openstack team mailing list archive

[stuart.mclaren@xxxxxx]

Hi Jason,

Using 'ngrep' may be helpful here to help see what's going on.

# ngrep -W byline -d ethX port 5000 or 35357

where 'ethX' is the relevant ethernet interface, eg 'eth0' or 'lo'.

This should generate output along the following lines so we
can see the glance <-> keystone API exchanges:

T 127.0.0.1:5000 -> 127.0.0.1:36198 [AP]
HTTP/1.1 200 OK.
Content-Type: application/json; charset=UTF-8.
Content-Length: 324.
Date: Tue, 22 Nov 2011 16:56:32 GMT.
.
{
    "access": {
        "serviceCatalog": [
            {
.
.
.

It might be interesting to see ngrep output for the following commands:

glance -T service -I glance -K glance -S keystone -N http://192.168.131.141:5000/v2.0 index
glance -I glance -K glance -S keystone -N http://192.168.131.141:5000/v2.0 index

and maybe compare this port too:

glance -I glance -K glance -S keystone -N http://192.168.131.141:35357/v2.0 index
glance -T service -I glance -K glance -S keystone -N http://192.168.131.141:35357/v2.0 index

Thanks,

-Stuart


On Mon, 19 Mar 2012, Jason Hedden wrote:

> On Mar 19, 2012, at 12:58 PM, Jay Pipes wrote:
>
> > On 03/19/2012 01:13 PM, Jason Hedden wrote:
> > > When following the documentation at https://review.openstack.org/#change,5190 I'm having trouble getting Glance to authenticate via Keystone.  I have this working when everything is installed on a single system, but can't seem to find any winning combinations to get a multi-host installation working.
> > >
> > > # glance  -I adminUser -K ... -S keystone -N http://192.168.131.141:5000/v2.0' index
> > > Failed to show index. Got error:
> > > Response from Keystone does not contain a Glance endpoint.
> >
> > Try specifying the tenant name with -T <TENANT_NAME>.
>
> With both the admin, and glance user I get:
> glance # glance -T service -I glance -K glance -S keystone -N http://192.168.131.141:5000/v2.0 index
> Not authorized to make this request. Check your credentials (OS_AUTH_USER, OS_AUTH_KEY, …).
>
> glance # glance -T openstackDemo -I adminUser -K ... -S keystone -N http://192.168.131.141:5000/v2.0 index
> Not authorized to make this request. Check your credentials (OS_AUTH_USER, OS_AUTH_KEY, …).
>
> Just to verify that I'm speaking with keystone at all:
> Without the -T:
> glance # glance -I adminUser -K ... -S keystone -N http://192.168.131.141:5000/v2.0 index
> Failed to show index. Got error:
> Response from Keystone does not contain a Glance endpoint.
>
> With a bad password and no -T:
> Failed to show index. Got error:
> Response from Keystone does not contain a Glance endpoint.
> glance # glance -I adminUser -K blah -S keystone -N http://192.168.131.141:5000/v2.0 index
> Not authorized to make this request. Check your credentials (OS_AUTH_USER, OS_AUTH_KEY, ...).
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp