← Back to team overview

yahoo-eng-team team mailing list archive

  1. yahoo-eng-team team
  2. Mailing list archive
  3. Message #33378

[Bug 1461473] [NEW] Unable to call neutron v2 API from nova: AuthorizationFailure: No valid authentication is available

  Thread Previous • Date Previous • • Thread Next 
Public bug reported:

When I call neutron v2 API from nova driver, it reported
AuthorizationFailure, I've no idea about how this happen and in previous
verion, there is no problem:

Traceback (most recent call last):
  File "/opt/mydriver/compute/manager.py", line 2006, in _fix_instance_nw_info
    data = self.network_api.list_ports(context, **search_opts)
  File "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 724, in list_ports
    return get_client(context).list_ports(**search_opts)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 102, in with_params
    ret = self.function(instance, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 535, in list_ports
    **_params)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 307, in list
    for r in self._pagination(collection, path, **params):
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 321, in _pagination
    res = self.get(path, params=params)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 293, in get
    headers=headers, params=params)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 270, in retry_request
    headers=headers, params=params)
  File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 200, in do_request
    content_type=self.content_type())
  File "/usr/lib/python2.7/site-packages/neutronclient/client.py", line 306, in do_request
    return self.request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/neutronclient/client.py", line 294, in request
    resp = super(SessionClient, self).request(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneclient/adapter.py", line 95, in request
    return self.session.request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneclient/utils.py", line 318, in inner
    return func(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneclient/session.py", line 317, in request
    raise exceptions.AuthorizationFailure(msg)
AuthorizationFailure: No valid authentication is available


I checked the /etc/nova/nova.conf and /etc/neutron/neutron.conf, it shows:
nova.conf:
[keystone_authtoken]
auth_uri = http://myip:5000/v2.0
identity_uri = http://myip:35357/
auth_version = v2.0
admin_tenant_name = service
admin_user = nova
admin_password = W0lCTTp2MV1iY3JhZmducHgtcGJ6Y2hncg==
signing_dir = /var/cache/nova/api
hash_algorithms = md5
insecure = true

[neutron]
url = http://myip:9696
insecure = true
auth_strategy = keystone
admin_tenant_name = service
admin_username = neutron
admin_password = W0lCTTp2MV1iY3JhZmducHgtYXJnamJleA==
admin_auth_url = http://myip:5000/v2.0
timeout = 30
region_name =
ovs_bridge = br-int
extension_sync_interval = 600
cafile =
service_metadata_proxy = true
metadata_proxy_shared_secret = W0lCTTp2MV1hcmhnZWJhX3pyZ25xbmduX2ZycGVyZw==


neutron.conf:
[keystone_authtoken]
auth_uri = http://myip:5000/v2.0
identity_uri = http://myip:35357/
auth_version = v2.0
admin_tenant_name = service
admin_user = neutron
admin_password = W0lCTTp2MV1iY3JhZmducHgtYXJnamJleA==
signing_dir = /var/lib/neutron/keystone-signing
hash_algorithms = md5
insecure = false


environment version:
~]# rpm -aq | grep nova
python-novaclient-2.23.0-2.ibm.el7.noarch
openstack-nova-novncproxy-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-compute-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-conductor-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-network-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-cells-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-common-2015.1.0.1-201505291730.ibm.el7.127.noarch
python-nova-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-api-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-console-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-compute-prereqs-2013.1-201503302013.ibm.2.x86_64
openstack-nova-scheduler-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-objectstore-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-2015.1.0.1-201505291730.ibm.el7.127.noarch
openstack-nova-cert-2015.1.0.1-201505291730.ibm.el7.127.noarch

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1461473

Title:
  Unable to call neutron v2 API from nova: AuthorizationFailure: No
  valid authentication is available

Status in OpenStack Compute (Nova):
  New

Bug description:
  When I call neutron v2 API from nova driver, it reported
  AuthorizationFailure, I've no idea about how this happen and in
  previous verion, there is no problem:

  Traceback (most recent call last):
    File "/opt/mydriver/compute/manager.py", line 2006, in _fix_instance_nw_info
      data = self.network_api.list_ports(context, **search_opts)
    File "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 724, in list_ports
      return get_client(context).list_ports(**search_opts)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 102, in with_params
      ret = self.function(instance, *args, **kwargs)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 535, in list_ports
      **_params)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 307, in list
      for r in self._pagination(collection, path, **params):
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 321, in _pagination
      res = self.get(path, params=params)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 293, in get
      headers=headers, params=params)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 270, in retry_request
      headers=headers, params=params)
    File "/usr/lib/python2.7/site-packages/neutronclient/v2_0/client.py", line 200, in do_request
      content_type=self.content_type())
    File "/usr/lib/python2.7/site-packages/neutronclient/client.py", line 306, in do_request
      return self.request(url, method, **kwargs)
    File "/usr/lib/python2.7/site-packages/neutronclient/client.py", line 294, in request
      resp = super(SessionClient, self).request(*args, **kwargs)
    File "/usr/lib/python2.7/site-packages/keystoneclient/adapter.py", line 95, in request
      return self.session.request(url, method, **kwargs)
    File "/usr/lib/python2.7/site-packages/keystoneclient/utils.py", line 318, in inner
      return func(*args, **kwargs)
    File "/usr/lib/python2.7/site-packages/keystoneclient/session.py", line 317, in request
      raise exceptions.AuthorizationFailure(msg)
  AuthorizationFailure: No valid authentication is available

  
  I checked the /etc/nova/nova.conf and /etc/neutron/neutron.conf, it shows:
  nova.conf:
  [keystone_authtoken]
  auth_uri = http://myip:5000/v2.0
  identity_uri = http://myip:35357/
  auth_version = v2.0
  admin_tenant_name = service
  admin_user = nova
  admin_password = W0lCTTp2MV1iY3JhZmducHgtcGJ6Y2hncg==
  signing_dir = /var/cache/nova/api
  hash_algorithms = md5
  insecure = true

  [neutron]
  url = http://myip:9696
  insecure = true
  auth_strategy = keystone
  admin_tenant_name = service
  admin_username = neutron
  admin_password = W0lCTTp2MV1iY3JhZmducHgtYXJnamJleA==
  admin_auth_url = http://myip:5000/v2.0
  timeout = 30
  region_name =
  ovs_bridge = br-int
  extension_sync_interval = 600
  cafile =
  service_metadata_proxy = true
  metadata_proxy_shared_secret = W0lCTTp2MV1hcmhnZWJhX3pyZ25xbmduX2ZycGVyZw==

  
  neutron.conf:
  [keystone_authtoken]
  auth_uri = http://myip:5000/v2.0
  identity_uri = http://myip:35357/
  auth_version = v2.0
  admin_tenant_name = service
  admin_user = neutron
  admin_password = W0lCTTp2MV1iY3JhZmducHgtYXJnamJleA==
  signing_dir = /var/lib/neutron/keystone-signing
  hash_algorithms = md5
  insecure = false

  
  environment version:
  ~]# rpm -aq | grep nova
  python-novaclient-2.23.0-2.ibm.el7.noarch
  openstack-nova-novncproxy-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-compute-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-conductor-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-network-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-cells-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-common-2015.1.0.1-201505291730.ibm.el7.127.noarch
  python-nova-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-api-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-console-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-compute-prereqs-2013.1-201503302013.ibm.2.x86_64
  openstack-nova-scheduler-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-objectstore-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-2015.1.0.1-201505291730.ibm.el7.127.noarch
  openstack-nova-cert-2015.1.0.1-201505291730.ibm.el7.127.noarch

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1461473/+subscriptions

Follow ups

References

  Thread Previous • Date Previous • • Thread Next