Ask Your Question
0

nova-consoleauth token check always returns False. [closed]

asked 2015-01-27 08:39:47 -0600

jpmethot gravatar image

Greetings,

I currently have this issue with the console and I'm not exactly sure how to troubleshoot from here. But first, let me explain the openstack setup a bit :

This is a Icehouse setup with HA through HAproxy. The load-bablanced IP for the controllers is 10.251.0.245. Here's the configuration on the compute nodes :

vnc_enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = 10.251.0.102
novncproxy_base_url = http://10.251.0.245:6080/vnc_auto.html

Here is the configuration on the controller nodes :

vncserver_listen = 10.251.0.201
vncserver_proxyclient_address = 10.251.0.245

I have tested and I am able to access the vnc console through a realVNC client that connects directly to the compute node. However, dashboard connections always fail. Further research led me to the following line in /var/log/upstart/nova-consoleauth.log :

2015-01-27 08:57:19.976 1936 AUDIT nova.consoleauth.manager [req-dd18fb7a-e8ef-4540-b4c7-1a80a1773fc8 None None] Checking Token: -redacted-, False

(Please note I have removed the actual token number from that output)

It looks like there is something preventing the token sent by nova-compute to be recognized as true, but I am not sure how to troubleshoot it from there. How exactly is the token sent from nova-compute to nova-consoleauth? Is there a way I could intercept it and try adding it manually in nova-consoleauth, for testing purposes?

edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by jpmethot
close date 2015-02-17 08:30:09.852950

1 answer

Sort by ยป oldest newest most voted
0

answered 2015-01-27 23:00:40 -0600

Do you have directive in ha proxy for port 6080 ? You need that for novnc to work through the lb.

edit flag offensive delete link more

Comments

Also, I forgot , run nova get-vnc-console vmuuid novnc . this should return a URL that you can paste in to any browser.

sfcloudman gravatar imagesfcloudman ( 2015-01-27 23:21:29 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-01-27 08:39:47 -0600

Seen: 1,300 times

Last updated: Jan 27 '15