yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1557079] Re: 'glanceclient.exc.HTTPUnauthorized' even though password is correct

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Sylvain Bauza <sbauza@xxxxxxx>
Date: Tue, 15 Mar 2016 13:44:48 -0000
Reply-to: Bug 1557079 <1557079@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
That sounds a glance.conf issue with it unable to verify that the token
you're passing by Nova is valid.

Marking it as Opinion because I don't really see what Nova should fix.

** Changed in: nova
       Status: New => Opinion

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1557079

Title:
  'glanceclient.exc.HTTPUnauthorized' even though password is correct

Status in OpenStack Compute (nova):
  Opinion

Bug description:
  I am installing OpenStack using Nova and have configured everything according to the OpenStack Liberty installation guide:
  http://docs.openstack.org/liberty/install-guide-ubuntu/nova-verify.html

  Everything has worked fine up to the "Add the Compute Service | Verify operation" section where it tells you to run the 'nova image-list' command on the controller node. When I run that it fails with:
  ----
  ERROR (ClientException): Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'glanceclient.exc.HTTPUnauthorized'> (HTTP 500) (Request-ID: req-d22e03ec-3ad5-4cf6-979b-f22815a511ec)
  ----
  An internet search brings up recommendations to check to check the Nova and Glance configs since the error in the nova-api.log file indicates that the password is wrong:
  ----
  2016-03-14 17:04:54.612 4991 INFO nova.api.openstack.wsgi [req-d22e03ec-3ad5-4cf6-979b-f22815a511ec 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] HTTP exception thrown: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'glanceclient.exc.HTTPUnauthorized'>
  2016-03-14 17:04:54.613 4991 INFO nova.osapi_compute.wsgi.server [req-d22e03ec-3ad5-4cf6-979b-f22815a511ec 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] 192.168.0.129 "GET /v2/a0049134d7444d55a8714a2d0d94f2c1/images/detail HTTP/1.1" status: 500 len: 438 time: 0.1273541
  ----

  However I have rechecked both configs and everything is, or seems to
  be, correct. If I run 'glance image-list' it works fine, it is 'nova
  image-list' that fails.

  My nova.conf file:
  ----
  [DEFAULT]
  my_ip = 192.168.0.129
  dhcpbridge_flagfile=/etc/nova/nova.conf
  dhcpbridge=/usr/bin/nova-dhcpbridge
  logdir=/var/log/nova
  state_path=/var/lib/nova
  lock_path=/var/lock/nova
  force_dhcp_release=True
  libvirt_use_virtio_for_bridges=True
  verbose=True
  ec2_private_dns_show_ip=True
  api_paste_config=/etc/nova/api-paste.ini
  #enabled_apis=ec2,osapi_compute,metadata
  enabled_apis=osapi_compute,metadata
  auth_strategy = keystone
  network_api_class = nova.network.neutronv2.api.API
  security_group_api = neutron
  linuxnet_interface_driver = nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver
  firewall_driver = nova.virt.firewall.NoopFirewallDriver

  [keystone_authtoken]
  auth_uri = http://controller:5000
  auth_url = http://controller:35357
  auth_plugin = password
  project_domain_id = default
  user_domain_id = default
  project_name = service
  username = nova
  password = password

  rpc_backend = rabbit

  [oslo_messaging_rabbit]
  rabbit_host = controller
  rabbit_userid = openstack
  rabbit_password = password

  [oslo_concurrency]
  lock_path = /var/lib/nova/tmp

  [database]
  connection = mysql+pymysql://nova:password@controller/nova

  [vnc]
  vncserver_listen = $my_ip
  vncserver_proxyclient_address = $my_ip

  [glance]
  host = 192.168.0.129
  ----

  The errors from my glance-api.log file:
  ----
  2016-03-14 17:03:42.357 5006 INFO nova.metadata.wsgi.server [-] (5006) wsgi starting up on http://0.0.0.0:8775/
  2016-03-14 17:04:54.345 4991 INFO nova.osapi_compute.wsgi.server [req-86f098d0-434c-4b93-b8d1-b1a80168bed8 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] 192.168.0.129 "GET /v2/ HTTP/1.1" status: 200 len: 572 time: 0.4849169
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions [req-d22e03ec-3ad5-4cf6-979b-f22815a511ec 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] Unexpected exception in API method
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions Traceback (most recent call last):
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/api/openstack/extensions.py", line 478, in wrapped
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     return f(*args, **kwargs)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/api/openstack/compute/images.py", line 145, in detail
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     **page_params)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/image/api.py", line 68, in get_all
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     return session.detail(context, **kwargs)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 284, in detail
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     for image in images:
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/v1/images.py", line 254, in list
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     for image in paginate(params, return_request_id):
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/v1/images.py", line 238, in paginate
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     images, resp = self._list(url, "images")
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/v1/images.py", line 63, in _list
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     resp, body = self.client.get(url)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 280, in get
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     return self._request('GET', url, **kwargs)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 272, in _request
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     resp, body_iter = self._handle_response(resp)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 93, in _handle_response
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions     raise exc.from_response(resp, resp.content)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions HTTPUnauthorized: 401 Unauthorized: Authentication required (HTTP 401)
  2016-03-14 17:04:54.610 4991 ERROR nova.api.openstack.extensions 
  2016-03-14 17:04:54.612 4991 INFO nova.api.openstack.wsgi [req-d22e03ec-3ad5-4cf6-979b-f22815a511ec 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] HTTP exception thrown: Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible.
  <class 'glanceclient.exc.HTTPUnauthorized'>
  2016-03-14 17:04:54.613 4991 INFO nova.osapi_compute.wsgi.server [req-d22e03ec-3ad5-4cf6-979b-f22815a511ec 80ce7bd86a444065bd9ceace0bf1f87d a0049134d7444d55a8714a2d0d94f2c1 - - -] 192.168.0.129 "GET /v2/a0049134d7444d55a8714a2d0d94f2c1/images/detail HTTP/1.1" status: 500 len: 438 time: 0.1273541
  ----

  The 401 error suggests that there is a login ID/password that is
  incorrect yet the credentials in the keystone_authtoken section are
  correct. I am wondering if there is a section of config missing from
  the nova.cfg file though I fear I cannot work out what it might be.

  Your suggestions would be appreciated.

  Nova version:
  ----
  # dpkg -l |grep nova
  ii  nova-api                                              2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - API frontend
  ii  nova-cert                                             2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - certificate management
  ii  nova-common                                           2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - common files
  ii  nova-conductor                                        2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - conductor service
  ii  nova-consoleauth                                      2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - Console Authenticator
  ii  nova-novncproxy                                       2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - NoVNC proxy
  ii  nova-scheduler                                        2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute - virtual machine scheduler
  ii  python-nova                                           2:12.0.1-0ubuntu1~cloud0                            all          OpenStack Compute Python libraries
  ii  python-novaclient                                     2:2.30.1-1~cloud0                                   all          client library for OpenStack Compute API
  ----

  
  |\/|artin

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1557079/+subscriptions
References

[Bug 1557079] [NEW] 'glanceclient.exc.HTTPUnauthorized' even though password is correct
From: Martin Ward, 2016-03-14