Heat client Authorization failed: Internal Server Error (HTTP 500) [closed]

asked 2014-12-08 23:46:55 -0500

Bharath gravatar image

I installed openstack using devstack enabling heat service. When trying to create any stack using the below command format, I am facing the below failure with respect to Authorization. Stuck with this.

heat --debug  stack-create -f test-stack.yml -P "ImageID=cirros-0.3.2-x86_64-uec;NetID=private" testStack
DEBUG (session) REQ: curl -i -X GET http://172.16.69.179:5000/v2.0 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
DEBUG (session) RESP: [200] date: Tue, 09 Dec 2014 05:29:33 GMT content-type: application/json content-length: 423 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) 
RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}, {"base": "application/xml", "type": "application/vnd.openstack.identity-v2.0+xml"}], "id": "v2.0", "links": [{"href": "http://172.16.69.179:5000/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}}

DEBUG (v2) Making authentication request to http://172.16.69.179:5000/v2.0/tokens
DEBUG (session) REQ: curl -i -X POST http://172.16.69.179:8004/v1/26a6c64d19d3466c9eeb118005f8aff8/stacks -H "Accept: application/json" -H "X-Auth-Token: {SHA1}d08f1798ca007b6967f12bf0a0e1002bfd38fa10" -H "X-Region-Name: RegionOne" -H "X-Auth-Key: openstack" -H "X-Auth-User: demo" -H "User-Agent: python-heatclient" -H "Content-Type: application/json" -H "X-Auth-Url: http://172.16.69.179:5000/v2.0" -d '{"files": {}, "disable_rollback": true, "parameters": {"NetID": "private", "ImageID": "cirros-0.3.2-x86_64-uec"}, "stack_name": "testStack", "environment": {}, "template": {"outputs": {"server1_private_ip": {"description": "IP address of the server in the private network", "value": {"get_attr": ["server1", "first_address"]}}}, "heat_template_version": "2013-05-23", "description": "Test Template", "parameters": {"ImageID": {"type": "string", "description": "Image use to boot a server"}, "NetID": {"type": "string", "description": "Network ID for the server"}}, "resources": {"server1": {"type": "OS::Nova::Server", "properties": {"image": {"get_param": "ImageID"}, "name": "Test server", "flavor": "m1.tiny", "networks": [{"network": {"get_param": "NetID"}}]}}}}}'
DEBUG (session) RESP:
Traceback (most recent call last):
  File "/usr/local/bin/heat", line 10, in <module>
    sys.exit(main())
  File "/usr/local/lib/python2.7/dist-packages/heatclient/shell.py", line 656, in main
    HeatShell().main(args)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/shell.py", line 606, in main
    args.func(client, args)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/v1/shell.py", line 114, in do_stack_create
    hc.stacks.create(**fields)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/v1/stacks.py", line 119, in create
    data=kwargs, headers=headers)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/common/http.py", line 254, in json_request
    resp = self._http_request(url, method, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/common/http.py", line 344, in _http_request
    raise exc.from_response(resp)
heatclient.exc.HTTPInternalServerError: ERROR: Remote error: AuthorizationFailure Authorization failed: Internal Server Error (HTTP 500)
[u'Traceback (most recent call last):\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo/messaging/rpc/dispatcher.py", line 134, in _dispatch_and_reply\n    incoming.message))\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo/messaging/rpc/dispatcher.py", line 177, in _dispatch\n    return self._do_dispatch(endpoint, method, ctxt, args)\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo ...
(more)
edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by 9lives
close date 2014-12-09 04:31:05.293876

Comments

Just to clear my curiousness, why it is trying to authenticate with keystone v3 (/usr/local/lib/python2.7/dist-packages/keystoneclient/v3/client.py) although the request is originated to (v2) Making authentication request to http://172.16.69.179:5000/v2.0/tokens? Heat Endpoints also are of v1.

Bharath gravatar imageBharath ( 2014-12-09 00:54:18 -0500 )edit

1 answer

Sort by ยป oldest newest most voted
1

answered 2014-12-09 00:11:06 -0500

9lives gravatar image

updated 2014-12-09 01:03:25 -0500

you should change the identity_uri = http://172.16.69.179:35357 to identity_uri = http://172.16.69.179:5000 and comment out the

auth_port = 35357
auth_host = 172.16.69.179

port 35357 is only for admin role to access keystone admin api, do not forget to restart heat service after the change.

Update: ok, we seemed have met this issue before, just disable the domain and trust feature if this is not mandatory for you.

#stack_domain_admin_password = openstack
#stack_domain_admin = heat_domain_admin
#stack_user_domain_id = 3a7fc1ae1ebe49cd832df953daf500f8
#deferred_auth_method = trusts

then restart heat service Hope that helps!

Vic

edit flag offensive delete link more

Comments

Thanks for your response. Tried the same but it didn't work out. Facing the same issue yet again.

Bharath gravatar imageBharath ( 2014-12-09 00:44:24 -0500 )edit

Awesome..update did the trick. You saved my day. Thanks a ton.

Bharath gravatar imageBharath ( 2014-12-09 01:16:11 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2014-12-08 23:46:55 -0500

Seen: 4,245 times

Last updated: Dec 09 '14