Ask Your Question

WARNING keystone.common.wsgi [-] Authorization failed. Could not find user, glance. from [closed]

asked 2014-03-13 08:26:46 -0600

jkary gravatar image


I am following the OpenStack Installation Guide for Red Hat Enterprise Linux, CentOS, and Fedora - havana and I've stumbled across an issue. In section 4 "Verify image service installation", I am unable to upload an image into glance.

# glance image-create --name="CirrOS 0.3.1" --disk-format=qcow2 --container-format=bare --is-public=true < cirros-0.3.1-x86_64-disk.img

Request returned failure status.

Invalid OpenStack Identity credentials.

I've been searching through the logs to find some message which might point me in the right direction. The glance log shows:

DEBUG keystoneclient.middleware.auth_token [-] Marking token c5252c018c094343ac2ffeed91355f4d as unauthorized in memcache _cache_store_invalid /usr/lib/python2.6/site-packages/keystoneclient/middleware/

So it looks like keystone doesn't like glance. When I turn on debug in keystone I get this hint:

WARNING keystone.common.wsgi [-] Authorization failed. Could not find user, glance. from

So I am now confused. The mysql database has the user:

# mysql -u glance -p* glance

Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A

Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 16112 Server version: 5.1.61 Source distribution

Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.


Is there a config setting I've missed?

Thanks for your time!


edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by mpetason
close date 2014-06-09 10:10:24.015811

1 answer

Sort by ยป oldest newest most voted

answered 2014-03-13 08:42:28 -0600

mpetason gravatar image

This is keystone auth. You'll want to make sure that keystone has the user "glance" and that it's part of the "service" group.

keystone user-list

If it's not in there then you'll need to add it:

keystone user-create --name=glance --pass=secrete

Make sure it's got the admin roll in service:

keystone user-role-add --user=glance --tenant=service --role=admin

You may have missed a step or two in: (

edit flag offensive delete link more


Thank you! I ran these commands once before however they must not have executed correctly. Appreciate the timely response. Jason

jkary gravatar imagejkary ( 2014-03-13 09:11:17 -0600 )edit

No problem. Glad I could help.

mpetason gravatar imagempetason ( 2014-03-15 09:45:02 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-03-13 08:26:46 -0600

Seen: 4,794 times

Last updated: Mar 13 '14