"glance index" returns "Invalid OpenStack Identity credentials."

asked 2012-11-07 06:54:34 -0600

theodotos gravatar image

Hi guys,

I am trying to follow the Ubuntu 12.04 Folsom installation guide from http://docs.openstack.org :

http://docs.openstack.org/trunk/openstack-compute/install/apt/content/osfolubuntu-imageservice.html (http://docs.openstack.org/trunk/opens...)

I went straight to Appendix B that describes the installation of a single node openstack system.

I reached the point where I should run "glance index". It gives:

glance index

ID Name Disk Format Container Format Size


Request returned failure status. None Invalid OpenStack Identity credentials.

In the logs I get:

tail /var/log/glance/api.log

2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET /v1/images /detail Accept: process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:45 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/ python2.7/dist-packages/glance/api/middleware/version_negotiation.py:58 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/p ython2.7/dist-packages/glance/api/middleware/version_negotiation.py:70 2012-11-07 08:52:08 32427 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images/detail process_request /usr /lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:71 2012-11-07 08:52:08 32427 WARNING keystone.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'Invalid tenant', u'code': 401, u'title': u'Not Authorized'}} 2012-11-07 08:52:08 32427 WARNING keystone.middleware.auth_token [-] Authorization failed for token fffdeab396954d3cbc0785ae51ee5d9f 2012-11-07 08:52:08 32427 INFO keystone.middleware.auth_token [-] Invalid user token - rejecting request

Any idea what am I missing here?

My openstack status is 'newbie' :)

edit retag flag offensive close merge delete

17 answers

Sort by ยป oldest newest most voted
0

answered 2012-11-07 19:10:51 -0600

Getting similar error after following Appendix B instructions. This also affects the webUI, once logged in and select 'Images'; I am redirected back to the log-in page.

Here's the apache logs: [Wed Nov 07 19:02:32 2012] [error] \x1b[31;1mUnauthorized: HTTPUnauthorized (HTTP 401)\x1b[0m [Wed Nov 07 19:02:32 2012] [error] Traceback (most recent call last): [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/dashboards/syspanel/images/views.py", line 50, in get_data [Wed Nov 07 19:02:32 2012] [error] marker=marker) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/api/glance.py", line 67, in image_list_detailed [Wed Nov 07 19:02:32 2012] [error] *kwargs)) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/v1/images.py", line 130, in paginate [Wed Nov 07 19:02:32 2012] [error] images = self._list(url, "images") [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/base.py", line 53, in _list [Wed Nov 07 19:02:32 2012] [error] resp, body = self.api.json_request('GET', url) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 174, in json_request [Wed Nov 07 19:02:32 2012] [error] resp, body_iter = self._http_request(url, method, *kwargs) [Wed Nov 07 19:02:32 2012] [error] File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 158, in _http_request [Wed Nov 07 19:02:32 2012] [error] raise exc.from_response(resp) [Wed Nov 07 19:02:32 2012] [error] HTTPUnauthorized: HTTPUnauthorized (HTTP 401) [Wed Nov 07 19:08:24 2012] [error] unable to retrieve service catalog with token [Wed Nov 07 19:08:24 2012] [error] Traceback (most recent call last): [Wed Nov 07 19:08:24 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 132, in _extract_service_catalog [Wed Nov 07 19:08:24 2012] [error] endpoint_type='adminURL') [Wed Nov 07 19:08:24 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/service_catalog.py", line 62, in url_for [Wed Nov 07 19:08:24 2012] [error] raise exceptions.EndpointNotFound('Endpoint not found.') [Wed Nov 07 19:08:24 2012] [error] EndpointNotFound: Endpoint not found.

and logs from /var/log/glance/api.log are consistent with OP.

Thanks

edit flag offensive delete link more
0

answered 2012-11-08 00:02:49 -0600

gurrapu-narsing gravatar image

Hi,

Even I am getting same error Can anyone help :)

Thanks, Narsing

edit flag offensive delete link more
0

answered 2012-11-13 10:45:32 -0600

n-paladi gravatar image

I have had a similar issue and tried to nail it down, but after some attempts gave up and made a fresh deployment, which solved the problem.

edit flag offensive delete link more
0

answered 2012-11-14 14:54:04 -0600

I am also very new to Openstack and getting a similar error when trying to do the following command from the installation documentation.

sudo glance --os-username=admin --os-password=secretword --os-tenant-name=openstackDemo --os-auth-url=http://192.168.xxx.xxx:5000/v2.0 image-create --name="tty-linux-kernel" --disk-format=aki --container-format=aki < ttylinux-uec-amd64-12.1_2.6.35-22_1-vmlinuz

Request returned failure status.

None

Invalid OpenStack Identity credentials.

sudo tail /var/log/glance/api.log

2012-11-14 06:28:31 19941 ERROR keystone.middleware.auth_token [-] HTTP connection exception: [Errno 111] ECONNREFUSED

2012-11-14 06:28:31 19941 WARNING keystone.middleware.auth_token [-] Authorization failed for token 51dbb4057e924f94a0e3e70d40111481

2012-11-14 06:28:31 19941 INFO keystone.middleware.auth_token [-] Invalid user token - deferring reject downstream

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: POST /v1/images Accept: process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:45

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:58

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:70

2012-11-14 06:29:44 19941 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:71

2012-11-14 06:29:44 19941 ERROR keystone.middleware.auth_token [-] HTTP connection exception: [Errno 111] ECONNREFUSED

2012-11-14 06:29:44 19941 WARNING keystone.middleware.auth_token [-] Authorization failed for token 6eae7a79fbcb499ea16bce61e2ae7604

2012-11-14 06:29:44 19941 INFO keystone.middleware.auth_token [-] Invalid user token - deferring reject downstream

I noticed in the instructions it says use tenant-name of demo but the other references in that section show openstackDemo for the tenant name. I've tried both. Any help would be appreciated.

edit flag offensive delete link more
0

answered 2012-11-17 13:55:48 -0600

theodotos gravatar image

@nico: Probably it will work if I try to use the default names and passwords used in the guide. But in the end I will need to deploy this in production and I will have to use a password stronger than "openstack". I need to understand what all these values are supposed to be and the docs are not very clear on that.

For example, what is the difference of the SERVICE_TOKEN env variable and the admin_token keynots.conf entry? Are they supposed to be the same? If not then where is SERVICE_TOKEN defined?

edit flag offensive delete link more
0

answered 2012-11-17 14:55:14 -0600

Have done the tutorial step by step and when I reached the "glance index" step I got the same error. What are we missing?

edit flag offensive delete link more
0

answered 2012-11-17 15:07:39 -0600

If I uncomment the "config_file" line in both glance-api.conf and glance-registry.conf it changes the behaviour. Now, instead of throwing that error it shows the table headers and hangs.

edit flag offensive delete link more
0

answered 2012-11-17 15:22:11 -0600

It seems the glance registry is looking for the glance-registry-paste.ini configuration file and cannot find it. It seems it's looking in the wrong place?

2012-11-17 15:19:05 28420 DEBUG glance.common.config [-] Loading glance-registry-keystone from /glance-registry-paste.ini load_paste_app /usr/$ 2012-11-17 15:19:05 28420 CRITICAL glance [-] [Errno 2] No such file or directory: '/glance-registry-paste.ini' 2012-11-17 15:19:05 28420 TRACE glance Traceback (most recent call last): 2012-11-17 15:19:05 28420 TRACE glance File "/usr/bin/glance-registry", line 51, in <module> 2012-11-17 15:19:05 28420 TRACE glance server.wait() 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 241, in wait 2012-11-17 15:19:05 28420 TRACE glance self.wait_on_children() 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 226, in wait_on_children 2012-11-17 15:19:05 28420 TRACE glance self.run_child() 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 256, in run_child 2012-11-17 15:19:05 28420 TRACE glance self.run_server() 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 275, in run_server 2012-11-17 15:19:05 28420 TRACE glance eventlet.wsgi.server(self.sock, self.app_func(), 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/glance/common/config.py", line 187, in load_paste_app 2012-11-17 15:19:05 28420 TRACE glance app = deploy.loadapp("config:%s" % conf_file, name=app_name) 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 247, in loadapp 2012-11-17 15:19:05 28420 TRACE glance return loadobj(APP, uri, name=name, **kw) 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 271, in loadobj 2012-11-17 15:19:05 28420 TRACE glance global_conf=global_conf) 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 296, in loadcontext 2012-11-17 15:19:05 28420 TRACE glance global_conf=global_conf) 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 317, in _loadconfig 2012-11-17 15:19:05 28420 TRACE glance loader = ConfigLoader(path) 2012-11-17 15:19:05 28420 TRACE glance File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 393, in __init__ 2012-11-17 15:19:05 28420 TRACE glance with open(filename) as f: 2012-11-17 15:19:05 28420 TRACE glance IOError: [Errno 2] No such file or directory: '/glance-registry-paste.ini' 2012-11-17 15:19:05 28420 TRACE glance

edit flag offensive delete link more
0

answered 2012-11-24 20:12:50 -0600

alxspb gravatar image

The problem is in the path to glance-registry-paste.ini file. In config /etc/glance/glance-registry.conf should be the full path to file, i.e /etc/glance/glance-registry-paste.ini instead of just glance-registry-paste.ini.

[paste_deploy]

Name of the paste configuration file that defines the available pipelines

config_file = /etc/glance/glance-registry-paste.ini

edit flag offensive delete link more
0

answered 2012-11-24 20:47:57 -0600

Nice workaround. But that is not definetely not the expected behaviour. Should create bug report?

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2012-11-07 06:54:34 -0600

Seen: 2,000 times

Last updated: Mar 13 '13