Ask Your Question
0

problem with keystone authentication: 1045, Access denied error

asked 2014-04-21 00:34:57 -0500

OpenStack user gravatar image

updated 2014-07-19 22:51:24 -0500

smaffulli gravatar image

Unable to access any OpenStack services. Using OpenStack havana. Getting same error for all the services and not even able to sign in horizon as well.

# nova list
ERROR: An unexpected error prevented the server from fulfilling your request. (OperationalError) (1045, "Access denied for user 'keystone_admin'@'KVMController1' (using password: YES)") None None (HTTP 500)

# /var/log/keystone/keystone.log

2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi   File "/usr/lib64/python2.6/site-packages/MySQLdb/__init__.py", line 81, in Connect
2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi     return Connection(*args, **kwargs)
2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi   File "/usr/lib64/python2.6/site-packages/MySQLdb/connections.py", line 187, in __init__
2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi     super(Connection, self).__init__(*args, **kwargs2)
2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi OperationalError: (OperationalError) (1045, "Access denied for user 'keystone_admin'@'KVMController1' (using password: YES)") None None
2014-04-21 10:58:55.460 11717 TRACE keystone.common.wsgi
edit retag flag offensive close merge delete

Comments

Need more info like keystone.conf and my.cn details,could u paste them here?

9lives gravatar image9lives ( 2014-04-21 00:56:54 -0500 )edit

Need output of query :-

[root@dfw02 ~(keystone_admin)]$ mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 68
Server version: 5.5.36-MariaDB MariaDB Server

Copyright (c) 2000, 2014, Oracle, Monty Program Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> SELECT User, Host, Password FROM mysql.user;
dbaxps gravatar imagedbaxps ( 2014-04-21 02:24:57 -0500 )edit
OpenStack user gravatar imageOpenStack user ( 2014-04-21 03:15:10 -0500 )edit

3 answers

Sort by ยป oldest newest most voted
1

answered 2014-04-21 07:35:50 -0500

dbaxps gravatar image

updated 2014-07-19 22:53:36 -0500

smaffulli gravatar image

There is an error in your keystone setup .Due to

[root@dfw02 ~(keystone_admin)]$ mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 168
Server version: 5.5.36-MariaDB MariaDB Server
Copyright (c) 2000, 2014, Oracle, Monty Program Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MariaDB [(none)]> SELECT User, Host, Password FROM mysql.user WHERE User LIKE 'keystone%' ;
+----------+-----------+-------------------------------------------+
| User     | Host      | Password                                  |
+----------+-----------+-------------------------------------------+
| keystone | localhost | *936E8F7AB2E21B47F6C9A7E5D9FE14DBA2255E5A |
| keystone | %         | *936E8F7AB2E21B47F6C9A7E5D9FE14DBA2255E5A |
+----------+-----------+-------------------------------------------+
2 rows in set (0.00 sec)

Running system doesn't have 'keystone_admin' user.

Same query been run against your database either won't contain entry for 'keystone_admin' or entry been found would have password different from placed in keystone.conf file Thus your keystone.conf contains wrong mysql connection string :-

[sql]
    connection = mysql://keystone_admin:#######@10.10.155.11/keystone

I would expect you to perform keystone setup from scratch properly.
Personally, I cannot remind user keystone_admin to be created, just keystone
Keystone Setup from scratch here

edit flag offensive delete link more

Comments

Yes the password was different in the table and in keystone.conf file. Even after changing the password in keystone.conf file i am facing the same issue.

I have even tried commenting out: connection = mysql://keystone_admin:#######@10.10.155.11/keystone

OpenStack user gravatar imageOpenStack user ( 2014-04-22 01:48:02 -0500 )edit
1

I would expect you to perform keystone setup from scratch properly. Personally, I cannot remind user
keystone_admin to be created, just keystone.

dbaxps gravatar imagedbaxps ( 2014-04-22 02:30:30 -0500 )edit

Tried setup from scratch, still running in the same issue, while creating service keystone.

Really confused, don't know what to do.

OpenStack user gravatar imageOpenStack user ( 2014-04-22 05:39:54 -0500 )edit
1

answered 2014-04-21 03:39:04 -0500

xt3r4m gravatar image

Check your grants for keystone databse.. GRANT ALL ON keystone.* TO '[YOURKEYSTONE_USER]'@'%' IDENTIFIED BY '[YOUR_KEYSTONEDB_PASSWORD]'; FLUSH PRIVILEGES;

edit flag offensive delete link more
0

answered 2014-07-30 02:18:09 -0500

raven gravatar image

i had a similar issue when I was trying to run packstack. the install would fail with the keystone-manage db_sync error. I had HOSTNAME.DOMAIN configured as my hostname. Upon cheking the keystone database, saw that the host was appearing as localhost. I removed the domain name from the /etc/sysconfig/network and only left the hostname there. Next attempt at packstack worked like a charm...

Having said that, I am now going to try playing weith the keystone db in mysql and change the hostname to my actual HOSTNAME.DOMAINNAME and run packstack.. I will let you guys know how I go.

-d

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2014-04-21 00:34:57 -0500

Seen: 10,017 times

Last updated: Jul 19 '14