juno glance Invalid OpenStack Identity credentials
I am following the install docs for Ubuntu Juno with Icehouse version of Openstack. Keystone installation and tests all worked fine however i am getting and auth error with glance when testing the image upload. Here are the logs and debug API call:
me@kermit:/tmp/images$ glance -dv image-create --name "cirros-0.3.3-x86_64" --file cirros-0.3.3-x86_64-disk.img --disk-format qcow2 --container-format bare --is-public True --progress
curl -i -X POST -H 'x-image-meta-container_format: bare' -H 'Transfer-Encoding: chunked' -H 'User-Agent: python-glanceclient' -H 'x-image-meta-size: 13200896' -H 'x-image-meta-is_public: True' -H 'X-Auth-Token: 4618a45ef50640d9af385e3e554358b6' -H 'Content-Type: application/octet-stream' -H 'x-image-meta-disk_format: qcow2' -H 'x-image-meta-name: cirros-0.3.3-x86_64' -d '<glanceclient.common.progressbar.VerboseFileWrapper object at 0x7f8491614050>' http://controller:9292/v1/images
[=============================>] 100%
HTTP/1.1 401 Unauthorized
date: Sun, 23 Nov 2014 08:28:37 GMT
content-length: 253
content-type: text/plain; charset=UTF-8
401 Unauthorized
This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.
Request returned failure status. Invalid OpenStack Identity credentials.
####
me@kermit:/tmp/images$ tail /var/log/glance/api.log
2014-11-23 08:28:33.861 13334 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2014-11-23 08:28:34.363 13334 INFO urllib3.connectionpool [-] Starting new HTTPS connection (1): 127.0.0.1
2014-11-23 08:28:34.380 13334 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2014-11-23 08:28:35.381 13334 INFO urllib3.connectionpool [-] Starting new HTTPS connection (1): 127.0.0.1
2014-11-23 08:28:35.394 13334 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2014-11-23 08:28:37.397 13334 INFO urllib3.connectionpool [-] Starting new HTTPS connection (1): 127.0.0.1
2014-11-23 08:28:37.414 13334 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2014-11-23 08:28:37.414 13334 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token
2014-11-23 08:28:37.414 13334 INFO keystoneclient.middleware.auth_token [-] Invalid user token - deferring reject downstream
2014-11-23 08:28:37.445 13334 INFO glance.wsgi.server [-] 10.48.59.28 - - [23/Nov/2014 08:28:37] "POST /v1/images HTTP/1.1" 401 381 3.600561
Can anyone help?
With the glance OS_ env settings I can also get a token from keystone:
cisco@kermit:~$ env | grep OS_
OS_PASSWORD=Cisco123
OS_AUTH_URL=http://controller:35357/v2.0
OS_USERNAME=glance
OS_TENANT_NAME=service
cisco@kermit:~$ keystone token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2014-11-23T20:53:29Z |
| id | 1f9043f2ec2d4ac08df1e8bf0b5c5aba |
| tenant_id | aa7182a859e54141983193b85f683712 |
| user_id | 2579ef7fab174753a136aec60fed0d61 |
+-----------+----------------------------------+
keystone.conf
cisco@kermit:~$ sudo grep -v ^# /etc/keystone/keystone.conf | grep -v ^$
[DEFAULT]
admin_token=XXXXXXXXXXX
verbose=True
[assignment]
[auth]
[cache]
[catalog]
[credential]
[database]
connection = mysql://keystone:Cisco123@controller/keystone
[ec2]
[endpoint_filter]
[federation]
[identity]
[kvs]
[ldap]
[matchmaker_ring]
[memcache ...
Please paste your glance-api.conf as well as the keystone.conf here.
The configs are quite lengthy. Is there a specific portion I can post to help diagnose?
Try to run glance as admin ( with source keystonerc_admin).
I am trying but this is also not working with the same error ...
Here are some more detailed logs from glance-api. it looks as if glance is having trouble actually talking to keystone rather than actually failing to authenticate. Some SSL error?
http://paste.openstack.org/show/138892/