← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1257617] [NEW] Nova is unable to authenticate via keystone

 

Public bug reported:

I updated the code yesterday with devstack. The latest nova code gave me
the following error, when I tried any nova command.

==============================================n-api==================================================
2013-12-04 13:49:40.151 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
2013-12-04 13:49:40.472 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2013-12-04 13:49:40.975 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
2013-12-04 13:49:41.008 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2013-12-04 13:49:42.012 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
2013-12-04 13:49:42.053 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2013-12-04 13:49:44.058 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
2013-12-04 13:49:44.100 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2013-12-04 13:49:44.103 DEBUG keystoneclient.middleware.auth_token [-] Token validation failure. from (pid=7023) _validate_user_token /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:826
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token Traceback (most recent call last):
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 821, in _validate_user_token
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     data = self.verify_uuid_token(user_token, retry)
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 1096, in verify_uuid_token
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     self.auth_version = self._choose_api_version()
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 519, in _choose_api_version
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     versions_supported_by_server = self._get_supported_versions()
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 539, in _get_supported_versions
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     response, data = self._json_request('GET', '/')
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 749, in _json_request
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     response = self._http_request(method, path, **kwargs)
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 714, in _http_request
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     raise NetworkError('Unable to communicate with keystone')
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token NetworkError: Unable to communicate with keystone
2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token 
2013-12-04 13:49:44.110 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token 4517bf0837d30dcf7b9cd438075c9d92
2013-12-04 13:49:44.111 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request
2013-12-04 13:49:44.114 INFO nova.osapi_compute.wsgi.server [-] 9.119.148.201 "GET /v2/26b6d3afa22340a4aa5896068ab58f97/extensions HTTP/1.1" status: 401 len: 197 time: 3.9667039

2013-12-04 13:49:44.117 DEBUG keystoneclient.middleware.auth_token [-] Authenticating user token from (pid=7023) __call__ /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:568
2013-12-04 13:49:44.121 DEBUG keystoneclient.middleware.auth_token [-] Removing headers from request environment: X-Identity-Status,X-Domain-Id,X-Domain-Name,X-Project-Id,X-Project-Name,X-Project-Domain-Id,X-Project-Domain-Name,X-User-Id,X-User-Name,X-User-Domain-Id,X-User-Domain-Name,X-Roles,X-Service-Catalog,X-User,X-Tenant-Id,X-Tenant-Name,X-Tenant,X-Role from (pid=7023) _remove_auth_headers /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:627
2013-12-04 13:49:44.121 WARNING keystoneclient.middleware.auth_token [-] Unable to find authentication token in headers
================================================================================================

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1257617

Title:
  Nova is unable to authenticate via keystone

Status in OpenStack Compute (Nova):
  New

Bug description:
  I updated the code yesterday with devstack. The latest nova code gave
  me the following error, when I tried any nova command.

  ==============================================n-api==================================================
  2013-12-04 13:49:40.151 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
  2013-12-04 13:49:40.472 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
  error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
  2013-12-04 13:49:40.975 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
  2013-12-04 13:49:41.008 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
  error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
  2013-12-04 13:49:42.012 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
  2013-12-04 13:49:42.053 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:504: 
  error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
  2013-12-04 13:49:44.058 INFO requests.packages.urllib3.connectionpool [-] Starting new HTTPS connection (1): 9.119.148.201
  2013-12-04 13:49:44.100 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
  2013-12-04 13:49:44.103 DEBUG keystoneclient.middleware.auth_token [-] Token validation failure. from (pid=7023) _validate_user_token /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:826
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token Traceback (most recent call last):
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 821, in _validate_user_token
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     data = self.verify_uuid_token(user_token, retry)
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 1096, in verify_uuid_token
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     self.auth_version = self._choose_api_version()
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 519, in _choose_api_version
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     versions_supported_by_server = self._get_supported_versions()
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 539, in _get_supported_versions
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     response, data = self._json_request('GET', '/')
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 749, in _json_request
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     response = self._http_request(method, path, **kwargs)
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token   File "/opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py", line 714, in _http_request
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token     raise NetworkError('Unable to communicate with keystone')
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token NetworkError: Unable to communicate with keystone
  2013-12-04 13:49:44.103 TRACE keystoneclient.middleware.auth_token 
  2013-12-04 13:49:44.110 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token 4517bf0837d30dcf7b9cd438075c9d92
  2013-12-04 13:49:44.111 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request
  2013-12-04 13:49:44.114 INFO nova.osapi_compute.wsgi.server [-] 9.119.148.201 "GET /v2/26b6d3afa22340a4aa5896068ab58f97/extensions HTTP/1.1" status: 401 len: 197 time: 3.9667039

  2013-12-04 13:49:44.117 DEBUG keystoneclient.middleware.auth_token [-] Authenticating user token from (pid=7023) __call__ /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:568
  2013-12-04 13:49:44.121 DEBUG keystoneclient.middleware.auth_token [-] Removing headers from request environment: X-Identity-Status,X-Domain-Id,X-Domain-Name,X-Project-Id,X-Project-Name,X-Project-Domain-Id,X-Project-Domain-Name,X-User-Id,X-User-Name,X-User-Domain-Id,X-User-Domain-Name,X-Roles,X-Service-Catalog,X-User,X-Tenant-Id,X-Tenant-Name,X-Tenant,X-Role from (pid=7023) _remove_auth_headers /opt/stack/python-keystoneclient/keystoneclient/middleware/auth_token.py:627
  2013-12-04 13:49:44.121 WARNING keystoneclient.middleware.auth_token [-] Unable to find authentication token in headers
  ================================================================================================

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1257617/+subscriptions


Follow ups

References