yahoo-eng-team team mailing list archive

[David Kranz <dkranz@xxxxxxxxxx>]

Public bug reported:

I installed a vanilla devstack except for setting SERVICE_HOST in
localrc so I could run tempest from another machine. Tempest fails
trying to connect to adminURL and it seems to be because port 35357 is
only open locally. The conf file comment says:

# The base admin endpoint URL for keystone that are advertised                  
# to clients (NOTE: this does NOT affect how keystone listens                   
# for connections) (string value)                                               
#admin_endpoint=http://localhost:%(admin_port)s/                                

But this from  netstat. I would expect 35357 to be the same as the others. It is also possible this is a devstack issue but
I'm not sure so starting here.

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 *:iscsi-target          *:*                     LISTEN     
tcp        0      0 *:40956                 *:*                     LISTEN     
tcp        0      0 localhost:35357         *:*                     LISTEN     
tcp        0      0 *:6080                  *:*                     LISTEN     
tcp        0      0 *:6081                  *:*                     LISTEN     
tcp        0      0 *:3333                  *:*                     LISTEN     
tcp        0      0 *:8773                  *:*                     LISTEN     
tcp        0      0 *:8774                  *:*                     LISTEN     
tcp        0      0 *:8775                  *:*                     LISTEN     
tcp        0      0 *:9191                  *:*                     LISTEN     
tcp        0      0 *:8776                  *:*                     LISTEN     
tcp        0      0 *:5000                  *:*                     LISTEN     
... elided ...

And catalog:+-------------+-----------------------------------+
|   Property  |               Value               |
+-------------+-----------------------------------+
|   adminURL  | http://dkranz-devstack:35357/v2.0 |
|      id     |  39932d3dcf4340a98727294ed5ec71b8 |
| internalURL |  http://dkranz-devstack:5000/v2.0 |
|  publicURL  |  http://dkranz-devstack:5000/v2.0 |
|    region   |             RegionOne             |
+-------------+-----------------------------------+

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1283803

Title:
  keystone listens locally on admin port

Status in OpenStack Identity (Keystone):
  New

Bug description:
  I installed a vanilla devstack except for setting SERVICE_HOST in
  localrc so I could run tempest from another machine. Tempest fails
  trying to connect to adminURL and it seems to be because port 35357 is
  only open locally. The conf file comment says:

  # The base admin endpoint URL for keystone that are advertised                  
  # to clients (NOTE: this does NOT affect how keystone listens                   
  # for connections) (string value)                                               
  #admin_endpoint=http://localhost:%(admin_port)s/                                

  But this from  netstat. I would expect 35357 to be the same as the others. It is also possible this is a devstack issue but
  I'm not sure so starting here.

  Active Internet connections (only servers)
  Proto Recv-Q Send-Q Local Address           Foreign Address         State      
  tcp        0      0 *:iscsi-target          *:*                     LISTEN     
  tcp        0      0 *:40956                 *:*                     LISTEN     
  tcp        0      0 localhost:35357         *:*                     LISTEN     
  tcp        0      0 *:6080                  *:*                     LISTEN     
  tcp        0      0 *:6081                  *:*                     LISTEN     
  tcp        0      0 *:3333                  *:*                     LISTEN     
  tcp        0      0 *:8773                  *:*                     LISTEN     
  tcp        0      0 *:8774                  *:*                     LISTEN     
  tcp        0      0 *:8775                  *:*                     LISTEN     
  tcp        0      0 *:9191                  *:*                     LISTEN     
  tcp        0      0 *:8776                  *:*                     LISTEN     
  tcp        0      0 *:5000                  *:*                     LISTEN     
  ... elided ...

  And catalog:+-------------+-----------------------------------+
  |   Property  |               Value               |
  +-------------+-----------------------------------+
  |   adminURL  | http://dkranz-devstack:35357/v2.0 |
  |      id     |  39932d3dcf4340a98727294ed5ec71b8 |
  | internalURL |  http://dkranz-devstack:5000/v2.0 |
  |  publicURL  |  http://dkranz-devstack:5000/v2.0 |
  |    region   |             RegionOne             |
  +-------------+-----------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1283803/+subscriptions