How to debug Keystone

asked 2014-12-04 08:42:04 -0500

anonymous user


updated 2014-12-05 17:50:45 -0500

smaffulli gravatar image

after I installed keystone, and configuret it I had problems with creating a new tenant, as it is descriped in the install guide. It gives me always a http 503 code, the service is unavailable. I found out that despite keystone is running, it isn't listening to a single port (checked it with netstat). Info: I use physical Server and a web proxy.

The result of the netstat commands is simply nothing and the with the keystone commands, I get a http 503 error back

root@Usedom:~# keystone --d user-list
DEBUG:keystoneclient.session:REQ: curl -i -X GET http://16.XXXX.XXXX.XXXX:35357/v2.0/users -H "User-Agent: python-keystoneclient" -H "X-Auth-Token: 55d59f78e2aa9fd"
INFO:urllib3.connectionpool:Starting new HTTP connection (1): web-proxy

root@Usedom:~# service keystone status keystone start/running, process 9512

and the iptables gave no result.

I connected to the keystone mysql database: it wokrs fine, but there is not a single entry.

edit retag flag offensive close merge delete


are you need proxy to access the keystone server? if not try to add no_proxy option in your box 's env and try again.

9lives gravatar image9lives ( 2014-12-04 10:25:04 -0500 )edit

I just tryed it, but it has no affect on the problem. But thanks for so much help.

vari gravatar imagevari ( 2014-12-04 10:33:10 -0500 )edit

2 answers

Sort by ยป oldest newest most voted

answered 2014-12-05 17:49:24 -0500

dbaxps gravatar image

In order to debug this issue make sure that keystone is running and listening on its default ports. To check, run

netstat -lntp | grep 35357
netstat -lntp | grep 5000

Then check keystone's configurations:

keystone endpoint-list
keystone service-list

Make sure firewall's rules are not blocking access to keystone:

iptables-save | grep 5000
iptables-save | grep 35357

And that the services are running

service keystone status


service openstack-keystone status

Connect to MySQL as root and check that the installation was done correctly:

MariaDB [keystone]> use keystone ;
MariaDB [keystone]> show tables ;
MariaDB [keystone]> select * from service ;

If all this fails, try installing again I would suggest install keystone from scratch or update the question to provide more details.

edit flag offensive delete link more


Thank you for your help. I will try to install openstack properly on a completly new system, I hope that fix the problem.

vari gravatar imagevari ( 2014-12-08 01:18:20 -0500 )edit

answered 2014-12-09 01:33:21 -0500

Delete the keystone DB tables and recreate them.

keystone-manage token_flush to flush the expired tokens.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-12-04 08:42:04 -0500

Seen: 2,148 times

Last updated: Dec 09 '14