openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #21805
Swift with Keystone problem
I'm having trouble with Swift, using Keystone auth, on Folsom.
When I try something simple like 'swift stat', there are two errors:
Firstly a logging error:
<147>proxy-server STDOUT: No handlers could be found for logger
"keystone.middleware.auth_token"
More importantly, the authorization fails:
Account HEAD failed:
http://<ip>:8080/v1/AUTH_dfb9c6d687be4d34bceee256cc3cb123 401
Unauthorized
With SWIFTCLIENT_DEBUG set, I can see there are two separate requests:
curl -i http://<ip>:8080/v1/AUTH_dfb9c6d687be4d34bceee256cc3cb123 -X
HEAD -H "X-Auth-Token: da38c4407cff40b69f236ef0da9d73e8"
and two instances of:
curl -i http://<ip>:8080/v1/AUTH_dfb9c6d687be4d34bceee256cc3cb123 -X
HEAD -H "X-Auth-Token: 0fc76ee28c2e43f0929c7c3ef158830d"
The proxy-server log for these requests is:
proxy-server Authorizing as anonymous
which is puzzling. The keystone log shows that real local credentials
are being sent:
2013-03-12 12:46:11 DEBUG [keystone.common.wsgi]
******************** REQUEST BODY ********************
2013-03-12 12:46:11 DEBUG [keystone.common.wsgi] {"auth":
{"tenantName": "admin", "passwordCredentials": {"username": "admin",
"password": "<password>"}}}
then
2013-03-12 12:46:11 WARNING [keystone.common.wsgi] Authorization
failed. Invalid user / password from <ip>
2013-03-12 12:46:11 DEBUG [keystone.common.wsgi] {"error":
{"message": "Invalid user / password", "code": 401, "title": "Not
Authorized"}}
Keystone auth works for all the other services.
Any suggestions appreciated.
Adam
Follow ups