openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #21703
Re: grizzly on ubuntu precise: auth error using glance index
Hi Heiko,
So i removed /etc/keystone/ssl created by 'keystone-manage
pki-setup', because using UUID seem easiest to me. But the probem is
still the same for me (Request returned failure status).
Greeting,
2013/3/8 Heiko Krämer <kraemer@xxxxxxxxxx>:
> Hi Oliver,
>
> think this will solve your problem
>
> In /etc/keystone/keystone.conf
>
> [signing]
> token_format = UUID
> #certfile = /etc/keystone/ssl/certs/signing_cert.pem
> #keyfile = /etc/keystone/ssl/private/signing_key.pem
> #ca_certs = /etc/keystone/ssl/certs/ca.pem
> #key_size = 1024
> #valid_days = 3650
> #ca_password = None
>
>
> and restart Keystone.
>
>
> Greetings
> Heiko
>
> Am 08.03.2013 14:50, schrieb Olivier Archer:
>> Hi,
>> From the documentation here :
>> http://docs.openstack.org/trunk/openstack-compute/install/apt/content/ap_installinggrizzlyubuntuprecise.html
>>
>> I've got problems with 'glance index' :
>> # glance index
>> Authorization Failed: Unable to communicate with identity service:
>> {"error": {"message": "An unexpected error prevented the server from
>> fulfilling your request. Command 'openssl' returned non-zero exit
>> status 3", "code": 500, "title": "Internal Server Error"}}. (HTTP 500)
>>
>> /var/log/keystone/keystone.log give:
>> ERROR [keystone.common.cms] Signing error: Error opening signer
>> certificate /etc/keystone/ssl/certs/signing_cert.pem
>>
>> So I've run
>> # sudo keystone keystone-manage pki-setup
>>
>> to create certs file.
>>
>> But now, 'glance index' give me:
>>
>> Request returned failure status.
>> Invalid OpenStack Identity credentials.
>>
>> and keystone.log give:
>> WARNING [keystone.common.wsgi] Authorization failed. The request you
>> have made requires authentication.
>>
>> my configuration is like the one in the doc:
>>
>> creds:
>> export SERVICE_TOKEN=admin
>> export OS_TENANT_NAME=admin
>> export OS_USERNAME=admin
>> export OS_PASSWORD=openstack
>> export OS_AUTH_URL=http://100.10.10.115:5000/v2.0/
>> export SERVICE_ENDPOINT=http://100.10.10.115:35357/v2.0/
>>
>> i've reinstalled everything from the begining from a fresh installed
>> server, and i'm still stuck in this error...
>>
>>
>>
>>
>
>
> --
> B. Sc. Informatik
> Heiko Krämer
> CIO/Administrator
>
> Twitter: @railshoster
> Avarteq GmbH
> Zweigstelle:
> Prinzessinnenstr. 20, 10969 Berlin
>
> ----
> Geschäftsführer: Alexander Faißt, Dipl.-Inf.(FH) Julian Fischer
> Handelsregister: AG Saarbrücken HRB 17413, Ust-IdNr.: DE262633168
> Sitz:
> Science Park 2
> 66123 Saarbrücken
>
> Tel: +49 (0)681 / 309 64 190
> Fax: +49 (0)681 / 309 64 191
>
> Visit:
> http://www.enterprise-rails.de/
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
--
Olivier Archer
Océanographie spatiale - Ifremer
02 98 22 44 84
References