Revision history [back]

click to hide/show revision 1
initial version

Greetings Bernd,

Thank you for your reply.

here is what the VirtualHost look like with Ocata:

# ls -l /etc/httpd/conf.d/wsgi-keystone.conf
lrwxrwxrwx 1 root root 38 Jul 17 11:43 /etc/httpd/conf.d/wsgi-keystone.conf -> /usr/share/keystone/wsgi-keystone.conf

ls -l /usr/share/keystone/wsgi-keystone.conf
-rw-r--r-- 1 root keystone 1837 Jul 17 15:02 /usr/share/keystone/wsgi-keystone.conf

...
<VirtualHost *:35357>
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    LimitRequestBody 114688
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/httpd/keystone.log
    CustomLog /var/log/httpd/keystone_access.log combined

    <Directory /usr/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>
...

And here is what the package deployed:

# ls -l /usr/bin/keystone-wsgi-admin
-rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin

   # ls -l /usr/bin/keystone-*
    -rwxr-xr-x 1 root root  159 May 11 10:27 /usr/bin/keystone-manage
    -rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin
    -rwxr-xr-x 1 root root 1812 May 11 10:27 /usr/bin/keystone-wsgi-public

I am not so familiar with WSGI but it doesn't seem to me the VirtualHost is misconfigured.

Greetings Bernd,

Thank you for your reply.

here is what the VirtualHost look like with Ocata:

# ls -l /etc/httpd/conf.d/wsgi-keystone.conf
lrwxrwxrwx 1 root root 38 Jul 17 11:43 /etc/httpd/conf.d/wsgi-keystone.conf -> /usr/share/keystone/wsgi-keystone.conf

ls -l /usr/share/keystone/wsgi-keystone.conf
-rw-r--r-- 1 root keystone 1837 Jul 17 15:02 /usr/share/keystone/wsgi-keystone.conf

...
<VirtualHost *:35357>
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    LimitRequestBody 114688
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/httpd/keystone.log
    CustomLog /var/log/httpd/keystone_access.log combined

    <Directory /usr/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>
...

And here is what the package deployed:

# ls -l /usr/bin/keystone-wsgi-admin
-rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin

   # ls -l /usr/bin/keystone-*
    -rwxr-xr-x 1 root root  159 May 11 10:27 /usr/bin/keystone-manage
    -rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin
    -rwxr-xr-x 1 root root 1812 May 11 10:27 /usr/bin/keystone-wsgi-public

I am not so familiar with WSGI but it doesn't seem to me the VirtualHost is misconfigured.

Here is an update with the debug output of what was required :

[root@srv-virt-stack1 log]# openstack catalog list
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Internal Server Error (HTTP 500)
[root@srv-virt-stack1 log]# openstack catalog list --debug
START with options: [u'catalog', u'list', u'--debug']
options: Namespace(access_key='', access_secret='***', access_token='***', access_token_endpoint='', access_token_type='', auth_type='', auth_url='http://srv-virt-stack1:35357/v3/', cacert=None, cert='', client_id='', client_secret='***', cloud='', code='', consumer_key='', consumer_secret='***', debug=True, default_domain='default', default_domain_id='', default_domain_name='', deferred_help=False, discovery_endpoint='', domain_id='', domain_name='', endpoint='', identity_provider='', insecure=None, interface='', key='', log_file=None, old_profile=None, openid_scope='', os_beta_command=False, os_compute_api_version='', os_identity_api_version='3', os_image_api_version='', os_network_api_version='', os_object_api_version='', os_project_id=None, os_project_name=None, os_volume_api_version='', passcode='', password='***', profile=None, project_domain_id='', project_domain_name='Default', project_id='', project_name='admin', protocol='', redirect_uri='', region_name='', timing=False, token='***', trust_id='', url='', user_domain_id='', user_domain_name='Default', user_id='', username='admin', verbose_level=3, verify=None)
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
defaults: {u'auth_type': 'password', u'status': u'active', u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'api_timeout': None, u'baremetal_api_version': u'1', u'image_api_version': u'2', u'container_infra_api_version': u'1', u'metering_api_version': u'2', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'cacert': None, u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', 'verify': True, u'identity_api_version': u'2.0', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'container_api_version': u'1', u'dns_api_version': u'2', u'object_store_api_version': u'1', u'interface': None, u'disable_vendor_agent': {}}
cloud cfg: {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
compute API version 2, cmd group openstack.compute.v2
network API version 2, cmd group openstack.network.v2
image API version 2, cmd group openstack.image.v2
volume API version 2, cmd group openstack.volume.v2
identity API version 3, cmd group openstack.identity.v3
object_store API version 1, cmd group openstack.object_store.v1
neutronclient API version 2, cmd group openstack.neutronclient.v2
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
command: catalog list -> openstackclient.identity.v3.catalog.ListCatalog
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Using auth plugin: password
Using parameters {'username': 'admin', 'project_name': 'admin', 'user_domain_name': 'Default', 'auth_url': 'http://srv-virt-stack1:35357/v3/', 'password': '***', 'project_domain_name': 'Default'}
Get auth_ref
REQ: curl -g -i -X GET http://srv-virt-stack1:35357/v3/ -H "Accept: application/json" -H "User-Agent: osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Starting new HTTP connection (1): srv-virt-stack1
"GET /v3/ HTTP/1.1" 500 527
RESP: [500] Date: Tue, 18 Jul 2017 14:47:17 GMT Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 Content-Length: 527 Connection: close Content-Type: text/html; charset=iso-8859-1
RESP BODY: Omitted, Content-Type is set to text/html; charset=iso-8859-1. Only application/json responses have their bodies logged.

Request returned failure status: 500
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Making authentication request to http://srv-virt-stack1:35357/v3/auth/tokens
Resetting dropped connection: srv-virt-stack1
"POST /v3/auth/tokens HTTP/1.1" 500 527
Request returned failure status: 500
Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)
clean_up ListCatalog: Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 135, in run
    ret_val = super(OpenStackShell, self).run(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 279, in run
    result = self.run_subcommand(remainder)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 180, in run_subcommand
    ret_value = super(OpenStackShell, self).run_subcommand(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)

END return value: 1

Greetings Bernd,

Thank you for your reply.

here is what the VirtualHost look like with Ocata:

# ls -l /etc/httpd/conf.d/wsgi-keystone.conf
lrwxrwxrwx 1 root root 38 Jul 17 11:43 /etc/httpd/conf.d/wsgi-keystone.conf -> /usr/share/keystone/wsgi-keystone.conf

ls -l /usr/share/keystone/wsgi-keystone.conf
-rw-r--r-- 1 root keystone 1837 Jul 17 15:02 /usr/share/keystone/wsgi-keystone.conf

...
<VirtualHost *:35357>
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    LimitRequestBody 114688
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/httpd/keystone.log
    CustomLog /var/log/httpd/keystone_access.log combined

    <Directory /usr/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>
...

And here is what the package deployed:

# ls -l /usr/bin/keystone-wsgi-admin
-rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin

   # ls -l /usr/bin/keystone-*
    -rwxr-xr-x 1 root root  159 May 11 10:27 /usr/bin/keystone-manage
    -rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin
    -rwxr-xr-x 1 root root 1812 May 11 10:27 /usr/bin/keystone-wsgi-public

I am not so familiar with WSGI but it doesn't seem to me the VirtualHost is misconfigured.

Here is an update with the debug output of what was required :

[root@srv-virt-stack1 log]# openstack catalog list
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Internal Server Error (HTTP 500)
[root@srv-virt-stack1 log]# openstack catalog list --debug
START with options: [u'catalog', u'list', u'--debug']
options: Namespace(access_key='', access_secret='***', access_token='***', access_token_endpoint='', access_token_type='', auth_type='', auth_url='http://srv-virt-stack1:35357/v3/', cacert=None, cert='', client_id='', client_secret='***', cloud='', code='', consumer_key='', consumer_secret='***', debug=True, default_domain='default', default_domain_id='', default_domain_name='', deferred_help=False, discovery_endpoint='', domain_id='', domain_name='', endpoint='', identity_provider='', insecure=None, interface='', key='', log_file=None, old_profile=None, openid_scope='', os_beta_command=False, os_compute_api_version='', os_identity_api_version='3', os_image_api_version='', os_network_api_version='', os_object_api_version='', os_project_id=None, os_project_name=None, os_volume_api_version='', passcode='', password='***', profile=None, project_domain_id='', project_domain_name='Default', project_id='', project_name='admin', protocol='', redirect_uri='', region_name='', timing=False, token='***', trust_id='', url='', user_domain_id='', user_domain_name='Default', user_id='', username='admin', verbose_level=3, verify=None)
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
defaults: {u'auth_type': 'password', u'status': u'active', u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'api_timeout': None, u'baremetal_api_version': u'1', u'image_api_version': u'2', u'container_infra_api_version': u'1', u'metering_api_version': u'2', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'cacert': None, u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', 'verify': True, u'identity_api_version': u'2.0', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'container_api_version': u'1', u'dns_api_version': u'2', u'object_store_api_version': u'1', u'interface': None, u'disable_vendor_agent': {}}
cloud cfg: {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
compute API version 2, cmd group openstack.compute.v2
network API version 2, cmd group openstack.network.v2
image API version 2, cmd group openstack.image.v2
volume API version 2, cmd group openstack.volume.v2
identity API version 3, cmd group openstack.identity.v3
object_store API version 1, cmd group openstack.object_store.v1
neutronclient API version 2, cmd group openstack.neutronclient.v2
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
command: catalog list -> openstackclient.identity.v3.catalog.ListCatalog
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Using auth plugin: password
Using parameters {'username': 'admin', 'project_name': 'admin', 'user_domain_name': 'Default', 'auth_url': 'http://srv-virt-stack1:35357/v3/', 'password': '***', 'project_domain_name': 'Default'}
Get auth_ref
REQ: curl -g -i -X GET http://srv-virt-stack1:35357/v3/ -H "Accept: application/json" -H "User-Agent: osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Starting new HTTP connection (1): srv-virt-stack1
"GET /v3/ HTTP/1.1" 500 527
RESP: [500] Date: Tue, 18 Jul 2017 14:47:17 GMT Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 Content-Length: 527 Connection: close Content-Type: text/html; charset=iso-8859-1
RESP BODY: Omitted, Content-Type is set to text/html; charset=iso-8859-1. Only application/json responses have their bodies logged.

Request returned failure status: 500
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Making authentication request to http://srv-virt-stack1:35357/v3/auth/tokens
Resetting dropped connection: srv-virt-stack1
"POST /v3/auth/tokens HTTP/1.1" 500 527
Request returned failure status: 500
Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)
clean_up ListCatalog: Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 135, in run
    ret_val = super(OpenStackShell, self).run(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 279, in run
    result = self.run_subcommand(remainder)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 180, in run_subcommand
    ret_value = super(OpenStackShell, self).run_subcommand(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)

END return value: 1

UPDATE: Sadly, the DEBUG LogLevel shows nothing worthly to catch, except for the part where mod_wsgi doesn't seem to start process 'keystone-admin', while explicitely showing the start of the 'keystone-public' process.

As pointed out earlier, this leads me to think there is an issue with the VirtualHost configuration. Do you see anything else from this?

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.273811 2017] [suexec:notice] [pid 16509] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Jul 19 09:27:40.289163 2017] [auth_digest:notice] [pid 16509] AH01757: generating secret for digest authentication ...
[Wed Jul 19 09:27:40.289189 2017] [auth_digest:debug] [pid 16509] mod_auth_digest.c(250): AH01759: done
[Wed Jul 19 09:27:40.289898 2017] [slotmem_shm:debug] [pid 16509] mod_slotmem_shm.c(448): AH02301: attach looking for /run/httpd/slotmem-shm-mod_heartmonitor.shm
[Wed Jul 19 09:27:40.289916 2017] [lbmethod_heartbeat:notice] [pid 16509] AH02282: No slotmem from mod_heartmonitor
[Wed Jul 19 09:27:40.289976 2017] [:debug] [pid 16509] mod_wsgi.c(10530): mod_wsgi (pid=16509): Socket for 'keystone-public' is '/run/httpd/wsgi.16509.0.1.sock'.
[Wed Jul 19 09:27:40.295620 2017] [mpm_prefork:notice] [pid 16509] AH00163: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Wed Jul 19 09:27:40.295651 2017] [mpm_prefork:info] [pid 16509] AH00164: Server built: Apr 12 2017 21:03:28
[Wed Jul 19 09:27:40.295669 2017] [core:notice] [pid 16509] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Wed Jul 19 09:27:40.295686 2017] [mpm_prefork:debug] [pid 16509] prefork.c(1005): AH00165: Accept mutex: sysvsem (default: sysvsem)
[root@srv-virt-stack1 httpd]# [Wed Jul 19 09:27:40.301137 2017] [proxy:debug] [pid 16518] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.301168 2017] [proxy:debug] [pid 16518] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.301198 2017] [proxy:debug] [pid 16518] proxy_util.c(1936): AH00931: initialized single connection worker in child 16518 for (*)
[Wed Jul 19 09:27:40.301221 2017] [:info] [pid 16518] mod_wsgi (pid=16518): Initializing Python.
[Wed Jul 19 09:27:40.310717 2017] [:info] [pid 16514] mod_wsgi (pid=16514): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.311250 2017] [:info] [pid 16514] mod_wsgi (pid=16514): Initializing Python.
[Wed Jul 19 09:27:40.321832 2017] [:info] [pid 16515] mod_wsgi (pid=16515): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.322350 2017] [:info] [pid 16515] mod_wsgi (pid=16515): Initializing Python.
[Wed Jul 19 09:27:40.332775 2017] [:info] [pid 16512] mod_wsgi (pid=16512): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.333274 2017] [:info] [pid 16512] mod_wsgi (pid=16512): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.343178 mod_wsgi (pid=16512): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.344231 2017] [proxy:debug] [pid 16516] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.344256 2017] [proxy:debug] [pid 16516] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.344288 2017] [proxy:debug] [pid 16516] proxy_util.c(1936): AH00931: initialized single connection worker in child 16516 for (*)
[Wed Jul 19 09:27:40.344305 2017] [:info] [pid 16516] mod_wsgi (pid=16516): Initializing Python.
[Wed Jul 19 09:27:40.353876 2017] [:info] [pid 16516] mod_wsgi (pid=16516): Attach interpreter ''.
[Wed Jul 19 09:27:40.354785 2017] [proxy:debug] [pid 16517] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.354809 2017] [proxy:debug] [pid 16517] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.354845 2017] [proxy:debug] [pid 16517] proxy_util.c(1936): AH00931: initialized single connection worker in child 16517 for (*)
[Wed Jul 19 09:27:40.354861 2017] [:info] [pid 16517] mod_wsgi (pid=16517): Initializing Python.
[Wed Jul 19 09:27:40.363960 2017] [:info] [pid 16517] mod_wsgi (pid=16517): Attach interpreter ''.
[Wed Jul 19 09:27:40.364764 2017] [proxy:debug] [pid 16520] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.364787 2017] [proxy:debug] [pid 16520] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.364808 2017] [proxy:debug] [pid 16520] proxy_util.c(1936): AH00931: initialized single connection worker in child 16520 for (*)
[Wed Jul 19 09:27:40.364823 2017] [:info] [pid 16520] mod_wsgi (pid=16520): Initializing Python.
[Wed Jul 19 09:27:40.373530 2017] [:info] [pid 16520] mod_wsgi (pid=16520): Attach interpreter ''.
[Wed Jul 19 09:27:40.373845 2017] [:info] [pid 16513] mod_wsgi (pid=16513): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.374292 2017] [:info] [pid 16513] mod_wsgi (pid=16513): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.383164 mod_wsgi (pid=16513): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.384108 2017] [proxy:debug] [pid 16519] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.384130 2017] [proxy:debug] [pid 16519] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.384155 2017] [proxy:debug] [pid 16519] proxy_util.c(1936): AH00931: initialized single connection worker in child 16519 for (*)
[Wed Jul 19 09:27:40.384171 2017] [:info] [pid 16519] mod_wsgi (pid=16519): Initializing Python.
[Wed Jul 19 09:27:40.392892 2017] [:info] [pid 16519] mod_wsgi (pid=16519): Attach interpreter ''.
[Wed Jul 19 09:27:40.393209 2017] [:info] [pid 16511] mod_wsgi (pid=16511): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.393656 2017] [:info] [pid 16511] mod_wsgi (pid=16511): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.402401 mod_wsgi (pid=16511): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.405746 2017] [:info] [pid 16518] mod_wsgi (pid=16518): Attach interpreter ''.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.406422 mod_wsgi (pid=16515): Attach interpreter ''.
2017-07-19 09:27:40.408128 mod_wsgi (pid=16514): Attach interpreter ''.



[root@srv-virt-stack1 httpd]# openstack project create --domain default --description "Projet 0 - Service" service



==> /var/log/httpd/keystone_access.log <==
192.168.122.119 - - [19/Jul/2017:09:23:01 +0200] "GET /v3/ HTTP/1.1" 500 527 "-" "osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:23:01.305693 AH01626: authorization result of Require all granted: granted
2017-07-19 09:23:01.305713 AH01626: authorization result of <RequireAny>: granted
2017-07-19 09:23:01.305835 AH01626: authorization result of Require all granted: granted
2017-07-19 09:23:01.305848 AH01626: authorization result of <RequireAny>: granted
2017-07-19 09:23:01.305899 No WSGI daemon process called 'keystone-admin' has been configured: /usr/bin/keystone-wsgi-admin

==> /var/log/httpd/keystone_access.log <==
192.168.122.119 - - [19/Jul/2017:09:23:01 +0200] "POST /v3/auth/tokens HTTP/1.1" 500 527 "-" "osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Internal Server Error (HTTP 500)

UPDATE: Bernd helped me solve this through.

the /usr/share/keystone/wsgi-keystone.conf file coming along with the openstack-keystone-11.0.1-1.el7.noarch package seems to have an error in it.

One line is missing on the keystone-admin VirtualHost :

<VirtualHost *:35357>
    WSGIDaemonProcess keystone-admin processes=1 threads=1 user=keystone group=keystone display-name=%{GROUP}
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    LimitRequestBody 114688
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/httpd/keystone.log
    CustomLog /var/log/httpd/keystone_access.log combined
    LogLevel DEBUG
    <Directory /usr/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>

Adding the first line (WSGIDaemonProcess ..) solved this issue. Thank you all for your support, I am now moving on with the installation guide ! I will keep you posted if I find any other issues.


Following, the logs that helped find the issue

Greetings Bernd,

Thank you for your reply.

here is what the VirtualHost look like with Ocata:

# ls -l /etc/httpd/conf.d/wsgi-keystone.conf
lrwxrwxrwx 1 root root 38 Jul 17 11:43 /etc/httpd/conf.d/wsgi-keystone.conf -> /usr/share/keystone/wsgi-keystone.conf

ls -l /usr/share/keystone/wsgi-keystone.conf
-rw-r--r-- 1 root keystone 1837 Jul 17 15:02 /usr/share/keystone/wsgi-keystone.conf

...
<VirtualHost *:35357>
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    LimitRequestBody 114688
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    ErrorLog /var/log/httpd/keystone.log
    CustomLog /var/log/httpd/keystone_access.log combined

    <Directory /usr/bin>
        <IfVersion >= 2.4>
            Require all granted
        </IfVersion>
        <IfVersion < 2.4>
            Order allow,deny
            Allow from all
        </IfVersion>
    </Directory>
</VirtualHost>
...

And here is what the package deployed:

# ls -l /usr/bin/keystone-wsgi-admin
-rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin

   # ls -l /usr/bin/keystone-*
    -rwxr-xr-x 1 root root  159 May 11 10:27 /usr/bin/keystone-manage
    -rwxr-xr-x 1 root root 1807 May 11 10:27 /usr/bin/keystone-wsgi-admin
    -rwxr-xr-x 1 root root 1812 May 11 10:27 /usr/bin/keystone-wsgi-public

I am not so familiar with WSGI but it doesn't seem to me the VirtualHost is misconfigured.

Here is an update with the debug output of what was required :

[root@srv-virt-stack1 log]# openstack catalog list
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Internal Server Error (HTTP 500)
[root@srv-virt-stack1 log]# openstack catalog list --debug
START with options: [u'catalog', u'list', u'--debug']
options: Namespace(access_key='', access_secret='***', access_token='***', access_token_endpoint='', access_token_type='', auth_type='', auth_url='http://srv-virt-stack1:35357/v3/', cacert=None, cert='', client_id='', client_secret='***', cloud='', code='', consumer_key='', consumer_secret='***', debug=True, default_domain='default', default_domain_id='', default_domain_name='', deferred_help=False, discovery_endpoint='', domain_id='', domain_name='', endpoint='', identity_provider='', insecure=None, interface='', key='', log_file=None, old_profile=None, openid_scope='', os_beta_command=False, os_compute_api_version='', os_identity_api_version='3', os_image_api_version='', os_network_api_version='', os_object_api_version='', os_project_id=None, os_project_name=None, os_volume_api_version='', passcode='', password='***', profile=None, project_domain_id='', project_domain_name='Default', project_id='', project_name='admin', protocol='', redirect_uri='', region_name='', timing=False, token='***', trust_id='', url='', user_domain_id='', user_domain_name='Default', user_id='', username='admin', verbose_level=3, verify=None)
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
defaults: {u'auth_type': 'password', u'status': u'active', u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'api_timeout': None, u'baremetal_api_version': u'1', u'image_api_version': u'2', u'container_infra_api_version': u'1', u'metering_api_version': u'2', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'cacert': None, u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', 'verify': True, u'identity_api_version': u'2.0', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'container_api_version': u'1', u'dns_api_version': u'2', u'object_store_api_version': u'1', u'interface': None, u'disable_vendor_agent': {}}
cloud cfg: {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
compute API version 2, cmd group openstack.compute.v2
network API version 2, cmd group openstack.network.v2
image API version 2, cmd group openstack.image.v2
volume API version 2, cmd group openstack.volume.v2
identity API version 3, cmd group openstack.identity.v3
object_store API version 1, cmd group openstack.object_store.v1
neutronclient API version 2, cmd group openstack.neutronclient.v2
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
command: catalog list -> openstackclient.identity.v3.catalog.ListCatalog
Auth plugin password selected
auth_config_hook(): {'auth_type': 'password', 'beta_command': False, u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', 'cacert': None, 'auth_url': 'http://srv-virt-stack1:35357/v3/', u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', 'networks': [], u'image_api_version': u'2', 'verify': True, u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': 'admin', u'container_infra_api_version': u'1', 'verbose_level': 3, 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', 'auth': {'user_domain_name': 'Default', 'project_name': 'admin', 'project_domain_name': 'Default'}, 'default_domain': 'default', u'container_api_version': u'1', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', 'timing': False, 'password': '***', u'application_catalog_api_version': u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', 'deferred_help': False, u'identity_api_version': '3', u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', u'status': u'active', 'debug': True, u'interface': None, u'disable_vendor_agent': {}}
Using auth plugin: password
Using parameters {'username': 'admin', 'project_name': 'admin', 'user_domain_name': 'Default', 'auth_url': 'http://srv-virt-stack1:35357/v3/', 'password': '***', 'project_domain_name': 'Default'}
Get auth_ref
REQ: curl -g -i -X GET http://srv-virt-stack1:35357/v3/ -H "Accept: application/json" -H "User-Agent: osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Starting new HTTP connection (1): srv-virt-stack1
"GET /v3/ HTTP/1.1" 500 527
RESP: [500] Date: Tue, 18 Jul 2017 14:47:17 GMT Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 Content-Length: 527 Connection: close Content-Type: text/html; charset=iso-8859-1
RESP BODY: Omitted, Content-Type is set to text/html; charset=iso-8859-1. Only application/json responses have their bodies logged.

Request returned failure status: 500
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Making authentication request to http://srv-virt-stack1:35357/v3/auth/tokens
Resetting dropped connection: srv-virt-stack1
"POST /v3/auth/tokens HTTP/1.1" 500 527
Request returned failure status: 500
Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)
clean_up ListCatalog: Internal Server Error (HTTP 500)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 135, in run
    ret_val = super(OpenStackShell, self).run(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 279, in run
    result = self.run_subcommand(remainder)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 180, in run_subcommand
    ret_value = super(OpenStackShell, self).run_subcommand(argv)
  File "/usr/lib/python2.7/site-packages/cliff/app.py", line 393, in run_subcommand
    self.prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/openstackclient/shell.py", line 198, in prepare_to_run_command
    return super(OpenStackShell, self).prepare_to_run_command(cmd)
  File "/usr/lib/python2.7/site-packages/osc_lib/shell.py", line 457, in prepare_to_run_command
    self.client_manager.auth_ref
  File "/usr/lib/python2.7/site-packages/osc_lib/clientmanager.py", line 215, in auth_ref
    self._auth_ref = self.auth.get_auth_ref(self.session)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/generic/base.py", line 198, in get_auth_ref
    return self._plugin.get_auth_ref(session, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
    authenticated=False, log=False, **rkwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 766, in post
    return self.request(url, 'POST', **kwargs)
  File "/usr/lib/python2.7/site-packages/osc_lib/session.py", line 40, in request
    resp = super(TimingSession, self).request(url, method, **kwargs)
  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 655, in request
    raise exceptions.from_response(resp, method, url)
InternalServerError: Internal Server Error (HTTP 500)

END return value: 1

UPDATE: Sadly, the DEBUG LogLevel shows nothing worthly to catch, except for the part where mod_wsgi doesn't seem to start process 'keystone-admin', while explicitely showing the start of the 'keystone-public' process.

As pointed out earlier, this leads me to think there is an issue with the VirtualHost configuration. Do you see anything else from this?

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.273811 2017] [suexec:notice] [pid 16509] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Jul 19 09:27:40.289163 2017] [auth_digest:notice] [pid 16509] AH01757: generating secret for digest authentication ...
[Wed Jul 19 09:27:40.289189 2017] [auth_digest:debug] [pid 16509] mod_auth_digest.c(250): AH01759: done
[Wed Jul 19 09:27:40.289898 2017] [slotmem_shm:debug] [pid 16509] mod_slotmem_shm.c(448): AH02301: attach looking for /run/httpd/slotmem-shm-mod_heartmonitor.shm
[Wed Jul 19 09:27:40.289916 2017] [lbmethod_heartbeat:notice] [pid 16509] AH02282: No slotmem from mod_heartmonitor
[Wed Jul 19 09:27:40.289976 2017] [:debug] [pid 16509] mod_wsgi.c(10530): mod_wsgi (pid=16509): Socket for 'keystone-public' is '/run/httpd/wsgi.16509.0.1.sock'.
[Wed Jul 19 09:27:40.295620 2017] [mpm_prefork:notice] [pid 16509] AH00163: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal operations
[Wed Jul 19 09:27:40.295651 2017] [mpm_prefork:info] [pid 16509] AH00164: Server built: Apr 12 2017 21:03:28
[Wed Jul 19 09:27:40.295669 2017] [core:notice] [pid 16509] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Wed Jul 19 09:27:40.295686 2017] [mpm_prefork:debug] [pid 16509] prefork.c(1005): AH00165: Accept mutex: sysvsem (default: sysvsem)
[root@srv-virt-stack1 httpd]# [Wed Jul 19 09:27:40.301137 2017] [proxy:debug] [pid 16518] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.301168 2017] [proxy:debug] [pid 16518] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.301198 2017] [proxy:debug] [pid 16518] proxy_util.c(1936): AH00931: initialized single connection worker in child 16518 for (*)
[Wed Jul 19 09:27:40.301221 2017] [:info] [pid 16518] mod_wsgi (pid=16518): Initializing Python.
[Wed Jul 19 09:27:40.310717 2017] [:info] [pid 16514] mod_wsgi (pid=16514): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.311250 2017] [:info] [pid 16514] mod_wsgi (pid=16514): Initializing Python.
[Wed Jul 19 09:27:40.321832 2017] [:info] [pid 16515] mod_wsgi (pid=16515): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.322350 2017] [:info] [pid 16515] mod_wsgi (pid=16515): Initializing Python.
[Wed Jul 19 09:27:40.332775 2017] [:info] [pid 16512] mod_wsgi (pid=16512): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.333274 2017] [:info] [pid 16512] mod_wsgi (pid=16512): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.343178 mod_wsgi (pid=16512): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.344231 2017] [proxy:debug] [pid 16516] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.344256 2017] [proxy:debug] [pid 16516] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.344288 2017] [proxy:debug] [pid 16516] proxy_util.c(1936): AH00931: initialized single connection worker in child 16516 for (*)
[Wed Jul 19 09:27:40.344305 2017] [:info] [pid 16516] mod_wsgi (pid=16516): Initializing Python.
[Wed Jul 19 09:27:40.353876 2017] [:info] [pid 16516] mod_wsgi (pid=16516): Attach interpreter ''.
[Wed Jul 19 09:27:40.354785 2017] [proxy:debug] [pid 16517] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.354809 2017] [proxy:debug] [pid 16517] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.354845 2017] [proxy:debug] [pid 16517] proxy_util.c(1936): AH00931: initialized single connection worker in child 16517 for (*)
[Wed Jul 19 09:27:40.354861 2017] [:info] [pid 16517] mod_wsgi (pid=16517): Initializing Python.
[Wed Jul 19 09:27:40.363960 2017] [:info] [pid 16517] mod_wsgi (pid=16517): Attach interpreter ''.
[Wed Jul 19 09:27:40.364764 2017] [proxy:debug] [pid 16520] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.364787 2017] [proxy:debug] [pid 16520] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.364808 2017] [proxy:debug] [pid 16520] proxy_util.c(1936): AH00931: initialized single connection worker in child 16520 for (*)
[Wed Jul 19 09:27:40.364823 2017] [:info] [pid 16520] mod_wsgi (pid=16520): Initializing Python.
[Wed Jul 19 09:27:40.373530 2017] [:info] [pid 16520] mod_wsgi (pid=16520): Attach interpreter ''.
[Wed Jul 19 09:27:40.373845 2017] [:info] [pid 16513] mod_wsgi (pid=16513): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.374292 2017] [:info] [pid 16513] mod_wsgi (pid=16513): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.383164 mod_wsgi (pid=16513): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.384108 2017] [proxy:debug] [pid 16519] proxy_util.c(1843): AH00925: initializing worker proxy:reverse shared
[Wed Jul 19 09:27:40.384130 2017] [proxy:debug] [pid 16519] proxy_util.c(1885): AH00927: initializing worker proxy:reverse local
[Wed Jul 19 09:27:40.384155 2017] [proxy:debug] [pid 16519] proxy_util.c(1936): AH00931: initialized single connection worker in child 16519 for (*)
[Wed Jul 19 09:27:40.384171 2017] [:info] [pid 16519] mod_wsgi (pid=16519): Initializing Python.
[Wed Jul 19 09:27:40.392892 2017] [:info] [pid 16519] mod_wsgi (pid=16519): Attach interpreter ''.
[Wed Jul 19 09:27:40.393209 2017] [:info] [pid 16511] mod_wsgi (pid=16511): Starting process 'keystone-public' with uid=163, gid=163 and threads=1.
[Wed Jul 19 09:27:40.393656 2017] [:info] [pid 16511] mod_wsgi (pid=16511): Initializing Python.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.402401 mod_wsgi (pid=16511): Attach interpreter ''.

==> /var/log/httpd/error_log <==
[Wed Jul 19 09:27:40.405746 2017] [:info] [pid 16518] mod_wsgi (pid=16518): Attach interpreter ''.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:27:40.406422 mod_wsgi (pid=16515): Attach interpreter ''.
2017-07-19 09:27:40.408128 mod_wsgi (pid=16514): Attach interpreter ''.



[root@srv-virt-stack1 httpd]# openstack project create --domain default --description "Projet 0 - Service" service



==> /var/log/httpd/keystone_access.log <==
192.168.122.119 - - [19/Jul/2017:09:23:01 +0200] "GET /v3/ HTTP/1.1" 500 527 "-" "osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.

==> /var/log/httpd/keystone.log <==
2017-07-19 09:23:01.305693 AH01626: authorization result of Require all granted: granted
2017-07-19 09:23:01.305713 AH01626: authorization result of <RequireAny>: granted
2017-07-19 09:23:01.305835 AH01626: authorization result of Require all granted: granted
2017-07-19 09:23:01.305848 AH01626: authorization result of <RequireAny>: granted
2017-07-19 09:23:01.305899 No WSGI daemon process called 'keystone-admin' has been configured: /usr/bin/keystone-wsgi-admin

==> /var/log/httpd/keystone_access.log <==
192.168.122.119 - - [19/Jul/2017:09:23:01 +0200] "POST /v3/auth/tokens HTTP/1.1" 500 527 "-" "osc-lib/1.3.0 keystoneauth1/2.18.0 python-requests/2.11.1 CPython/2.7.5"
Internal Server Error (HTTP 500)