Ask Your Question
1

authentication to horizon appears to succeed, but I get "Unable to retrieve authorized projects" in the login window.

asked 2013-09-19 12:40:13 -0500

vg gravatar image

After installing keystone, compute, cinder and the controller packages in a single-node installation I'm able to verify that all the services can communicate successfully with keystone. I can provision volumes, start instances and add images from the command line. However, when I install horizon, I provide the admin credentials and get

"Unable to retrieve authorized projects"

in the login window. It looks to me like authentication succeeds in the logs, but then the subsequent request for the tenant list fails:

==> /var/log/keystone/keystone.log <==
2013-09-19 10:34:40    DEBUG [eventlet.wsgi.server] (32457) accepted ('192.168.78.196', 40227)

2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] ******************** REQUEST ENVIRON ********************
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] SCRIPT_NAME = /v2.0
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] webob.adhoc_attrs = {'response': <response 0x36eeed0="" 200="" at="" ok="">}
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] REQUEST_METHOD = POST
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] PATH_INFO = /tokens
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] SERVER_PROTOCOL = HTTP/1.0
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] REMOTE_ADDR = 192.168.78.196
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] CONTENT_LENGTH = 79
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] HTTP_USER_AGENT = python-keystoneclient
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] eventlet.posthooks = []
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] RAW_PATH_INFO = /v2.0/tokens
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] REMOTE_PORT = 40227
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] eventlet.input = <eventlet.wsgi.input 0x37fdd90="" at="" object="">
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.url_scheme = http
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] webob._body_file = (<_io.BufferedReader>, <eventlet.wsgi.input 0x37fdd90="" at="" object="">)
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] SERVER_PORT = 35357
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.input = <_io.BytesIO object at 0x37e38f0>
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] openstack.context = {'token_id': None, 'is_admin': False}
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] HTTP_HOST = 192.168.78.196:35357
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.multithread = True
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] openstack.params = {u'auth': {u'passwordCredentials': {u'username': u'admin', u'password': u'secrete'}}}
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.version = (1, 0)
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] SERVER_NAME = 192.168.78.196
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE = CGI/1.1
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.run_once = False
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.errors = <open '<stderr="" file="">', mode 'w' at 0x7f43f8ce01e0>
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] wsgi.multiprocess = False
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] webob.is_body_seekable = True
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] CONTENT_TYPE = application/json
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi] HTTP_ACCEPT_ENCODING = gzip, deflate, compress
2013-09-19 10:34:40    DEBUG [keystone.common.wsgi]
2013-09-19 10:34:40    DEBUG [keystone.common ...
(more)
edit retag flag offensive close merge delete

3 answers

Sort by ยป oldest newest most voted
1

answered 2013-09-19 18:53:07 -0500

vg gravatar image

I happened upon the solution - it seems that the problem had to do with the fact that I had configured horizon to use port 35357 on keystone. Changed it to 5000, and i was able to log in successfully.

edit flag offensive delete link more
0

answered 2017-05-12 06:49:51 -0500

Eric Rakotonirina gravatar image

updated 2017-05-12 06:53:43 -0500

hello, I have the same problem actually.

My config is 3 controller nodes for HA. I've followed the reference script with Pacemaker for the install process. I tried to use 5000 and 35357 ports but still unsuccessfull.

My conf:

 +-----------+------------------------------+
| interface | url                          |
+-----------+------------------------------+
| internal  | http://vip-keystone:5000/v3  |
| admin     | http://vip-keystone:35357/v3 |
| public    | http://vip-keystone:5000/v3  |
+-----------+------------------------------+

openstack user create --password voiture admin openstack role create admin openstack project create admin openstack role add --project admin --user admin admin

using the same admin credentials on cli:

[root@controller1 ~(keystone_adminv3)]# openstack service list
+----------------------------------+------------+----------------+
| ID                               | Name       | Type           |
+----------------------------------+------------+----------------+
| 01719e652ca64da3a2402ed1dcabddf6 | cinderv2   | volumev2       |
| 05aef038414449c0ae83b893af1dcb24 | heat-cfn   | cloudformation |
| 19078449957243baabb44e99ab314ec2 | compute    | compute        |
| 19ad89e2f99f4767aef8baddf65c4549 | cinder     | volume         |
| 4502de38ff59460aa0c36a1013db87ac | glance     | image          |
| 57cd494ac1134ff6b9f0a96a11612a46 | swift      | object-store   |
| 70054ceb28074501aa1905e39077d2c8 | keystone   | identity       |
| 9babc41b5d884faeab507bb64fe47bef | neutron    | network        |
| eaecd983a6904a5094352b61cfdcc7b7 | heat       | orchestration  |
| f26a5e39e69741a2924e1a1f9d447b70 | ceilometer | metering       |
+----------------------------------+------------+----------------+

i'm able to do queries. And also with othe users.

But still not able to login to horizon.

Any suggestions?

regards,

Eric

edit flag offensive delete link more
0

answered 2013-09-20 10:14:01 -0500

ArKam gravatar image

Seems that you didn't create tenant or at least didn't give to the admin user the right role (should be admin).

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2013-09-19 12:40:13 -0500

Seen: 3,153 times

Last updated: May 12 '17