Ask Your Question
1

Neutron VS Keystone

asked 2016-12-08 03:47:44 -0600

Sofiane68 gravatar image

updated 2016-12-08 03:50:43 -0600

I installed OpenStack in 3 nodes :

  • 1 controller
  • 1 compute
  • 1 network

When I run neutron agent-list or openstack network list

This is the out put in /var/log/neutron/neutron-server.log

2016-12-08 10:39:50.291 20205 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
    2016-12-08 10:39:50.303 20205 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
    2016-12-08 10:39:50.305 20205 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data

My config file :

/etc/neutron/neutron.conf

[DEFAULT]
verbose = True
debug = True
auth_strategy = keystone
core_plugin = ml2
rpc_backend = rabbit
service_plugins = router
bind_host = 0.0.0.0
[keystone_authtoken]
auth_url = http://controller01:35357
auth_uri = http://controller01:5000
memcached_servers = controller01:11211
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutron
[database]
connection = mysql://neutron:neutron@controller01/neutron
[oslo_messaging_rabbit]
rabbit_host = controller01
rabbit_userid = openstack
rabbit_password = rabbit
[nova]
auth_url = http://controller01:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = regionOne
project_name = service
username = nova
password = nova
[oslo_concurrency]
lock_path = /var/lock/neutron

my openstackrc file

export OS_URL=http://controller01:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_PROJECT_NAME=admin
export OS_PROJECT_DOMAIN_NAME=default
export OS_USERNAME=admin
export OS_USER_DOMAIN_NAME=default
export OS_PASSWORD=admin
#export OS_IMAGE_API_VERSION=2
export MY_PRIVATE_IP=controller01
edit retag flag offensive close merge delete

Comments

I guess admin credentials were not sourced.

dbaxps gravatar imagedbaxps ( 2016-12-08 03:50:08 -0600 )edit

no no it is sourced because other commands like openstack user list or glance image-list works but with neutron it says

HttpException: Service Unavailable, 503 Service Unavailable
The server is currently unavailable. Please try again at a later time.
Sofiane68 gravatar imageSofiane68 ( 2016-12-08 04:10:12 -0600 )edit

Check status of Neutron Server && /var/log/neutron/* .log all of them , specially server.log.

Check status of neutron-server service . Looks like it is down.

dbaxps gravatar imagedbaxps ( 2016-12-08 04:38:18 -0600 )edit

root@controller01:/etc/nova# ps -ef | grep neutron

neutron   1716     1  5 14:20 ?        00:00:02 /usr/bin/python /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --log-file=/var/log/neutron/neutron-server.log
Sofiane68 gravatar imageSofiane68 ( 2016-12-08 07:22:31 -0600 )edit

1 answer

Sort by ยป oldest newest most voted
1

answered 2016-12-09 03:27:00 -0600

Sofiane68 gravatar image

I finally resolved it! It was an issue in the /etc/neutron/neuron.conf file

[keystone_authtoken]
auth_url = http://controller01:35357
auth_uri = http://controller01:5000
memcached_servers = controller01:11211 
auth_plugin = password
project_domain_name = default   <-- and not project_domain_id !!!
user_domain_name = default      <-- and not user_domain_id !!!
project_name = service
username = neutron
password = neutron
edit flag offensive delete link more

Comments

good that you have posted. It will help others if you share more details.

SGPJ gravatar imageSGPJ ( 2016-12-09 08:11:17 -0600 )edit

Actually, I think it is a problem version I followed a tuto on the Kilo version and the parameters were project_domain_id & user_domain_id But for the Mitaka version it is project_domain_name and user_domain_name

Sofiane68 gravatar imageSofiane68 ( 2016-12-09 08:32:39 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-12-08 03:47:44 -0600

Seen: 151 times

Last updated: Dec 09 '16