Ask Your Question

Revision history [back]

I am facing the same issue with all environment variables configured.

[root@controller keystone]# echo $OS_USERNAME admin [root@controller keystone]# echo $OS_PASSWORD admin [root@controller keystone]# echo $OS_TENANT_NAME admin [root@controller keystone]# echo $OS_AUTH_URL http://controller:35357/v3 [root@controller keystone]# [root@controller keystone]# [root@controller keystone]# echo $OS_URL http://controller:35357/v3

[root@controller keystone]# keystone --os-auth-url http://controller:35357/v3 --os-username admin --os-password admin --os-tenant-name admin user-list /usr/lib/python2.7/site-packages/keystoneclient/shell.py:64: DeprecationWarning: The keystone CLI is deprecated in favor of python-openstackclient. For a Python library, continue using python-keystoneclient. 'python-keystoneclient.', DeprecationWarning) WARNING: unsupported identity-api-version 3, falling back to 2.0 /usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py:145: DeprecationWarning: Constructing an instance of the keystoneclient.v2_0.client.Client class without a session is deprecated as of the 1.7.0 release and may be removed in the 2.0.0 release. 'the 2.0.0 release.', DeprecationWarning) /usr/lib/python2.7/site-packages/keystoneclient/v2_0/client.py:147: DeprecationWarning: Using the 'tenant_name' argument is deprecated in version '1.7.0' and will be removed in version '2.0.0', please use the 'project_name' argument instead super(Client, self).__init__(*kwargs) /usr/lib/python2.7/site-packages/debtcollector/renames.py:43: DeprecationWarning: Using the 'tenant_id' argument is deprecated in version '1.7.0' and will be removed in version '2.0.0', please use the 'project_id' argument instead return f(args, **kwargs) /usr/lib/python2.7/site-packages/keystoneclient/httpclient.py:376: DeprecationWarning: Constructing an HTTPClient instance without using a session is deprecated as of the 1.7.0 release and may be removed in the 2.0.0 release. 'the 2.0.0 release.', DeprecationWarning) Authorization Failed: The resource could not be found. (HTTP 404) (Request-ID: req-7365b6da-5b50-48fa-8acb-42d099a1a875)

When I checked the keystone logs, this is the log i see:

016-07-22 19:22:38.326 28569 WARNING keystone.common.wsgi [req-ff4a3793-838b-424f-bd93-ebd571c4e456 - - - - -] Authorization failed. The request you have made requires authentication. from fe80::a00:27ff:fe88:6c25

2016-07-22 19:30:21.690 28573 INFO keystone.common.wsgi [req-b0d596e6-0084-4384-80ba-0602855f40a7 - - - - -] GET http://controller:35357/v3/users

2016-07-22 19:30:21.691 28573 WARNING keystone.common.controller [req-b0d596e6-0084-4384-80ba-0602855f40a7 - - - - -] RBAC: Bypassing authorization

2016-07-24 21:35:10.747 1879 INFO keystone.common.wsgi [req-27bfd7ea-cfb7-43d9-90c7-6217d821e333 - - - - -] GET http://controller:35357/v3/

2016-07-24 21:35:12.440 1874 INFO keystone.common.wsgi [req-d73d2648-9eef-481f-a64a-4c79ddcb3a49 - - - - -] POST http://controller:35357/v3/auth/tokens

2016-07-24 21:35:12.948 1874 WARNING keystone.common.wsgi [req-d73d2648-9eef-481f-a64a-4c79ddcb3a49 - - - - -] Authorization failed. The request you have made requires authentication. from fe80::a00:27ff:fe88:6c25

2016-07-24 21:53:21.887 1888 INFO keystone.common.kvs.core [req-99b5c3c9-0c14-4cbd-a17e-57269ccf9e24 - - - - -] Using default dogpile sha1_mangle_key as KVS region token-driver key_mangler

2016-07-24 21:53:21.890 1888 WARNING keystone.middleware.core [req-99b5c3c9-0c14-4cbd-a17e-57269ccf9e24 - - - - -] RBAC: Invalid token

2016-07-24 21:53:21.890 1888 WARNING keystone.common.wsgi [req-99b5c3c9-0c14-4cbd-a17e-57269ccf9e24 - - - - -] The request you have made requires authentication.

I have reinstalled all the services including keystone.

/etc/httpd/conf.d/wsgi-keystone.conf file has the below entry and httpd service is running.

<virtualhost *:35357="">

WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

WSGIProcessGroup keystone-admin

WSGIScriptAlias / /usr/bin/keystone-wsgi-admin

WSGIApplicationGroup %{GLOBAL}

WSGIPassAuthorization On

<IfVersion >= 2.4>

  ErrorLogFormat "%{cu}t %M"

</IfVersion>

ErrorLog /var/log/httpd/keystone-error.log

CustomLog /var/log/httpd/keystone-access.log combined

<Directory /usr/bin>

    <IfVersion >= 2.4>

        Require all granted

    </IfVersion>

    <IfVersion < 2.4>

        Order allow,deny

        Allow from all

    </IfVersion>

</Directory>

</virtualhost>