openstack team mailing list archive

[Lillie Ross-CDSR11 <Ross.Lillie@xxxxxxxxxxxxxxxxxxxxx>]

Still having issues.

I found a config bug in my Keystone.conf file in the filter pipeline for the d5_compat modules.  However, when I fix the config to match the installation guide and restart keystone, I get an error message that the d5_compat module can't be found.  My keystone installation is from the ManagedIT PPA.  Is this a bug in the documentation?  In the ManagedIT packages? The pipeline for the ManageIT package is configured as follows:

[pipeline:admin]
pipeline =
    urlrewritefilter
    admin_api

[pipeline:keystone-legacy-auth]
pipeline =
    urlrewritefilter
    legacy_auth
    RAX-KEY-extension
    service_api

versus what is specified in the installation guide.  Does this difference matter?  What are the differences?

Regards,
Ross


On Feb 1, 2012, at 10:31 AM, Lillie Ross-CDSR11 wrote:

> Hi Jay,
> 
> Yes, this confused me, however I get the same error using the token I generated and added (via the keystone-manage command).  To wit:
> 
> root@nova:~# keystone-manage token list
> token	user	expiration	tenant
> -------------------------------------------------------------------------------
> 10111213141516171819	1	2022-01-01 00:00:00	2
> fa89fb9a-60d2-4921-b12d-6aee1c177823	1	2012-02-01 15:24:33	1
> b06c5e4e-5e59-4293-aa54-ce6879f11371	2	2012-02-01 15:26:41	1
> 
> where the first token is the long-lived one I supplied during installation.  Running the glance command yields identical results:
> 
> root@nova:~# glance -v -A 10111213141516171819 details
> Failed to show details. Got error:
> Internal Server error: Traceback (most recent call last):
>  File "/usr/lib/python2.7/dist-packages/eventlet/wsgi.py", line 336, in handle_one_response
>    result = self.application(self.environ, start_response)
>  File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__
>    resp = self.call_func(req, *args, **self.kwargs)
>  File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func
>    return self.func(req, *args, **kwargs)
>  File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 113, in __call__
>    response = req.get_response(self.application)
>  File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1053, in get_response
>    application, catch_exc_info=False)
>  File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1022, in call_application
>    app_iter = application(self.environ, start_response)
>  File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__
>    resp = self.call_func(req, *args, **self.kwargs)
>  File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func
>    return self.func(req, *args, **kwargs)
>  File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 110, in __call__
>    response = self.process_request(req)
>  File "/usr/lib/python2.7/dist-packages/glance/common/context.py", line 104, in process_request
>    raise exception.NotAuthorized()
> NotAuthorized: None
> 
> Completed in 0.0031 sec.
> 
> Interestingly (perhaps) I see nothing in the keystone.log file.  In fact, I don't even see the keystone log file.  Keystone opens to log files named 'admin.log' and 'keystone_legacy_auth.log'.  Is this right?  Also, if I run keystone interactively (keystone -v -d) then issue the glance command, I see nothing in the keystone window. This doesn't seem right to me, but I'm just getting started with keystone integration.
> 
> Thanks in advance for any insight...
> 
> Regards,
> Ross
> 
> On Jan 31, 2012, at 6:48 PM, Jay Pipes wrote:
> 
>> On 01/31/2012 06:28 PM, Lillie Ross-CDSR11 wrote:
>>> I'm reinstalling the various Openstack services from packages in the
>>> ManagedIT PPA to pull in the latest Diablo bug fixes. I'm following the
>>> latest directions in the newly release installation guide as I perform
>>> these upgrades
>>> (http://docs.openstack.org/diablo/openstack-compute/install/content/index.html).
>>> 
>>> However, I'm having trouble getting Glance to authenticate with
>>> Keystone. All config files have been copied from the examples posted in
>>> the installation guide (and modified accordingly for my admin token, IP
>>> addresses, etc.). Regardless, I continually get the following error
>>> message and stack dump when trying to verify the Glance/Keystone
>>> integration:
>>> 
>>> Step 1: Grab a token
>>> 
>>> # curl -d '{"auth": {"tenantName": "default",
>>> "passwordCredentials":{"username": "admin", "password": "admin"}}}' -H
>>> "Content-type: application/json" http://173.23.181.1:35357/v2.0/tokens |
>>> python -mjson.tool
>>> 
>>> ...
>>> "token": {
>>> "expires": "2012-02-01T15:24:33",
>>> "id": "fa89fb9a-60d2-4921-b12d-6aee1c177823",
>>> "tenant": {
>>> "id": "1",
>>> "name": "default"
>>> }
>>> }
>> 
>> You're going to want to grab a long-lived token (sometimes called a service token) to use for the Glance API <-> Glance Registry connection. This service token should be used in the glance-registry.conf file.
>> 
>> In glance-registry.conf, you'll see a section looking like this:
>> 
>> [filter:authtoken]
>> paste.filter_factory = keystone.middleware.auth_token:filter_factory
>> service_protocol = http
>> service_host = 127.0.0.1
>> service_port = 5000
>> auth_host = 127.0.0.1
>> auth_port = 35357
>> auth_protocol = http
>> auth_uri = http://127.0.0.1:5000/
>> admin_token = 999888777666
>> 
>> Replace admin_token = 999888777666 with the relevant long-lived service token.
>> 
>> Cheers!
>> -jay
>> 
>> 
>>> Step 2: Try a Glance command
>>> 
>>> # glance details -A fa89fb9a-60d2-4921-b12d-6aee1c177823
>>> Failed to show details. Got error:
>>> Internal Server error: Traceback (most recent call last):
>>> File "/usr/lib/python2.7/dist-packages/eventlet/wsgi.py", line 336, in
>>> handle_one_response
>>> result = self.application(self.environ, start_response)
>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__
>>> resp = self.call_func(req, *args, **self.kwargs)
>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func
>>> return self.func(req, *args, **kwargs)
>>> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 113,
>>> in __call__
>>> response = req.get_response(self.application)
>>> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1053, in
>>> get_response
>>> application, catch_exc_info=False)
>>> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1022, in
>>> call_application
>>> app_iter = application(self.environ, start_response)
>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__
>>> resp = self.call_func(req, *args, **self.kwargs)
>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func
>>> return self.func(req, *args, **kwargs)
>>> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 110,
>>> in __call__
>>> response = self.process_request(req)
>>> File "/usr/lib/python2.7/dist-packages/glance/common/context.py", line
>>> 104, in process_request
>>> raise exception.NotAuthorized()
>>> NotAuthorized: None
>>> 
>>> From the Glance api.log file we see the following (with the traceback
>>> identical to above removed):
>>> 
>>> 2012-01-31 17:14:30 DEBUG [glance.api.middleware.version_negotiation]
>>> Processing request: GET /v1/images/detail Accept:
>>> 2012-01-31 17:14:30 DEBUG [glance.api.middleware.version_negotiation]
>>> Matched versioned URI. Version: 1.0
>>> 2012-01-31 17:14:30 DEBUG [eventlet.wsgi.server] Traceback (most recent
>>> call last):
>>> ? (traceback removed)
>>> 2012-01-31 17:14:30 DEBUG [eventlet.wsgi.server] 127.0.0.1 - -
>>> [31/Jan/2012 17:14:30] "GET /v1/images/detail?limit=10 HTTP/1.1" 500
>>> 1528 0.001163
>>> 
>>> This is probably a config blunder on my part, but I've poured over the
>>> config files numerous times. Regardless, I've attached the glance-api
>>> and registry conf files.
>>> 
>>> Any suggestions?
>>> 
>>> Regards,
>>> Ross
>>> 
>>> 
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> Mailing list: https://launchpad.net/~openstack
>>> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~openstack
>>> More help   : https://help.launchpad.net/ListHelp
>> 
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
>> 
>> 
>> 
>