4fiT6xh2S2qcSvzJhCWL5nxY20eN4enpqUPTTHwVK7zhjG-KcM0Q2PoZIW1tuhyfnu-YrBMUJptDcxLUEQfKZOxHnpkzTDrqvn4eeY1lMTC2jKt02pxZTXZDoEQvBuMy8vPSMWZwaUc4JyxxCGPwdWvJgogSAH1XQO8gArq8zAarcSbcEgyCVMpAgmpFcL4PV_vW4G5e0FHGGZtD_X2ZOP0Q9xF0wJgwD_UWExeoBu5r5SD_1wL6y-_cExSIGrVTVl90VejUq0d_dECR_25Mt7tOVdkaUwJdWbJOtfueNenJqYGQKeVfE83_G7l3YvCHJ2_JDWO6sR95mrPiOm3EtCPc5bDzqWfrRAoUGZUThPOhkitjqTO9TuJNB_48-xTcSg6zDGNikMm_BcmSwEQWHPq2EtMWL2E"
http://localhost:5000/v2/_catalog
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Docker-Distribution-Api-Version: registry/2.0
Date: Mon, 21 Sep 2015 21:27:50 GMT
Content-Length: 34

{"repositories":["cwolfbusybox"]}


More information about the Containers mailing list