Ask Your Question

Heat client Authorization failed: Internal Server Error (HTTP 500) [closed]

asked 2014-12-08 23:46:55 -0500

Bharath gravatar image

I installed openstack using devstack enabling heat service. When trying to create any stack using the below command format, I am facing the below failure with respect to Authorization. Stuck with this.

heat --debug  stack-create -f test-stack.yml -P "ImageID=cirros-0.3.2-x86_64-uec;NetID=private" testStack
DEBUG (session) REQ: curl -i -X GET -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
DEBUG (session) RESP: [200] date: Tue, 09 Dec 2014 05:29:33 GMT content-type: application/json content-length: 423 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) 
RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}, {"base": "application/xml", "type": "application/vnd.openstack.identity-v2.0+xml"}], "id": "v2.0", "links": [{"href": "", "rel": "self"}, {"href": "", "type": "text/html", "rel": "describedby"}]}}

DEBUG (v2) Making authentication request to
DEBUG (session) REQ: curl -i -X POST -H "Accept: application/json" -H "X-Auth-Token: {SHA1}d08f1798ca007b6967f12bf0a0e1002bfd38fa10" -H "X-Region-Name: RegionOne" -H "X-Auth-Key: openstack" -H "X-Auth-User: demo" -H "User-Agent: python-heatclient" -H "Content-Type: application/json" -H "X-Auth-Url:" -d '{"files": {}, "disable_rollback": true, "parameters": {"NetID": "private", "ImageID": "cirros-0.3.2-x86_64-uec"}, "stack_name": "testStack", "environment": {}, "template": {"outputs": {"server1_private_ip": {"description": "IP address of the server in the private network", "value": {"get_attr": ["server1", "first_address"]}}}, "heat_template_version": "2013-05-23", "description": "Test Template", "parameters": {"ImageID": {"type": "string", "description": "Image use to boot a server"}, "NetID": {"type": "string", "description": "Network ID for the server"}}, "resources": {"server1": {"type": "OS::Nova::Server", "properties": {"image": {"get_param": "ImageID"}, "name": "Test server", "flavor": "m1.tiny", "networks": [{"network": {"get_param": "NetID"}}]}}}}}'
DEBUG (session) RESP:
Traceback (most recent call last):
  File "/usr/local/bin/heat", line 10, in <module>
  File "/usr/local/lib/python2.7/dist-packages/heatclient/", line 656, in main
  File "/usr/local/lib/python2.7/dist-packages/heatclient/", line 606, in main
    args.func(client, args)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/v1/", line 114, in do_stack_create
  File "/usr/local/lib/python2.7/dist-packages/heatclient/v1/", line 119, in create
    data=kwargs, headers=headers)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/common/", line 254, in json_request
    resp = self._http_request(url, method, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/heatclient/common/", line 344, in _http_request
    raise exc.from_response(resp)
heatclient.exc.HTTPInternalServerError: ERROR: Remote error: AuthorizationFailure Authorization failed: Internal Server Error (HTTP 500)
[u'Traceback (most recent call last):\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo/messaging/rpc/", line 134, in _dispatch_and_reply\n    incoming.message))\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo/messaging/rpc/", line 177, in _dispatch\n    return self._do_dispatch(endpoint, method, ctxt, args)\n', u'  File "/usr/local/lib/python2.7/dist-packages/oslo ...
edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by 9lives
close date 2014-12-09 04:31:05.293876


Just to clear my curiousness, why it is trying to authenticate with keystone v3 (/usr/local/lib/python2.7/dist-packages/keystoneclient/v3/ although the request is originated to (v2) Making authentication request to Heat Endpoints also are of v1.

Bharath gravatar imageBharath ( 2014-12-09 00:54:18 -0500 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2014-12-09 00:11:06 -0500

9lives gravatar image

updated 2014-12-09 01:03:25 -0500

you should change the identity_uri = to identity_uri = and comment out the

auth_port = 35357
auth_host =

port 35357 is only for admin role to access keystone admin api, do not forget to restart heat service after the change.

Update: ok, we seemed have met this issue before, just disable the domain and trust feature if this is not mandatory for you.

#stack_domain_admin_password = openstack
#stack_domain_admin = heat_domain_admin
#stack_user_domain_id = 3a7fc1ae1ebe49cd832df953daf500f8
#deferred_auth_method = trusts

then restart heat service Hope that helps!


edit flag offensive delete link more


Thanks for your response. Tried the same but it didn't work out. Facing the same issue yet again.

Bharath gravatar imageBharath ( 2014-12-09 00:44:24 -0500 )edit

Awesome..update did the trick. You saved my day. Thanks a ton.

Bharath gravatar imageBharath ( 2014-12-09 01:16:11 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools



Asked: 2014-12-08 23:46:55 -0500

Seen: 4,661 times

Last updated: Dec 09 '14