Ask Your Question

authentication fails

asked 2015-07-28 08:44:01 -0600

Willi Geffers gravatar image

updated 2015-07-29 02:43:51 -0600

Hi! I've installed OpenStack kilo and it works fine. Then I set email addresses for the users demo and admin within horizon. Now I cannot login to horizon again - neither as admin user, nor as demo user - and even the CLI rejects all commands, e.g.

controller:~# openstack user list ERROR: openstack The request you have made requires authentication. (HTTP 401) (Request-ID: req-4e91b899-3659-4bca-81a8-fc39294ae2fd)

Changing the admin password doesn't work, too. When I unset OS_PASSWORD the command prompts for a password, but neither the admin password, nor the auth_token from keystone.conf are accepted and the command terminates with the same error message.

Is there a way to reset the passwords or to reinitialize the user database?

Thanks Willi

edit retag flag offensive close merge delete


can you check keystone logs and update the question with them?

smaffulli gravatar imagesmaffulli ( 2015-07-28 10:08:39 -0600 )edit

I've verified the behaviour and changed demo's email address in the dashboard. Again the password has been nulled and I'd to set a new password.

Willi Geffers gravatar imageWilli Geffers ( 2015-07-29 02:05:34 -0600 )edit

2 answers

Sort by ยป oldest newest most voted

answered 2015-07-29 02:00:11 -0600

Willi Geffers gravatar image

Meanwhile I've checked the content of the user table in the keystone database on the controller node. The users demo and admin had a NULL password set. I restored the database from my nightly backup and now I can login again.

edit flag offensive delete link more

answered 2015-07-29 06:59:02 -0600

RAHUL1603 gravatar image

Hi Willi,

You can reset the users as follows.

  1. You need to bypass the authentication by using and endpoint and token. Modify this in keystone.conf admin_token = something

export OS_SERVICE_TOKEN=something export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0

  1. Now you need to delete the previous users and recreate a new one. For example the admin user.

keystone user-delete admin keystone user-create --name admin --pass ADMIN_PASS --email EMAIL_ADDRESS keystone user-role-add --user admin --tenant admin --role admin

And you're done

Regards Rahul1603

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2015-07-28 08:44:01 -0600

Seen: 847 times

Last updated: Jul 29 '15