error running nova image-list - icehouse install

asked 2014-07-04 11:55:30 -0500

rattler555 gravatar image

I am stuck at trying to resolve this issue. Glance image-list works fine. I rebuild the keystone db. Auth works fine - IE - I can run cURL cmd with the nova u/p/t settings - but I still get an error 401. It appears to simply be an issue with username/pwd but I have verified them out successfully. All help is super appreciated.

jtyson@openstack-con-01:~$ nova --os-username=nova --os-password=password --os-tenant-id=6ae8b5656cec4a5880e16e947f522cee --os-auth-url=http://openstack-con-01:35357/v2.0 image-list ERROR: Unauthorized (HTTP 401)

jtyson@openstack-con-01:~$ curl -X POST http://openstack-con-01:5000/v2.0/tokens -d '{"auth":{"passwordCredentials":{"username": "nova", "password":"password"}, "tenantId":"6ae8b5656cec4a5880e16e947f522cee"}}' -H 'Content-type: application/json' {"access": {"token": {"issued_at": "2014-07-04T16:45:47.279875", "expires": "2014-07-04T17:45:47Z", "id": "MIIHZgYJKoZIhvcNAQcCoIIHVzCCB1MCAQExDTALBglghkgBZQMEAgEwggW0BgkqhkiG9w0BBwGgggWlBIIFoXsiYWNjZXNzIjogeyJ0b2tlbiI6IHsiaXNzdWVkX2F0IjogIjIwMTQtMDctMDRUMTY6NDU6NDcuMjc5ODc1IiwgImV4cGlyZXMiOiAiMjAxNC0wNy0wNFQxNzo0NTo0N1oiLCAiaWQiOiAicGxhY2Vob2xkZXIiLCAidGVuYW50IjogeyJkZXNjcmlwdGlvbiI6ICJTZXJ2aWNlIFRlbmFudCIsICJlbmFibGVkIjogdHJ1ZSwgImlkIjogIjZhZThiNTY1NmNlYzRhNTg4MGUxNmU5NDdmNTIyY2VlIiwgIm5hbWUiOiAic2VydmljZSJ9fSwgInNlcnZpY2VDYXRhbG9nIjogW3siZW5kcG9pbnRzIjogW3siYWRtaW5VUkwiOiAiaHR0cDovL29wZW5zdGFjay1jb24tMDE6OTI5MiIsICJyZWdpb24iOiAicmVnaW9uT25lIiwgImludGVybmFsVVJMIjogImh0dHA6Ly9vcGVuc3RhY2stY29uLTAxOjkyOTIiLCAiaWQiOiAiNzI3MzJkM2M1ZThkNGRiZGI2ODk3ZTgzMTM4NTNlZTMiLCAicHVibGljVVJMIjogImh0dHA6Ly9vcGVuc3RhY2stY29uLTAxOjkyOTIifV0sICJlbmRwb2ludHNfbGlua3MiOiBbXSwgInR5cGUiOiAiaW1hZ2UiLCAibmFtZSI6ICJnbGFuY2UifSwgeyJlbmRwb2ludHMiOiBbeyJhZG1pblVSTCI6ICJodHRwOi8vb3BlbnN0YWNrLWNvbi0wMTo4Nzc0L3YyLzZhZThiNTY1NmNlYzRhNTg4MGUxNmU5NDdmNTIyY2VlIiwgInJlZ2lvbiI6ICJyZWdpb25PbmUiLCAiaW50ZXJuYWxVUkwiOiAiaHR0cDovL29wZW5zdGFjay1jb24tMDE6ODc3NC92Mi82YWU4YjU2NTZjZWM0YTU4ODBlMTZlOTQ3ZjUyMmNlZSIsICJpZCI6ICIxNGU5Yjg4ZTM3OGQ0MmI4YTk1NGZmNzYyNzQ5MjViMiIsICJwdWJsaWNVUkwiOiAiaHR0cDovL29wZW5zdGFjay1jb24tMDE6ODc3NC92Mi82YWU4YjU2NTZjZWM0YTU4ODBlMTZlOTQ3ZjUyMmNlZSJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJjb21wdXRlIiwgIm5hbWUiOiAibm92YSJ9LCB7ImVuZHBvaW50cyI6IFt7ImFkbWluVVJMIjogImh0dHA6Ly9vcGVuc3RhY2stY29uLTAxOjM1MzU3L3YyLjAiLCAicmVnaW9uIjogInJlZ2lvbk9uZSIsICJpbnRlcm5hbFVSTCI6ICJodHRwOi8vb3BlbnN0YWNrLWNvbi0wMTo1MDAwL3YyLjAiLCAiaWQiOiAiNGZlNzJjY2VmYjg3NDU4ZDllYTg3YzI2Zjk3MDdhMjkiLCAicHVibGljVVJMIjogImh0dHA6Ly9vcGVuc3RhY2stY29uLTAxOjUwMDAvdjIuMCJ9XSwgImVuZHBvaW50c19saW5rcyI6IFtdLCAidHlwZSI6ICJpZGVudGl0eSIsICJuYW1lIjogImtleXN0b25lIn1dLCAidXNlciI6IHsidXNlcm5hbWUiOiAibm92YSIsICJyb2xlc19saW5rcyI6IFtdLCAiaWQiOiAiMDVjMjM3YzgyNTBkNDdmNWEwZjlhZjg0ZDU3NDAyMzUiLCAicm9sZXMiOiBbeyJuYW1lIjogImFkbWluIn1dLCAibmFtZSI6ICJub3ZhIn0sICJtZXRhZGF0YSI6IHsiaXNfYWRtaW4iOiAwLCAicm9sZXMiOiBbIjRlOTM1MzJkNWM1NDRhZWU5ZDQ2YTlkNTI5MzE5ODEwIl19fX0xggGFMIIBgQIBATBcMFcxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIDAVVbnNldDEOMAwGA1UEBwwFVW5zZXQxDjAMBgNVBAoMBVVuc2V0MRgwFgYDVQQDDA93d3cuZXhhbXBsZS5jb20CAQEwCwYJYIZIAWUDBAIBMA0GCSqGSIb3DQEBAQUABIIBAHE8hmL+9GXM9V3xVznl+639ZZFLovBpPPfWDLM3cccHpuhLtn9OpMKhPBYp67tUvDJxpchglB697yHjAH0XDCgh0Xip3hLoUWS6BAoSfkdDLYon6UlJ7nEuVK1xiTm+WDUDNmbVYQ-rNHGmJeyhG5VjJFwrkFxO-kaPR+h60APoyt2lWdavl10ttwtd0eeJD0SCFr4KQx4RiTKdPC09H2PSVBVGmtlzaeekykJqDXj-PLi81VHEqhv1e4cda68JbwQWp3S3HeEa-2YnGn1bO-07Vr6V4CvZsENvMBwHbU0ylfM5kVVu5e0FhAUe0246e7i1rbKLzxM94EUtR4xEa5M=", "tenant": {"description": "Service Tenant", "enabled": true, "id": "6ae8b5656cec4a5880e16e947f522cee", "name": "service"}}, "serviceCatalog": [{"endpoints": [{"adminURL": "http://openstack-con-01:9292", "region": "regionOne", "internalURL": "http://openstack-con-01:9292", "id": "72732d3c5e8d4dbdb6897e8313853ee3", "publicURL": "http://openstack-con-01:9292"}], "endpoints_links": [], "type": "image", "name": "glance"}, {"endpoints": [{"adminURL": "http://openstack-con-01:8774/v2/6ae8b5656cec4a5880e16e947f522cee", "region": "regionOne", "internalURL": "http://openstack-con-01:8774/v2/6ae8b5656cec4a5880e16e947f522cee", "id": "14e9b88e378d42b8a954ff76274925b2", "publicURL": "http://openstack-con-01:8774/v2/6ae8b5656cec4a5880e16e947f522cee"}], "endpoints_links": [], "type": "compute", "name": "nova"}, {"endpoints": [{"adminURL": "http://openstack-con-01:35357/v2.0", "region": "regionOne", "internalURL": "http://openstack-con-01:5000/v2.0", "id": "4fe72ccefb87458d9ea87c26f9707a29", "publicURL": "http://openstack-con-01:5000/v2.0"}], "endpoints_links": [], "type": "identity", "name": "keystone"}], "user": {"username": "nova", "roles_links": [], "id": "05c237c8250d47f5a0f9af84d5740235", "roles": [{"name": "admin"}], "name": "nova"}, "metadata": {"is_admin": 0, "roles": ["4e93532d5c544aee9d46a9d529319810"]}}}jtyson@openstack-con-01:~$ ^C jtyson@openstack-con-01:

keystone cfg: # auth_strategy = keystone [keystone_authtoken] #identity_uri =http://openstack-con-01:35357 auth_uri = http://openstack-con-01:5000 auth_host = openstack-con-01 auth_port = 35357 auth_protocol = http admin_tenant_name = service admin_user = nova admin_password = password [database]

error.log - keystone 2014-07-03 23:20:04.393 1027 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.20.69.60 2014-07-03 23:20:05.144 1027 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.20.69.60

error.log - nova 2014-07-04 12:48:52.193 1513 INFO nova.osapi_compute.wsgi.server [-] 10.20.69.60 "GET /v2/6ae8b5656cec4a5880e16e947f522cee/images/detail HTTP/1.1" status: 401 len: 198 time: 0.2570162 2014-07-04 12:48:52.921 1513 WARNING keystoneclient.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Unauthorized'}} 2014-07-04 12:48:52.925 1513 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token 2014-07-04 12:48:52.929 1513 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request 2014-07-04 12:48:52.937 1513 INFO nova.osapi_compute.wsgi.server [-] 10.20.69.60 "GET /v2/6ae8b5656cec4a5880e16e947f522cee/images/detail HTTP/1.1" status: 401 len: 198 time: 0.3098609

edit retag flag offensive close merge delete

Comments

running glance image-list using nova credentials returns the image response. Here is the debug log from keystone-all.log:

2014-07-04 19:43:32.622 2754 DEBUG keystone.notifications [-] CADF Event: {'typeURI': 'http://schemas.dmtf.org/cloud/audit/1.0/event', 'initiator': {'typeURI': 'service/security/account/user', 'host': {'agent': 'python-novaclient', 'address': '10.20.69.60'}, 'id': 'openstack:b84c388c-464f-44da-80fc-c4d58abe5e69', 'name': u'05c237c8250d47f5a0f9af84d5740235'}, 'target': {'typeURI': 'service/security/account/user', 'id': 'openstack:36e7f358-76c5-4166-a638-7fb37ff3a159'}, 'observer': {'typeURI': 'service/security', 'id': 'openstack:9ba6964e-2efb-4a37-ba13-6a0b1c3531ba'}, 'eventType': 'activity', 'eventTime': '2014-07-04T23:43:32.620975+0000', 'action': 'authenticate', 'outcome': 'success', 'id': 'openstack:53c26de3-84bc-41f5-8f53-3692956874c1'} _send_audit_notification /usr/lib/python2.7/dist-packages/keystone/notifications.py:289 2014-07-04 19:43:32.841 2754 INFO eventlet.wsgi.server [-] 10.20.69.60 - - [04/Jul/2014 19:43:32] "POST /v2.0/tokens HTTP/1.1" 200 4116 0.405637 2014-07-04 19:43:32.917 2754 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not ...(more)

rattler555 gravatar imagerattler555 ( 2014-07-04 19:11:15 -0500 )edit