Ask Your Question
1

User/service accounts appear to be configured correctly, but I am getting user not found error. Icehouse on Centos.

asked 2014-04-23 14:32:03 -0500

virtualGain gravatar image

updated 2015-08-21 12:02:14 -0500

Description of problem:

Setting up openstack icehouse on centos 6.5. Installed glance per this guide: http://docs.openstack.org/trunk/insta...

When attempting to run glance image-create or any other glance commands i am getting the below error.. glance --verbose image-create --name=cirrosImage --disk-format=qcow2 --container-format=bare --is-public=true < cirros-0.3.2-x86_64-disk.img Request returned failure status. HTTPInternalServerError (HTTP 500)

I can succesfully get a keystone token with both the glance user account and the admin user account so I am sure keystone is running as intended.

Why am I unable to get authenticated even though I am positive I have glance set up with appropriate credentials. Likely has to do with why I cannot get keystone user-role-list command to return anything. Getting user not found error, even though keystone user-list command returns my user. Why is one command able to find it but not the other?

Troubelshooting:

root@mdd-horizon1 ~]# keystone user-list +----------------------------------+--------+---------+------------------------------+ | id | name | enabled | email | +----------------------------------+--------+---------+------------------------------+ | ccddff846e0a441db43132bd31e02746 | admin | True | | | fde67fea69584ba3a10a9b6455544881 | demo | True | | | d7be3f1cfc6a4fc2bd8971e013af3d2e | glance | True | | +----------------------------------+--------+---------+------------------------------+

root@mdd-horizon1 ~]# keystone service-list +----------------------------------+----------+----------+-------------------------+ | id | name | type | description | +----------------------------------+----------+----------+-------------------------+ | b4fd3f202c5044b5ab682681440af940 | glance | image | OpenStack Image Service | | 0637383640fe434da5090aa9947d62b2 | keystone | identity | OpenStack Identity | +----------------------------------+----------+----------+-------------------------+

keystone log tail.. 2014-04-23 10:29:39.566 2611 WARNING keystone.common.wsgi [-] Could not find user, glance. 2014-04-23 10:29:39.668 2611 WARNING keystone.common.wsgi [-] Could not find role, admin. 2014-04-23 10:29:39.761 2611 WARNING keystone.common.wsgi [-] Could not find project, service. 2014-04-23 10:29:55.326 2611 WARNING keystone.common.wsgi [-] Could not find user, glance. 2014-04-23 10:29:55.470 2611 WARNING keystone.common.wsgi [-] Could not find role, admin. 2014-04-23 10:29:55.597 2611 WARNING keystone.common.wsgi [-] Could not find project, service. 2014-04-23 10:30:49.475 2611 WARNING keystone.common.wsgi [-] Could not find user, glance. 2014-04-23 10:32:41.557 2611 WARNING keystone.common.wsgi [-] Could not find project, service. 2014-04-23 10:34:15.968 2611 WARNING keystone.common.wsgi [-] Could not find user, glance. 2014-04-23 14:39:03.846 2611 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.210.0.249 2014-04-23 14:45:07.251 2611 WARNING keystone.common.wsgi [-] Could not find user, glance. 2014-04-23 14:46:13.987 2611 WARNING keystone.common.wsgi [-] Could not find user, glance.

results of [root@mdd-horizon1 ~]# keystone --debug user-role-list --user glanceDEBUG:keystoneclient.session:REQ: curl -i -X POST http://mdd-horizon1:35357/v2.0/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"tenantName": "admin", "passwordCredentials": {"username": "admin", "password": ""}}}' INFO:urllib3.connectionpool:Starting new HTTP connection (1): mdd-horizon1 DEBUG:urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3124 DEBUG:keystoneclient.session:RESP: [200] {'date': 'Wed, 23 Apr 2014 18:52:51 GMT', 'content-type': 'application/json', 'content-length': '3124', 'vary': 'X-Auth-Token'} RESP BODY: {"access": {"token": {"issued_at": "2014-04-23T18:52:51.034617", "expires": "2014-04-23T19:52:51Z", "id": "MIIF-AYJKoZIhvcNAQcCoIIF7TCCBekCAQExCTAHBgUrDgMCGjCCBFIGCSqGSIb3DQEHAaCCBEMEggQ-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-czjEY45oHaZzRh5Fxwds4DiL4ziY83ceD8LQ2Oj6IaXnzP0pWU4oczZeMPygXazW03CpqBHPgF3xtnKV1KxoyQmmSX3JM6QTFmxsFMibQ9w8267W8SIYFokSXwi9Dpyxe5FSP313K1Tpq010uA1vZxaUF8Pyr+XQU3DkQt4GjZEYJYxmIKkY38WuDlaFRlEwCNLlJ+8BfWELg6rNkWTw+lOTrPawYM1IT+iAEDRnS2dAfFfU7JjPaOSSiE6lUwsMeYZwrVZjGeBhIx", "tenant": {"description": "Admin tenant", "enabled": true, "id": "79097774348c44caaf59df2f4cb7b63c", "name": "admin"}}, "serviceCatalog": [{"endpoints": [{"adminURL": "http://mdd-horizon1:9292", "region": "regionOne", "internalURL": "http://mdd-horizon1:9292", "id": "4addb4dee6a24e00b469c24c63fab726 ... (more)

edit retag flag offensive close merge delete

Comments

keystone user-role-list wont output anything with --glance because glance isn't a row in that table. It outputs nothing for me as well. But if you run it without --glance you should get something that looks like this:

+----------------------------------+----------+----------------------------------+----------------------------------+
|                id                |   name   |             user_id              |            tenant_id             |
+----------------------------------+----------+----------------------------------+----------------------------------+
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | 79c5246eb3c14e51a4f16243afe4809e | 5171e20632484e22ac701c4da307bfac |
| 6bcdff8ce9e94740b379417068c6b6e1 |  admin   | 79c5246eb3c14e51a4f16243afe4809e | 5171e20632484e22ac701c4da307bfac |
+----------------------------------+----------+----------------------------------+----------------------------------+
bcumber12 gravatar imagebcumber12 ( 2014-06-17 10:35:50 -0500 )edit

I believe the command $ keystone user-role-add --user=glance --tenant=service --role=admin adds the user "glance" to the tenant "service" with the role of "admin". Which is why you're not getting the results you expect from that command.

bcumber12 gravatar imagebcumber12 ( 2014-06-17 10:40:22 -0500 )edit

I just noticed you're following the Juno installation guide. Yet you tagged the post with Icehouse. If you're looking to install Icehouse follow http://docs.openstack.org/icehouse/install-guide/install/yum/content/index.html (this guide) instead.

bcumber12 gravatar imagebcumber12 ( 2014-06-17 10:47:09 -0500 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2014-06-17 10:58:12 -0500

bcumber12 gravatar image

updated 2014-06-19 07:19:27 -0500

Look here https://ask.openstack.org/en/question/32156/glance-image-create-http-error-500/ to see if this solves your problem. If not run:

[root@controller ~]# tail /var/log/glance/registry.log

and post the output as an edit to your question.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2014-04-23 14:32:03 -0500

Seen: 3,518 times

Last updated: Aug 21 '15