← Back to team overview

openstack team mailing list archive

cloudpipe failed to launch with "NotAuthorized"

 

When I tried to launch cloudpipe using "nova-manage vpn run 1 1", I
got an error in nova-manage.log:


2012-01-10 05:05:21,755 CRITICAL nova
[fa7bd047-43df-4ccb-b4bf-9dee6938f6ef 1 1]
(nova): TRACE: Traceback (most recent call last):
(nova): TRACE:   File "/usr/bin/nova-manage", line 2142, in <module>
(nova): TRACE:     main()
(nova): TRACE:   File "/usr/bin/nova-manage", line 2130, in main
(nova): TRACE:     fn(*fn_args, **fn_kwargs)
(nova): TRACE:   File "/usr/bin/nova-manage", line 192, in run
(nova): TRACE:     self.pipe.launch_vpn_instance(project_id, user_id)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/nova/cloudpipe/pipelib.py", line
109, in launch_vpn_instance
(nova): TRACE:     security_group=[group_name])
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1377,
in run_instances
(nova): TRACE:     image = self._get_image(context, kwargs['image_id'])
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1494,
in _get_image
(nova): TRACE:     image = self.image_service.show(context, internal_id)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/nova/image/s3.py", line 81, in show
(nova): TRACE:     return self.service.show(context, image_id)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 220, in
show
(nova): TRACE:     image_meta =
self._get_client(context).get_image_meta(image_id)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/glance/client.py", line 94, in
get_image_meta
(nova): TRACE:     res = self.do_request("HEAD", "/images/%s" % image_id)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/glance/common/client.py", line 145,
in do_request
(nova): TRACE:     method, action, body=body, headers=headers, params=params)
(nova): TRACE:   File
"/usr/lib/python2.7/dist-packages/glance/common/client.py", line 222,
in _do_request
(nova): TRACE:     raise exception.NotAuthorized(res.read())
(nova): TRACE: NotAuthorized
(nova): TRACE:

All other nova-manage or nova commands are working fine. I added 3
lines in nova.conf specifically for cloudpipe:

--vpn_image_id=32
--use_project_ca
--cnt_vpn_clients=5

Did I miss any other configuration items?

Thanks,
Kenneth


Follow ups