Ask Your Question
0

Horizon gets unauthorized from swift after a while

asked 2015-07-16 09:14:43 -0500

Gippa gravatar image

updated 2015-08-03 14:49:45 -0500

rbowen gravatar image

Hi! I've got Kilo on a new infrastructure, RDO repo, Centos 7. Swift is balanced with haproxy between two physical nodes. Horizon is able to interact with the object store, and can list from command line (swift list ....). However, after a while, I get a "unable to get containers".

From horizon logs, I see a problem with authentication:

========================================================================================================
[Thu Jul 16 13:51:25.567348 2015] [:error] [pid 8912] Deleted Object: "CentOS-7-x86_64-Minimal-1503-01.iso"
[Thu Jul 16 13:53:26.124737 2015] [:error] [pid 8912] REQ: curl -i http://swift:8080/v1/AUTH_845391df95974ed7ac02755b493afb05?format=json&limit=1001 -X GET -H "X-Auth-Token: 00ef836291544eff88ecc32af3d96a28"
[Thu Jul 16 13:53:26.124811 2015] [:error] [pid 8912] RESP STATUS: 401 Unauthorized
[Thu Jul 16 13:53:26.124882 2015] [:error] [pid 8912] RESP HEADERS: [('date', 'Thu, 16 Jul 2015 14:51:25 GMT'), ('content-length', '131'), ('content-type', 'text/html; charset=UTF-8'), ('www-authenticate', 'Swift realm="AUTH_845391df95974ed7ac02755b493afb05", Keystone uri=\\'http://keystone:5000/v2.0\\''), ('x-trans-id', 'tx6cd52d254a0c43a8b6cda-0055a7c4ed')]
[Thu Jul 16 13:53:26.124929 2015] [:error] [pid 8912] RESP BODY: <html><h1>Unauthorized</h1><p>This server could not verify that you are authorized to access the document you requested.</p></html>
[Thu Jul 16 13:53:26.125459 2015] [:error] [pid 8912] Account GET failed: http://swift:8080/v1/AUTH_845391df95974ed7ac02755b493afb05?format=json&limit=1001 401 Unauthorized  [first 60 chars of response] <html><h1>Unauthorized</h1><p>This server could not verify t
[Thu Jul 16 13:53:26.125472 2015] [:error] [pid 8912] Traceback (most recent call last):
[Thu Jul 16 13:53:26.125475 2015] [:error] [pid 8912]   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 1261, in _retry
[Thu Jul 16 13:53:26.125478 2015] [:error] [pid 8912]     rv = func(self.url, self.token, *args, **kwargs)
[Thu Jul 16 13:53:26.125481 2015] [:error] [pid 8912]   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 474, in get_account
[Thu Jul 16 13:53:26.125483 2015] [:error] [pid 8912]     end_marker, http_conn)
[Thu Jul 16 13:53:26.125485 2015] [:error] [pid 8912]   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 509, in get_account
[Thu Jul 16 13:53:26.125501 2015] [:error] [pid 8912]     http_response_content=body)
[Thu Jul 16 13:53:26.125504 2015] [:error] [pid 8912] ClientException: Account GET failed: http://swift:8080/v1/AUTH_845391df95974ed7ac02755b493afb05?format=json&limit=1001 401 Unauthorized  [first 60 chars of response] <html><h1>Unauthorized</h1><p>This server could not verify t
[Thu Jul 16 13:53:26.125740 2015] [:error] [pid 8912] Recoverable error: Account GET failed: http://swift:8080/v1/AUTH_845391df95974ed7ac02755b493afb05?format=json&limit=1001 401 Unauthorized  [first 60 chars of response] <html><h1>Unauthorized</h1><p>This server could not verify t
[Thu Jul 16 13:53:26.125971 2015] [:error] [pid 8912] No tenant specified
[Thu Jul 16 13:53:26.125979 2015] [:error] [pid 8912] Traceback (most recent call last):
[Thu Jul 16 13:53:26.125982 2015] [:error] [pid 8912]   File "/usr/lib/python2.7/site-packages ...
(more)
edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2015-08-10 05:10:28 -0500

mrunge gravatar image

Two suggestions: - swift to uuid tokens in keystone (if not already done) - add SESSION_ENGINE='django.contrib.sessions.backends.cache'

to /etc/openstack-dashboard/local_settings, e.g right above CACHES = { ...

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-07-16 09:14:43 -0500

Seen: 324 times

Last updated: Aug 10 '15