yahoo-eng-team team mailing list archive

[Kai Qiang Wu <wkqwu@xxxxxxxxxx>]

I checked and tried some ways, and found it was because of keystone-signing related mess issue.
I cleaned the /root/keystone-signing/ and also for nova /tmp/keystone-signing-nova/. it can work now.
So mark it invalid

** Changed in: keystone
       Status: New => Invalid

** Changed in: keystone
     Assignee: (unassigned) => Kai Qiang Wu (wkqwu)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1154123

Title:
  PKI setting can not work in other service(like glance, nova) ,only
  UUID work

Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  First, UUID setting can work in other services (glance nova and so on)

  But when I configured the keystone with PKI, 
  (seems only keystone have such PKI setting, like below:
  [signing]
  token_format = PKI
  certfile = /etc/keystone/ssl/certs/signing_cert.pem
  keyfile = /etc/keystone/ssl/private/signing_key.pem
  ca_certs = /etc/keystone/ssl/certs/ca.pem


   1) keystone itself can work, like post tokens, and use that token to
  get endpoints,

  2) The issue happened in other service, (glance, nova), the PKI would
  fail with that.

  # glance image-list
  Request returned failure status.
  Invalid OpenStack Identity credentials.

  
  I only find one issue in log, (it only print once, for no handlers could be found for logger, following call would not print any error msg, so I did not find more interesting log message)

  2013-03-12 22:33:26.458 5898 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET //v1/images/detail Accept:  process_request /data/openstack/glance/glance/api/middleware/version_negotiation.py:46
  2013-03-12 22:33:26.461 5898 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /data/openstack/glance/glance/api/middleware/version_negotiation.py:59
  2013-03-12 22:33:26.462 5898 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /data/openstack/glance/glance/api/middleware/version_negotiation.py:71
  2013-03-12 22:33:26.464 5898 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images/detail process_request /data/openstack/glance/glance/api/middleware/version_negotiation.py:72
  No handlers could be found for logger "keystoneclient.common.cms"

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1154123/+subscriptions