openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #06645
Re: cloudpipe failed to launch with "NotAuthorized"
I dug in a bit and found out that:
- nova-manage.VpnCommands.run doesn't have a parameter for credentials
when calling pipelib.py.launch_vpn_instance(project_id, user_id), and
therefore,
- cloudpipe/pipelib.py doesn't set auth strategy, which defaults to
"noauth", in RequestContext
- glance/client.py.get_image_meta thus failed.
Do we want to make cloudpipe to work with keystone before it finds a
place in Quantum?
Thanks,
kenneth
On Tue, Jan 10, 2012 at 9:45 AM, Vishvananda Ishaya
<vishvananda@xxxxxxxxx> wrote:
> Looks like either:
> a) your image is not pubic in glance
> or:
> b) cloudpipe code needs to be updated to use uuids somewhere
>
> Vish
>
> On Jan 10, 2012, at 5:26 AM, Tianchen Jiang wrote:
>
>> When I tried to launch cloudpipe using "nova-manage vpn run 1 1", I
>> got an error in nova-manage.log:
>>
>>
>> 2012-01-10 05:05:21,755 CRITICAL nova
>> [fa7bd047-43df-4ccb-b4bf-9dee6938f6ef 1 1]
>> (nova): TRACE: Traceback (most recent call last):
>> (nova): TRACE: File "/usr/bin/nova-manage", line 2142, in <module>
>> (nova): TRACE: main()
>> (nova): TRACE: File "/usr/bin/nova-manage", line 2130, in main
>> (nova): TRACE: fn(*fn_args, **fn_kwargs)
>> (nova): TRACE: File "/usr/bin/nova-manage", line 192, in run
>> (nova): TRACE: self.pipe.launch_vpn_instance(project_id, user_id)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/nova/cloudpipe/pipelib.py", line
>> 109, in launch_vpn_instance
>> (nova): TRACE: security_group=[group_name])
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1377,
>> in run_instances
>> (nova): TRACE: image = self._get_image(context, kwargs['image_id'])
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1494,
>> in _get_image
>> (nova): TRACE: image = self.image_service.show(context, internal_id)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/nova/image/s3.py", line 81, in show
>> (nova): TRACE: return self.service.show(context, image_id)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 220, in
>> show
>> (nova): TRACE: image_meta =
>> self._get_client(context).get_image_meta(image_id)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/glance/client.py", line 94, in
>> get_image_meta
>> (nova): TRACE: res = self.do_request("HEAD", "/images/%s" % image_id)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 145,
>> in do_request
>> (nova): TRACE: method, action, body=body, headers=headers, params=params)
>> (nova): TRACE: File
>> "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 222,
>> in _do_request
>> (nova): TRACE: raise exception.NotAuthorized(res.read())
>> (nova): TRACE: NotAuthorized
>> (nova): TRACE:
>>
>> All other nova-manage or nova commands are working fine. I added 3
>> lines in nova.conf specifically for cloudpipe:
>>
>> --vpn_image_id=32
>> --use_project_ca
>> --cnt_vpn_clients=5
>>
>> Did I miss any other configuration items?
>>
>> Thanks,
>> Kenneth
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>
References