Ask Your Question
0

nova image-list:ERROR: Unauthorized (HTTP 401)

asked 2013-11-01 22:01:17 -0600

billying3 gravatar image

updated 2014-01-22 15:12:22 -0600

Evgeny gravatar image

Dear All,

I get the error message:"Unauthorized (HTTP 401)" after I inputted "nova image-list",is anyone have idea about this issue?Thanks a lot!

here is my configurations:

version:havana reference: openstack-install-guide-apt-havana.pdf(official website)

/etc/nova/nova.conf

[DEFAULT]
dhcpbridge_flagfile=/etc/nova/nova.conf
dhcpbridge=/usr/bin/nova-dhcpbridge
logdir=/var/log/nova
state_path=/var/lib/nova
lock_path=/var/lock/nova
force_dhcp_release=True
iscsi_helper=tgtadm
libvirt_use_virtio_for_bridges=True
connection_type=libvirt
root_helper=sudo nova-rootwrap /etc/nova/rootwrap.conf
verbose=True
ec2_private_dns_show_ip=True
api_paste_config=/etc/nova/api-paste.ini
volumes_path=/var/lib/nova/volumes
enabled_apis=ec2,osapi_compute,metadata
auth_strategy = keystone
rpc_backend = nova.rpc.impl_kombu
rabbit_host = controller
debug=True
[database]
# The SQLAlchemy connection string used to connect to the database
connection = mysql://nova:NOVA_DBPASS@controller/nova

my_ip=192.168.0.10
vncserver_listen=192.168.0.10
vncserver_proxyclient_address=192.168.0.10

nova --debug image-list

 REQ: curl -i http://controller:35357/v2.0/tokens -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "User-Agent: python-novaclient" -d '{"auth": {"tenantName": "admin", "passwordCredentials": {"username": "admin", "password": "ADMIN_PASS"}}}'

INFO (connectionpool:202) Starting new HTTP connection (1): controller
DEBUG (connectionpool:296) "POST /v2.0/tokens HTTP/1.1" 200 3822
RESP: [200] CaseInsensitiveDict({'date': 'Sat, 02 Nov 2013 02:50:07 GMT', 'vary': 'X-Auth-Token', 'content-length': '3822', 'content-type': 'application/json'})
RESP BODY: {"access": {"token": {"issued_at": "2013-11-02T02:50:07.595083", "expires": "2013-11-03T02:50:07Z", "id": "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-THpEFCQyXuh7u80Kqrwu3G8rkhEAQm5x9U0T1IxV8gSPIwKFB36nVavZCIpqUE43AP5b6D6D7wcQSYZpc21ru34tIpuveOpcuvnZTvkRRaIWbsMokCQWV7YnpKt+Cz0q+s4k19SXwbSsJz+CeDZJJQXZ0jyMNsBoOsXkO-s0aO9oIbrBEM9Jfq4GR1YE1I9kRqWu895FOruREn7i2rAIuEQ-biYlorgXT1a9eI3qxk8rR9cNhzhuAwZk7miXqInIhb5DWcQk6Nfk+Lz3xqZucFDz-SUPv7VdXMUGurr+1AzlXPxYaPYW2TJAq6jUHM8HKeQ==", "tenant": {"description": "Admin Tenant", "enabled": true, "id": "0f870819e37b45d784affdaad7382170", "name": "admin"}}, "serviceCatalog": [{"endpoints": [{"adminURL": "http://controller:9292", "region": "regionOne", "internalURL": "http://controller:9292", "id": "19e7297eb82d4cd5ad47ea556321d51c", "publicURL": "http://controller:9292"}], "endpoints_links": [], "type": "image", "name": "glance"}, {"endpoints": [{"adminURL": "http://controller:8774/v2/0f870819e37b45d784affdaad7382170", "region": "regionOne", "internalURL": "http://controller:8774/v2/0f870819e37b45d784affdaad7382170", "id": "0c938b7e120f48d8a4c86913d0d4707a", "publicURL": "http://controller:8774/v2/0f870819e37b45d784affdaad7382170"}], "endpoints_links": [], "type": "compute", "name": "nova"}, {"endpoints": [{"adminURL": "http://controller:35357/v2.0", "region": "regionOne", "internalURL": "http://controller:5000/v2.0", "id": "61ff07c1ca8944d8a58da51452de79f5", "publicURL": "http://controller:5000/v2.0"}], "endpoints_links": [], "type": "identity", "name": "keystone"}], "user": {"username": "admin", "roles_links": [], "id": "838acae51c454ffab32956160d996759", "roles": [{"name": "admin"}], "name": "admin"}, "metadata": {"is_admin": 0, "roles": ["14047088fa844d09b9ef15f7604e7e30"]}}}


REQ: curl -i http://controller:8774/v2/0f870819e37b45d784affdaad7382170/images/detail -X GET -H "X-Auth-Project-Id: admin" -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: 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-THpEFCQyXuh7u80Kqrwu3G8rkhEAQm5x9U0T1IxV8gSPIwKFB36nVavZCIpqUE43AP5b6D6D7wcQSYZpc21ru34tIpuveOpcuvnZTvkRRaIWbsMokCQWV7YnpKt+Cz0q+s4k19SXwbSsJz+CeDZJJQXZ0jyMNsBoOsXkO-s0aO9oIbrBEM9Jfq4GR1YE1I9kRqWu895FOruREn7i2rAIuEQ-biYlorgXT1a9eI3qxk8rR9cNhzhuAwZk7miXqInIhb5DWcQk6Nfk+Lz3xqZucFDz-SUPv7VdXMUGurr+1AzlXPxYaPYW2TJAq6jUHM8HKeQ=="

INFO (connectionpool:202) Starting new HTTP connection (1): controller
DEBUG (connectionpool:296) "GET /v2/0f870819e37b45d784affdaad7382170/images/detail HTTP/1.1" 401 23
RESP: [401] CaseInsensitiveDict({'date': 'Sat, 02 Nov 2013 02:50:11 GMT', 'content-length': '23', 'content-type': 'text/plain', 'www-authenticate': "Keystone uri='http://controller:5000'"})
RESP BODY: Authentication required


REQ: curl -i http://controller:35357/v2.0/tokens -X POST -H "Content-Type: application/json" -H "Accept: application/json" -H "User-Agent: python-novaclient" -d '{"auth": {"passwordCredentials": {"username": "admin", "password": "ADMIN_PASS"}, "tenantId": "0f870819e37b45d784affdaad7382170"}}'

DEBUG (connectionpool:296) "POST /v2.0/tokens HTTP/1.1" 200 3822
RESP: [200] CaseInsensitiveDict({'date': 'Sat, 02 Nov 2013 02:50:11 GMT', 'vary': 'X-Auth-Token', 'content-length': '3822', 'content-type': 'application/json'})
RESP BODY: {"access": {"token": {"issued_at": "2013-11-02T02:50:11.280470", "expires": "2013-11-03T02:50:11Z", "id": "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-2eniw2jGADLS2TT09Ig3TmkzBpTNyIsk907CZvAmIoj0O6bnnz3uJ+DkAiXCAy8G1iTVYhIlXoSdfPgx-eZVs+JyBpV0baSvBQijKzar4M9bWyXVdMAeod5qpPfCBnUfjHe4dDB8H+aGx5tGI0aFlyJvLGlvGPZrxAl4oAD+GtCqbL+fEIF-hAOrdITJ8-h3HR2tBiUUIz5hvbc+DWvNi4DbQyjzz+3ahXgKUQKyXz-n8sbQe2cIA5y2MalOIZ0yiKOUuMIr7NY2fzAviXnlyApyvqEt7wd58uopT+W85aJGa6viFEbvCTZXJRonulKEfs4ZlrUeXuA ...
(more)
edit retag flag offensive close merge delete

5 answers

Sort by ยป oldest newest most voted
3

answered 2013-11-02 12:23:02 -0600

dheeru gravatar image

updated 2013-11-05 04:50:42 -0600

I'm assuming that you have keystone, glance and controller on same box. Can you check the keystone configuration and ensure that you are using the username/pass and tenant. Did you define the service and end points in keystone for nova ? I least suspect on this based on your logs. Are you running the keystone at port#5000 ? Did you complete keystone post install verifications steps as specified in documentation ? Did you complete glance post install verification steps as specified in documentation ? Did you define admin_token parameter correctly ? #admin_token = 64dc61827a326c4833a5(TOken generated by you). This should be same between keystone and other OS services.

You can check in /var/log/nova/nova-api.log and /var/log/keystone/keystone.log. ========================Now================= Hi From your mail I have understood that you are able to verify the glance installation. I'm pasting the link again to check you verified glance using the following link. http://docs.openstack.org/havana/install-guide/install/apt/content/glance-verify.html

  1. So are you able to see the images when you run the command 'glance image-list' ? If yes, it means that glance is working perfectly. If you are hitting the issue with 'nova image-list', it means that nova and glance are communicating. 2. Can you check your glance configurations ? http://virtual2privatecloud.com/2013/10/openstack-nova-glance-and-keystone-integration/
  2. Did you define glance end point at Keystone ?
  3. I see something wrong with compute end point definition. i.e (backward slash) is missing before (. May be you can send me the output of 'keystone service-list'. This will help.
  4. Also send me the keystone.log and glance.log and nova-api.log. This will help

These answers may give you some pointers on the issue.

================================================================

  1. What is the output of 'keystone user-list' , 'keystoner tenant-list', 'keystone role-list'
  2. Hope you have added the roles to user ' keystone user-role-add....' as in documentation.
  3. You can set the 'debug=true' in keystone.conf and restart the keystone.
  4. Now run the 'glance image-list'. Once we verify this step, we can get into troubleshooting glance itself.
edit flag offensive delete link more

Comments

Dear dheeru,Here are the testing results after your suggestions:1.I have checked the configuration of keystone The username(admin)/password(ADMIN_PASS) and tenant name (admin)are existing. 2.keystone service-list:nova | compute | Nova Compute Service keystone endpoint-list: http://controller:8774/v2/%25(tenant_id)s (http://controller:8774/v2/%(tenant_id)s) 3.The port of admin url is 35357 4.I have completed post installation(nova and glance) verification with no error 5.I have generated the admin_token by "openssl rand -hex 10" by the way where should I put the line "admin_token" for nova ? it's not mentioned in the guide. thanks!

billying3 gravatar imagebillying3 ( 2013-11-03 05:23:20 -0600 )edit

Hi From your mail I have understood that you are able to verify the glance installation. I'm pasting the link again to check you verified glance using the following link. http://docs.openstack.org/havana/install-guide/install/apt/content/glance-verify.html So are you able to see the images when you run the command 'glance image-list' ? If yes, it means that glance is working perfectly. If you are hitting the issue with 'nova image-list', it means that nova and glance are communicating. Can you check your glance configurations ? http://virtual2privatecloud.com/2013/10/openstack-nova-glance-and-keystone-integration/ 1. Did you define glance end point at Keystone ? 2. I see something wrong with compute end point definition. i.e \(backward slash) is missing before (. May be you can send me the output of 'keystone service-list'. This will help. 3. Also send me the keystone.log and glance.log and nova-api.log. This will help.

dheeru gravatar imagedheeru ( 2013-11-04 01:20:05 -0600 )edit

Hi dheeru, I have uploaded the logs and configurations to google drive,it seems something wrong related to the token https://drive.google.com/folderview?id=0B-_p-2Iau0t3amZJZmw5aHplTUE&usp=shari please take a look at them,thanks..:)

billying3 gravatar imagebillying3 ( 2013-11-04 23:05:14 -0600 )edit

Hi Bill I looked at the logs. Can you post your keystone.conf file ? Looks like keystone is culprit. Also were you able to run the command 'glance image-list' ? -Dheeru

dheeru gravatar imagedheeru ( 2013-11-05 04:34:54 -0600 )edit
1

================================================================ 1. What is the output of 'keystone user-list' , 'keystoner tenant-list', 'keystone role-list' 2. Hope you have added the roles to user ' keystone user-role-add....' as in documentation. 3. You can set the 'debug=true' in keystone.conf and restart the keystone. 4. Now run the 'glance image-list'. Once we verify this step, we can get into troubleshooting glance itself.

dheeru gravatar imagedheeru ( 2013-11-05 04:51:18 -0600 )edit
1

answered 2013-11-06 22:15:05 -0600

billying3 gravatar image

Hi dheeru,

I have solved the problem by delete the keystone 'user' nova and create a new one which password is not 'NOVA_PASS'.

Thanks for your time.

edit flag offensive delete link more

Comments

That is really nice as culprit was keystone and it's password. Need your favor on my help. See if you can vote help.

dheeru gravatar imagedheeru ( 2013-11-06 23:11:03 -0600 )edit

how to this? delete the keystone 'user' nova? and create a new one?

asma1290 gravatar imageasma1290 ( 2013-11-10 20:31:14 -0600 )edit

you can do that. Use keystone user-delete

dheeru gravatar imagedheeru ( 2013-11-12 04:13:14 -0600 )edit

btw,if your OS is ubuntu be remembered to add the line auth_protocol = http in the nova.conf,there is an omission in the document.

billying3 gravatar imagebillying3 ( 2013-11-12 07:25:35 -0600 )edit
0

answered 2014-04-21 23:25:43 -0600

dro gravatar image

updated 2014-04-21 23:26:02 -0600

I had this issue too , when creating the user nova, you set the password, that password is stored in /etc/nova/nova.conf.

This is set by openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_password somepassword

you can go into the nova.conf file and change it to match your nova user password, or you can delete the nova user like above and have it match whats in the configuration file.

edit flag offensive delete link more
0

answered 2013-11-02 04:27:30 -0600

amitg gravatar image

If you can run $> glance image-list but not $> nova image-list then update glance configuration in /etc/nova/nova.conf on your compute controller.

edit flag offensive delete link more
0

answered 2015-05-20 04:43:54 -0600

Napo Mokoetle gravatar image

A restart of nova services on the controller did the trick for me when I got the above discussed error during my upgrade to Kilo.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2013-11-01 22:01:17 -0600

Seen: 9,358 times

Last updated: May 20 '15