Ask Your Question
0

"glance index" returns "Invalid OpenStack Identity credentials."

asked 2012-11-07 06:54:34 -0500

theodotos gravatar image

Hi guys,

I am trying to follow the Ubuntu 12.04 Folsom installation guide from http://docs.openstack.org :

http://docs.openstack.org/trunk/openstack-compute/install/apt/content/osfolubuntu-imageservice.html (http://docs.openstack.org/trunk/opens...)

I went straight to Appendix B that describes the installation of a single node openstack system.

I reached the point where I should run "glance index". It gives:

glance index

ID Name Disk Format Container Format Size


Request returned failure status. None Invalid OpenStack Identity credentials.

In the logs I get:

tail /var/log/glance/api.log

2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET /v1/images /detail Accept: process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:45 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/ python2.7/dist-packages/glance/api/middleware/version_negotiation.py:58 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/p ython2.7/dist-packages/glance/api/middleware/version_negotiation.py:70 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images/detail process_request /usr /lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:71 2012-11-07 08:52:08 32427 WARNING keystone.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'Invalid tenant', u'code': 401, u'title': u'Not Authorized'}} 2012-11-07 08:52:08 32427 WARNING keystone.middleware.auth_token [-] Authorization failed for token fffdeab396954d3cbc0785ae51ee5d9f 2012-11-07 08:52:08 32427 INFO keystone.middleware.auth_token [-] Invalid user token - rejecting request

Any idea what am I missing here?

My openstack status is 'newbie' :)

edit retag flag offensive close merge delete

17 answers

Sort by ยป oldest newest most voted
0

answered 2012-11-24 20:47:57 -0500

Nice workaround. But that is not definetely not the expected behaviour. Should create bug report?

edit flag offensive delete link more
0

answered 2012-12-16 09:12:06 -0500

theodotos gravatar image

Guys I gave up on the official guide. I used the scripts of dimtdv instead:

https://github.com/dimtdv/folsom-single-node/blob/master/README.md (https://github.com/dimtdv/folsom-sing...)

They do not work out of the box. There are some requirements first:

1) Setup folsom repo:

cat /etc/apt/sources.list.d/folsom.list

Openstack folsom repositor

deb http://ubuntu-cloud.archive.canonical.com/ubuntu (http://ubuntu-cloud.archive.canonical...) precise-updates/folsom main

2) # apt-get install ntp

/etc/ntp.conf: server http://ntp.ubuntu.com iburst server 127.127.1.0 fudge 127.127.1.0 stratum 10

3) # apt-get install git

4) # git clone https://github.com/dimtdv/folsom-single-node.git (https://github.com/dimtdv/folsom-sing...)

# cd folsom-single-node.git

5) Setup lvm2

apt-get install lvm2

Create a volume group named "nova-volumes" (This is optional but recommended in a production environment. If you skip this a normal file will be created to represent the Volume Group pgysical volume)

6) Setup networking as per README.md

7) Run these scripts after you setup stackrc:

./install-mysql.sh

./install-keystone.sh

./init-keystone.sh

./install-glance.sh

./init-glance.sh

./install-nova.sh

./install-dash.sh

./restart-nova.sh

8) mkdir -p /var/lib/dash/.blackhole

9) login ar http://youserver.dom/horizon

Enjoy!

edit flag offensive delete link more
0

answered 2012-11-08 00:02:49 -0500

gurrapu-narsing gravatar image

Hi,

Even I am getting same error Can anyone help :)

Thanks, Narsing

edit flag offensive delete link more
0

answered 2012-11-07 19:10:51 -0500

Getting similar error after following Appendix B instructions. This also affects the webUI, once logged in and select 'Images'; I am redirected back to the log-in page.

Here's the apache logs: [Wed Nov 07 19:02:32 2012] [error] \x1b[31;1mUnauthorized: HTTPUnauthorized (HTTP 401)\x1b[0m [Wed Nov 07 19:02:32 2012] [error] Traceback (most recent call last): [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/dashboards/syspanel/images/views.py", line 50, in get_data [Wed Nov 07 19:02:32 2012] [error] marker=marker) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/api/glance.py", line 67, in image_list_detailed [Wed Nov 07 19:02:32 2012] [error] *kwargs)) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/v1/images.py", line 130, in paginate [Wed Nov 07 19:02:32 2012] [error] images = self._list(url, "images") [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/base.py", line 53, in _list [Wed Nov 07 19:02:32 2012] [error] resp, body = self.api.json_request('GET', url) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 174, in json_request [Wed Nov 07 19:02:32 2012] [error] resp, body_iter = self._http_request(url, method, *kwargs) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 158, in _http_request [Wed Nov 07 19:02:32 2012] [error] raise exc.from_response(resp) [Wed Nov 07 19:02:32 2012] [error] HTTPUnauthorized: HTTPUnauthorized (HTTP 401) [Wed Nov 07 19:08:24 2012] [error] unable to retrieve service catalog with token [Wed Nov 07 19:08:24 2012] [error] Traceback (most recent call last): [Wed Nov 07 19:08:24 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 132, in _extract_service_catalog [Wed Nov 07 19:08:24 2012] [error] endpoint_type='adminURL') [Wed Nov 07 19:08:24 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/service_catalog.py", line 62, in url_for [Wed Nov 07 19:08:24 2012] [error] raise exceptions.EndpointNotFound('Endpoint not found.') [Wed Nov 07 19:08:24 2012] [error] EndpointNotFound: Endpoint not found.

and logs from /var/log/glance/api.log are consistent with OP.

Thanks

edit flag offensive delete link more
0

answered 2012-11-13 10:45:32 -0500

n-paladi gravatar image

I have had a similar issue and tried to nail it down, but after some attempts gave up and made a fresh deployment, which solved the problem.

edit flag offensive delete link more
0

answered 2012-11-14 14:54:04 -0500

I am also very new to Openstack and getting a similar error when trying to do the following command from the installation documentation.

sudo glance --os-username=admin --os-password=secretword --os-tenant-name=openstackDemo --os-auth-url=http://192.168.xxx.xxx:5000/v2.0 image-create --name="tty-linux-kernel" --disk-format=aki --container-format=aki < ttylinux-uec-amd64-12.1_2.6.35-22_1-vmlinuz

Request returned failure status.

None

Invalid OpenStack Identity credentials.

sudo tail /var/log/glance/api.log

2012-11-14 06:28:31 19941 ERROR keystone.middleware.auth_token [-] HTTP connection exception: [Errno 111] ECONNREFUSED

2012-11-14 06:28:31 19941 WARNING keystone.middleware.auth_token [-] Authorization failed for token 51dbb4057e924f94a0e3e70d40111481

2012-11-14 06:28:31 19941 INFO keystone.middleware.auth_token [-] Invalid user token - deferring reject downstream

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: POST /v1/images Accept: process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:45

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:58

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:70

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:71

2012-11-14 06:29:44 19941 ERROR keystone.middleware.auth_token [-] HTTP connection exception: [Errno 111] ECONNREFUSED

2012-11-14 06:29:44 19941 WARNING keystone.middleware.auth_token [-] Authorization failed for token 6eae7a79fbcb499ea16bce61e2ae7604

2012-11-14 06:29:44 19941 INFO keystone.middleware.auth_token [-] Invalid user token - deferring reject downstream

I noticed in the instructions it says use tenant-name of demo but the other references in that section show openstackDemo for the tenant name. I've tried both. Any help would be appreciated.

edit flag offensive delete link more
0

answered 2012-12-12 14:40:48 -0500

theodotos gravatar image

@alxspb and @hnkhs:

Guys I tried both your suggestion but I still don't see any light in the tunnel:

glance index

No handlers could be found for logger "keystoneclient.client" Invalid user / password (HTTP 401)

I get nothing in the logs even though I did set the 'debug = True' in both glance-registry.conf and glance-api.conf files.

Any other suggestions?

edit flag offensive delete link more
0

answered 2012-11-29 13:32:33 -0500

hnkhs gravatar image

Could fix the problem in my test-environment by changing

admin_tenant_name = service

into

admin_tenant_name = admin

in the files /etc/glance/glance-registry-paste.ini /etc/glance/glance-api-paste.ini

Hope this helps.

edit flag offensive delete link more
0

answered 2012-11-17 13:55:48 -0500

theodotos gravatar image

@nico: Probably it will work if I try to use the default names and passwords used in the guide. But in the end I will need to deploy this in production and I will have to use a password stronger than "openstack". I need to understand what all these values are supposed to be and the docs are not very clear on that.

For example, what is the difference of the SERVICE_TOKEN env variable and the admin_token keynots.conf entry? Are they supposed to be the same? If not then where is SERVICE_TOKEN defined?

edit flag offensive delete link more
0

answered 2012-11-17 14:55:14 -0500

Have done the tutorial step by step and when I reached the "glance index" step I got the same error. What are we missing?

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2012-11-07 06:54:34 -0500

Seen: 1,852 times

Last updated: Mar 13 '13