openstack team mailing list archive

Thread
Date
Re: [openstack-dev] Compute endpoint auth problem.

To: OpenStack Development Mailing List <openstack-dev@xxxxxxxxxxxxxxxxxxx>
From: Vishvananda Ishaya <vishvananda@xxxxxxxxx>
Date: Thu, 21 Mar 2013 09:49:59 -0700
Cc: OpenStack general mailing list <openstack@xxxxxxxxxxxxxxxxxxx>
In-reply-to: <7B126B3E57C53144B367AF8AB3C3519A14CBB6D3@G6W2490.americas.hpqcorp.net>
Try nova --debug --os-region-name RegionTwo image-list and see where it is connecting. I guess you have another typo.

Btw, in the future the dev list is not the right place for these questions.

Should be done on openstack@xxxxxxxxxxxxxxxxxxx

Vish
On Mar 21, 2013, at 9:34 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer@xxxxxx> wrote:

> Thanks for the heads up Ishaya. I was messing with the tenant_id. I have changed to use the '$(tenant_id)s' and now seems to be correct!
> 
> 
> root@regions:~# nova --os-region-name RegionTwo image-list
> ERROR: ConnectionRefused: '[Errno 111] Connection refused'
> 
> I know it's a generic error, but do you have any clue?
> 
> Thanks again,
> Gabriel.
> 
> 
> -----Original Message-----
> From: Vishvananda Ishaya [mailto:vishvananda@xxxxxxxxx] 
> Sent: quinta-feira, 21 de março de 2013 12:55
> To: OpenStack Development Mailing List
> Subject: Re: [openstack-dev] Compute endpoint auth problem.
> 
> Your endpoint is wrong in region two.
> 
> It looks like you hardcoded admin as the tenant_id in region two which is never correct. Tenant_id
> in keystone is usually a long uuid string without dashes.
> 
> You likely need to replace the '8774' with $(compute_port)s and the 'admin' with '$(tenant_id)s'
> 
> Vish
> 
> On Mar 21, 2013, at 6:45 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer@xxxxxx> wrote:
> 
>> Hello folks,
>> 
>> I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
>> 
>> I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
>> 
>> $ keystone endpoint-list
>> 
>> Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
>> region		| RegionOne
>> publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> 
>> Id 		| 6a3e1123d2924048acec4bd06009413e 
>> region 		| RegionTwo 
>> publicURL 	| http://172.16.103.231:8774/v2/admin          
>> internalURL 	| http://172.16.103.231:8774/v2/admin           
>> adminURL 	| http://172.16.103.231:8774/v2/admin           
>> service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> So in this case the RegionOne endpoint works as seen below:
>> 
>> stack@regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
>> +--------------------------------------+---------------------------------+--------+--------+
>> | ID                                   | Name                            | Status | Server |
>> +--------------------------------------+---------------------------------+--------+--------+
>> | 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
>> | 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
>> | 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
>> +--------------------------------------+---------------------------------+--------+--------+
>> 
>> But using the RegionTwo gives me a http 401:
>> 
>> stack@regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
>> ERROR: n/a (HTTP 401)
>> 
>> 
>> I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
>> 
>> Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
>> 
>> Thanks,
>> Gabriel.
>> 
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev@xxxxxxxxxxxxxxxxxxx
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev@xxxxxxxxxxxxxxxxxxx
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev@xxxxxxxxxxxxxxxxxxx
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev