openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #21077
Re: Horizon Keystone Endpoint Issue
Hi Michael-
Can you also check the glance,swift and quantum logs too.
Since, I too faced the same issue with horizon, but it got solved simply
with changing admin_name in the api-paste.ini of nova. I think you may
revisit the configuration files of the installed modules carefully for the
correct credentials.
Also, on quick think to look is the apache error log while you access the
horizon.
look at the log as, tail -f /var/log/apache/error.log.
We might find some clue about the issue present.
On Wed, Feb 20, 2013 at 5:03 PM, Michaël Van de Borne <
michael.vandeborne@xxxxxxxx> wrote:
> the curl command runs just fine. It gives the list of endpoints.
>
> the nova-api.log (the only one that moves when trying to log into horizon)
> shows nothing special.
>
> (see output below)
>
> Finally, I installed Grizzly by adding this in sources.list:
> deb http://ubuntu-cloud.archive.canonical.com/ubuntuprecise-updates/grizzly main
>
> It's grizzly-2. I followed the doc here:
> http://docs.openstack.org/trunk/openstack-compute/install/apt/content/ap_installingfolsomubuntuprecise.html
>
>
> Yet any clue?
>
>
> root@leonard:~# curl http://192.168.203.103:35357/v2.0/endpoints -H
> 'x-auth-token: folsom' | python -m json.tool
> % Total % Received % Xferd Average Speed Time Time Time
> Current
> Dload Upload Total Spent Left
> Speed
> 100 2270 0 2270 0 0 284k 0 --:--:-- --:--:-- --:--:--
> 316k
> {
> "endpoints": [
> {
> "adminurl": "http://192.168.203.103:8773/services/Admin";<http://192.168.203.103:8773/services/Admin>,
>
> "id": "9248f20cf38b4dbaa3f85abc1ee1f94d",
> "internalurl": "http://192.168.203.103:8773/services/Cloud";<http://192.168.203.103:8773/services/Cloud>,
>
> "publicurl": "http://192.168.202.103:8773/services/Cloud";<http://192.168.202.103:8773/services/Cloud>,
>
> "region": "myregion",
> "service_id": "c22a33b56e67445a9550643a276a2f87"
> },
> {
> "adminurl": "http://192.168.203.103:9696/v2";<http://192.168.203.103:9696/v2>,
>
> "id": "bdb68ba018c34cad95acb24f3ad92645",
> "internalurl": "http://192.168.203.103:9696/v2";<http://192.168.203.103:9696/v2>,
>
> "publicurl": "http://192.168.202.103:9696/v2";<http://192.168.202.103:9696/v2>,
>
> "region": "myregion",
> "service_id": "d21a72e559934837901574dfb3bc6a6c"
> },
> {
> "adminurl": "http://192.168.203.103:8774/v2/%(tenant_id)s",
> "id": "61c1c0305ffa4254b8271a2045489d9a",
> "internalurl": "http://192.168.203.103:8774/v2/%(tenant_id)s",
>
> "publicurl": "http://192.168.202.103:8774/v2/%(tenant_id)s",
> "region": "myregion",
> "service_id": "99f1d14e769046099e85d010ed4c29da"
> },
> {
> "adminurl": "http://192.168.203.103:8080/v1";<http://192.168.203.103:8080/v1>,
>
> "id": "beaf4c028cc24068a2068ea16489eb94",
> "internalurl":
> "http://192.168.203.103:8080/v1/AUTH_%(tenant_id)s",
> "publicurl":
> "http://192.168.202.103:8080/v1/AUTH_%(tenant_id)s",
> "region": "myregion",
> "service_id": "7fc69365d1b64eb58e7ac6fcf8369ff2"
> },
> {
> "adminurl": "http://192.168.203.103:35357/v2.0";<http://192.168.203.103:35357/v2.0>,
>
> "id": "1c45042b6bb64fd7b6f56d7348e86103",
> "internalurl": "http://192.168.203.103:5000/v2.0";<http://192.168.203.103:5000/v2.0>,
>
> "publicurl": "http://192.168.202.103:5000/v2.0";<http://192.168.202.103:5000/v2.0>,
>
> "region": "myregion",
> "service_id": "37059fcb24d345f293d4add7202504bb"
> },
> {
> "adminurl": "http://192.168.203.103:9292";<http://192.168.203.103:9292>,
>
> "id": "0f9dbbb5ac764e0794464abcb46047a2",
> "internalurl": "http://192.168.203.103:9292";<http://192.168.203.103:9292>,
>
> "publicurl": "http://192.168.203.103:9292";<http://192.168.203.103:9292>,
>
> "region": "myregion",
> "service_id": "0ad102dc14eb4866af351358e372cb23"
> },
> {
> "adminurl": "192.168.203.103:8776/v1/%(tenant_id)s",
> "id": "c4f3ea0477ac428b958f5bcee2fb14e1",
> "internalurl": "http://192.168.203.103:8776/v1/%(tenant_id)s",
>
> "publicurl": "http://192.168.202.103:8776/v1/%(tenant_id)s",
> "region": "myregion",
> "service_id": "19b1f3c4fa5843a295e538aab1f4cd40"
> },
> {
> "adminurl": "http://192.168.203.103:8776/v1/%(tenant_id)s",
> "id": "fe82e5a1b6344c5784eb89be0d04b10b",
> "internalurl": "http://192.168.203.103:8776/v1/%(tenant_id)s",
>
> "publicurl": "http://192.168.202.103:8776/v1/%(tenant_id)s",
> "region": "myregion",
> "service_id": "ef7714abcdc04c06aa9f1ef2bdc29a3a"
> }
> ]
> }
>
>
>
> *
> **nova-api.log:*
> 2013-02-20 12:05:59 23201 INFO nova.osapi_compute.wsgi.server [-] (23201)
> accepted ('192.168.202.103', 33777)
>
> 2013-02-20 12:05:59 INFO nova.api.openstack.wsgi
> [req-e3468922-0880-439f-b8fd-4ac0bacd33ea a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] GET
> http://192.168.202.103:8774/v2/a9f86bcd83e94fbdba61862bce42e717/os-simple-tenant-usage?start=2013-02-01T00:00:00&end=2013-02-20T11:05:59.865130&detailed=1
> 2013-02-20 12:05:59 DEBUG nova.api.openstack.wsgi
> [req-e3468922-0880-439f-b8fd-4ac0bacd33ea a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] No Content-Type provided in request
> get_body /usr/lib/python2.7/dist-packages/nova/api/openstack/wsgi.py:792
> 2013-02-20 12:05:59 DEBUG nova.openstack.common.lockutils
> [req-e3468922-0880-439f-b8fd-4ac0bacd33ea a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] Got semaphore "nova.servicegroup.api.new"
> for method "__new__"... inner
> /usr/lib/python2.7/dist-packages/nova/openstack/common/lockutils.py:185
> 2013-02-20 12:05:59 INFO nova.api.openstack.wsgi
> [req-e3468922-0880-439f-b8fd-4ac0bacd33ea a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717]
> http://192.168.202.103:8774/v2/a9f86bcd83e94fbdba61862bce42e717/os-simple-tenant-usage?start=2013-02-01T00:00:00&end=2013-02-20T11:05:59.865130&detailed=1returned with HTTP 200
> 2013-02-20 12:05:59 INFO nova.osapi_compute.wsgi.server
> [req-e3468922-0880-439f-b8fd-4ac0bacd33ea a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] 192.168.202.103 "GET
> /v2/a9f86bcd83e94fbdba61862bce42e717/os-simple-tenant-usage?start=2013-02-01T00:00:00&end=2013-02-20T11:05:59.865130&detailed=1
> HTTP/1.1" status: 200 len: 193 time: 0.0633430
>
> 2013-02-20 12:05:59 23201 INFO nova.osapi_compute.wsgi.server [-] (23201)
> accepted ('192.168.202.103', 33779)
>
> 2013-02-20 12:05:59 INFO nova.api.openstack.wsgi
> [req-6526a565-d6d3-49e6-8c7a-70f7c850eb14 a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] GET
> http://192.168.202.103:8774/v2/a9f86bcd83e94fbdba61862bce42e717/os-quota-sets/a9f86bcd83e94fbdba61862bce42e717
> 2013-02-20 12:05:59 DEBUG nova.api.openstack.wsgi
> [req-6526a565-d6d3-49e6-8c7a-70f7c850eb14 a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] No Content-Type provided in request
> get_body /usr/lib/python2.7/dist-packages/nova/api/openstack/wsgi.py:792
> 2013-02-20 12:05:59 INFO nova.api.openstack.wsgi
> [req-6526a565-d6d3-49e6-8c7a-70f7c850eb14 a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717]
> http://192.168.202.103:8774/v2/a9f86bcd83e94fbdba61862bce42e717/os-quota-sets/a9f86bcd83e94fbdba61862bce42e717returned with HTTP 200
> 2013-02-20 12:05:59 INFO nova.osapi_compute.wsgi.server
> [req-6526a565-d6d3-49e6-8c7a-70f7c850eb14 a933854b05e04921a78684368e89c47d
> a9f86bcd83e94fbdba61862bce42e717] 192.168.202.103 "GET
> /v2/a9f86bcd83e94fbdba61862bce42e717/os-quota-sets/a9f86bcd83e94fbdba61862bce42e717
> HTTP/1.1" status: 200 len: 478 time: 0.0588741
>
>
> Michaël Van de Borne
> R&D Engineer, SOA team, CETIC
> Phone: +32 (0)71 49 07 45 Mobile: +32 (0)472 69 57 16, Skype: mikemowgliwww.cetic.be, rue des Frères Wright, 29/3, B-6041 Charleroi
>
> Le 20/02/2013 05:03, Trinath Somanchi a écrit :
>
> Hi-
>
> Can you test the keystone with this command.
>
> curl http://<--controller-ip-->:35357/v2.0/endpoints -H 'x-auth-token: <--your-auth-token-->'
>
> Also, check the nova logs when you access horizon. " tail -f /var/log/nova/*.log"
>
> Can you update me on how did you get to work with Grizzly is it RC-1 or RC-2. Can you share me the installation document for grizzly which you have followed.
>
>
>
> On Tue, Feb 19, 2013 at 10:56 PM, Michaël Van de Borne <
> michael.vandeborne@xxxxxxxx> wrote:
>
>> Moreover (sorry for spamming), this command works fine:
>>
>> root@leonard:/etc/init.d# keystone --os-username nova --os-password
>> openstack --os-tenant-name service --os-auth-url
>> http://192.168.203.103:5000/v2.0/ token-get
>> +-----------+----------------------------------+
>> | Property | Value |
>> +-----------+----------------------------------+
>> | expires | 2013-02-20T17:19:25Z |
>> | id | 0eb9d38144604ced8e9fc5def623f9ca |
>> | tenant_id | a9f86bcd83e94fbdba61862bce42e717 |
>> | user_id | a933854b05e04921a78684368e89c47d |
>> +-----------+----------------------------------+
>>
>> this works as well:
>> nova --os-username nova --os-password openstack --os-tenant-name service
>> --os-auth-url http://192.168.203.103:5000/v2.0/ list
>>
>>
>> So this makes me think that users, roles, services, tenants and endpoints
>> are configured properly in keystone. But I can be wrong...
>>
>>
>>
>>
>> Le 19/02/2013 18:09, Michaël Van de Borne a écrit :
>>
>> I checked /etc/nova/api-paste.ini. Here's the relevant section in it:
>>
>> [filter:authtoken]
>> paste.filter_factory = keystone.middleware.auth_token:filter_factory
>> auth_host = 192.168.203.103
>> auth_port = 35357
>> auth_protocol = http
>> admin_tenant_name = service
>> admin_user = nova
>> admin_password = openstack
>> signing_dir = /tmp/keystone-signing-nova
>>
>> I played with the tenant name (admin, service), the port (35357, 5000)
>> and the user (nova, admin) and various combination of all those. I also
>> changed keystone by keystoneclient in the 'paste.filter_factory' line (as I
>> saw both in doc)
>>
>> still no luck.
>>
>> any clue?
>>
>>
>>
>>
>>
>> Le 19/02/2013 17:40, Michaël Van de Borne a écrit :
>>
>> Same problem here. Running Grizzly. Dashboard keeps prompting me for my
>> credentials. Pretty sure dashboard sends wrong tenant name to keystone.
>> Here is the keystone.log entry:
>> 2013-02-19 16:55:06 WARNING [keystone.common.wsgi] Authorization failed.
>> The request you have made requires authentication. from 192.168.203.103
>>
>> here are the endpoints:
>> grizzly@leonard:/etc/init.d$ keystone endpoint-list
>> WARNING: Bypassing authentication using a token & endpoint
>> (authentication credentials are being ignored).
>>
>> +----------------------------------+----------+---------------------------------------------------+---------------------------------------------------+----------------------------------------------+----------------------------------+
>> | id | region |
>> publicurl |
>> internalurl |
>> adminurl | service_id |
>>
>> +----------------------------------+----------+---------------------------------------------------+---------------------------------------------------+----------------------------------------------+----------------------------------+
>> | 0f9dbbb5ac764e0794464abcb46047a2 | myregion |
>> http://192.168.203.103:9292 |
>> http://192.168.203.103:9292 |
>> http://192.168.203.103:9292 | 0ad102dc14eb4866af351358e372cb23 |
>> | 1c45042b6bb64fd7b6f56d7348e86103 | myregion |
>> http://192.168.202.103:5000/v2.0 |
>> http://192.168.203.103:5000/v2.0 |
>> http://192.168.203.103:35357/v2.0 |
>> 37059fcb24d345f293d4add7202504bb |
>> | 61c1c0305ffa4254b8271a2045489d9a | myregion |
>> http://192.168.202.103:8774/v2/%(tenant_id)s |
>> http://192.168.203.103:8774/v2/%(tenant_id)s |
>> http://192.168.203.103:8774/v2/%(tenant_id)s |
>> 99f1d14e769046099e85d010ed4c29da |
>> | 9248f20cf38b4dbaa3f85abc1ee1f94d | myregion |
>> http://192.168.202.103:8773/services/Cloud |
>> http://192.168.203.103:8773/services/Cloud |
>> http://192.168.203.103:8773/services/Admin |
>> c22a33b56e67445a9550643a276a2f87 |
>> | bdb68ba018c34cad95acb24f3ad92645 | myregion |
>> http://192.168.202.103:9696/v2 |
>> http://192.168.203.103:9696/v2 |
>> http://192.168.203.103:9696/v2 | d21a72e559934837901574dfb3bc6a6c
>> |
>> | beaf4c028cc24068a2068ea16489eb94 | myregion |
>> http://192.168.202.103:8080/v1/AUTH_%(tenant_id)s |
>> http://192.168.203.103:8080/v1/AUTH_%(tenant_id)s |
>> http://192.168.203.103:8080/v1 | 7fc69365d1b64eb58e7ac6fcf8369ff2
>> |
>> | c4f3ea0477ac428b958f5bcee2fb14e1 | myregion |
>> http://192.168.202.103:8776/v1/%(tenant_id)s |
>> http://192.168.203.103:8776/v1/%(tenant_id)s |
>> 192.168.203.103:8776/v1/%(tenant_id)s |
>> 19b1f3c4fa5843a295e538aab1f4cd40 |
>> | fe82e5a1b6344c5784eb89be0d04b10b | myregion |
>> http://192.168.202.103:8776/v1/%(tenant_id)s |
>> http://192.168.203.103:8776/v1/%(tenant_id)s |
>> http://192.168.203.103:8776/v1/%(tenant_id)s |
>> ef7714abcdc04c06aa9f1ef2bdc29a3a |
>>
>> +----------------------------------+----------+---------------------------------------------------+---------------------------------------------------+----------------------------------------------+----------------------------------+
>>
>>
>> (by the way, I cannot get rid of the WARNING, but that's not the point
>> here)
>>
>> Here's the relevant section in /etc/openstack-dashboard/local-settings.py:
>> OPENSTACK_HOST = "192.168.202.103"
>> OPENSTACK_KEYSTONE_URL = "http://%s:5000/v2.0"; % OPENSTACK_HOST
>> #OPENSTACK_KEYSTONE_DEFAULT_ROLE = "Member"
>> OPENSTACK_KEYSTONE_DEFAULT_ROLE = "admin"
>>
>> I tried switching from Member to admin role, but still no luck.
>>
>> Nova seems properly configured:
>> grizzly@leonard:~$ nova list
>>
>> grizzly@leonard:~$ echo $?
>> 0
>>
>> Any idea how to make horizon and keystone talking together?
>>
>>
>>
>> michaël
>>
>>
>>
>>
>> Le 13/02/2013 16:13, Razique Mahroua a écrit :
>>
>> Is the dash configured to talk with the Keystone backend?
>> can you run something like $ keystone endoint-list
>> thanks
>>
>> *Razique Mahroua** - **Nuage & Co*
>> razique.mahroua@xxxxxxxxx
>> Tel : +33 9 72 37 94 15 <%2B33%209%2072%2037%2094%2015>
>>
>>
>> Le 12 févr. 2013 à 16:54, Logan McNaughton <logan@xxxxxxxxxxxx> a écrit
>> :
>>
>> I've had this problem before, in my experience it's not a problem with
>> keystone, it's a problem with nova (by the looks of the traceback). I
>> believe it's a bug in Horizon because you'll find a lot of people with this
>> issue if you Google it. I don't have an answer on how to fix it, other than
>> don't fixate on the "EndpointNotFound", look to your nova configs for a
>> solution.
>>
>>
>> On Tue, Feb 12, 2013 at 5:03 AM, Trinath Somanchi <
>> trinath.somanchi@xxxxxxxxx> wrote:
>>
>>> Hi Stackers-
>>>
>>> I have successfully installed folsom in my test setup.
>>> But when I browse Horison, with admin/password as credentials, I get
>>> this error.
>>>
>>> [Tue Feb 12 10:03:16 2013] [error] unable to retrieve service catalog
>>> with token
>>> [Tue Feb 12 10:03:16 2013] [error] Traceback (most recent call last):
>>> [Tue Feb 12 10:03:16 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 132,
>>> in _extract_service_catalog
>>> [Tue Feb 12 10:03:16 2013] [error] endpoint_type='adminURL')
>>> [Tue Feb 12 10:03:16 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/keystoneclient/service_catalog.py", line
>>> 62, in url_for
>>> [Tue Feb 12 10:03:16 2013] [error] raise
>>> exceptions.EndpointNotFound('Endpoint not found.')
>>> [Tue Feb 12 10:03:16 2013] [error] EndpointNotFound: Endpoint not found.
>>> [Tue Feb 12 10:03:17 2013] [error] \x1b[31;1mUnauthorized: n/a (HTTP
>>> 401)\x1b[0m
>>> [Tue Feb 12 10:03:17 2013] [error] Traceback (most recent call last):
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/horizon/usage/base.py", line 93, in
>>> summarize
>>> [Tue Feb 12 10:03:17 2013] [error] self.usage_list =
>>> self.get_usage_list(start, end)
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/horizon/usage/base.py", line 128, in
>>> get_usage_list
>>> [Tue Feb 12 10:03:17 2013] [error] return
>>> api.usage_list(self.request, start, end)
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/horizon/api/nova.py", line 418, in
>>> usage_list
>>> [Tue Feb 12 10:03:17 2013] [error] return [Usage(u) for u in
>>> novaclient(request).usage.list(start, end, True)]
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/novaclient/v1_1/usage.py", line 35, in
>>> list
>>> [Tue Feb 12 10:03:17 2013] [error] "tenant_usages")
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/novaclient/base.py", line 62, in _list
>>> [Tue Feb 12 10:03:17 2013] [error] _resp, body =
>>> self.api.client.get(url)
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/novaclient/client.py", line 239, in get
>>> [Tue Feb 12 10:03:17 2013] [error] return self._cs_request(url,
>>> 'GET', **kwargs)
>>> [Tue Feb 12 10:03:17 2013] [error] File
>>> "/usr/lib/python2.7/dist-packages/novaclient/client.py", line 236, in
>>> _cs_request
>>> [Tue Feb 12 10:03:17 2013] [error] raise ex
>>> [Tue Feb 12 10:03:17 2013] [error] Unauthorized: n/a (HTTP 401)
>>>
>>> It says , I missed some End point Configuration.
>>>
>>> But then, I have configured it correctly.
>>>
>>> Can any one guide me resolving this issue.
>>>
>>> Thanks in advance.
>>>
>>> --
>>> Regards,
>>> ----------------------------------------------
>>> Trinath Somanchi,
>>> +91 9866 235 130 <%2B91%209866%20235%20130>
>>>
>>> _______________________________________________
>>> Mailing list: https://launchpad.net/~openstack
>>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~openstack
>>> More help : https://help.launchpad.net/ListHelp
>>>
>>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>>
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to : openstack@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~openstack
>> More help : https://help.launchpad.net/ListHelp
>>
>>
>
>
> --
> Regards,
> ----------------------------------------------
> Trinath Somanchi,
> +91 9866 235 130
>
>
>
--
Regards,
----------------------------------------------
Trinath Somanchi,
+91 9866 235 130
References
