yahoo-eng-team team mailing list archive

[Jason Ellul <1323090@xxxxxxxxxxxxxxxxxx>]

I now believe it to be a firewall issue.

It seems curl is automatically tunnelling through our firewall proxy
while the client is trying a direct connection. We do have a direct link
to the Openstack provider but it seems the firewall is not routing the
packets correctly or still blocking the required ports.

Thanks

Jason

** Changed in: glance
       Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1323090

Title:
  Glance returns Connection refused while curl works

Status in OpenStack Image Registry and Delivery Service (Glance):
  Invalid

Bug description:
  Hi All,

  I have installed python-glanceclient and python-swiftclient on my mac
  and while swift works glance returns Error communicating with
  http://XXXXXX.org.au:9292 [Errno 61] Connection refused.

  >swift stat
         Account: AUTH_377
      Containers: 314
         Objects: 3736
           Bytes: 696672270715
  Meta Access-Control-Allow-Origin: https://XXXXXX.edu.au
  Meta Container-Meta-Access-Control-Allow-Origin: https://XXXXXX.edu.au
  Meta Temp-Url-Key: helloworld
     X-Timestamp: 1339561703.62743
    Content-Type: text/plain; charset=utf-8
   Accept-Ranges: bytes

  but
  >glance index
  ID                                   Name                           Disk Format          Container Format     Size
  ------------------------------------ ------------------------------ -------------------- -------------------- --------------
  Error communicating with http://XXXXX.org.au:9292 [Errno 61] Connection refused

  If I turn on debug and run the curl command I get a response:
  i.e.
  >curl -i -X GET -H 'X-Auth-Token: XXX...' -H 'Content-Type: application/json' -H 'User-Agent: python-glanceclient' http://XXXXX.org.au:9292/v1/images/detail?limit=10

  returns

  HTTP/1.1 200 OK
  Content-Type: application/json; charset=UTF-8
  Content-Length: 11371
  X-Openstack-Request-Id: req-XXXX-XXX-XXXX-XXXX-XXXXX
  Date: Wed, 07 May 2014 00:38:33 GMT
  Proxy-Connection: Keep-Alive
  Connection: Keep-Alive
  Age: 0

  {"images": [{"status": "active", "name": "RSHINY_RCPP_FULL",
  "deleted": false, "container_format": "bare", ...}]}

  So the curl command works.

  If anyone has any ideas as to what is causing the connection refused I
  would greatly appreciate any advice they may have.

  The environment is set by the cloud provider through a bash script:
  #!/bin/bash

  # With the addition of Keystone, to use an openstack cloud you should
  # authenticate against keystone, which returns a **Token** and **Service
  # Catalog**.  The catalog contains the endpoint for all services the
  # user/tenant has access to - including nova, glance, keystone, swift.
  #
  # *NOTE*: Using the 2.0 *auth api* does not mean that compute api is 2.0.  We
  # will use the 1.1 *compute api*
  export OS_AUTH_URL=https://XXXXX.org.au:5000/v2.0/

  # With the addition of Keystone we have standardized on the term **tenant**
  # as the entity that owns the resources.
  export OS_TENANT_ID=XXX
  export OS_TENANT_NAME="XXXXX"

  # In addition to the owning entity (tenant), openstack stores the entity
  # performing the action as the **user**.
  export OS_USERNAME="XXXXXX@xxxxxxxxxxxxx"

  # With Keystone you pass the keystone password.
  echo "Please enter your OpenStack Password: "
  read -sr OS_PASSWORD_INPUT
  export OS_PASSWORD=$OS_PASSWORD_INPUT

  Thanks,

  Jason

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1323090/+subscriptions