Why can't neutron get a keystone token

asked 2015-07-29 10:15:59 -0600

BlackSpy21 gravatar image

updated 2015-07-29 12:36:21 -0600


I'm following the OpenStack install guide and I hit the first snag I can't work out. I've gone back and traced each step and everything looks right. I'm trying to configure neturon on the controller node and am running the verification steps. When trying to run

neutron ext-list

I get "Unauthorized (HTTP 401)".

Keystone and nova command run fine (so the variables set by the admin-openrc.sh file is obv working). If I run the command with --debug I get the trace below. Any help greatly appreciated.

blackspy21@controller:~$ neutron ext-list --debug
DEBUG: keystoneclient.session REQ: curl -i -X GET http://controller:35357/v2.0 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
DEBUG: keystoneclient.session RESP: [200] {'date': 'Wed, 29 Jul 2015 15:14:19 GMT', 'vary': 'X-Auth-Token', 'content-length': '421', 'content-type': 'application/json', 'x-distribution': 'Ubuntu'}
RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}, {"base": "application/xml", "type": "application/vnd.openstack.identity-v2.0+xml"}], "id": "v2.0", "links": [{"href": "http://controller:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}}

DEBUG: stevedore.extension found extension EntryPoint.parse('table = cliff.formatters.table:TableFormatter')
DEBUG: stevedore.extension found extension EntryPoint.parse('csv = cliff.formatters.commaseparated:CSVLister')
DEBUG: neutronclient.neutron.v2_0.extension.ListExt get_data(Namespace(columns=[], fields=[], formatter='table', max_width=0, quote_mode='nonnumeric', request_format='json', show_details=False))
DEBUG: keystoneclient.auth.identity.v2 Making authentication request to http://controller:35357/v2.0/tokens
DEBUG: keystoneclient.session REQ: curl -i -X GET http://controller:9696/v2.0/extensions.json -H "User-Agent: python-neutronclient" -H "Accept: application/json" -H "X-Auth-Token: 808fcc3f9efc4e39bc50011e801437a1"
DEBUG: keystoneclient.session RESP:
DEBUG: keystoneclient.auth.identity.v2 Making authentication request to http://controller:35357/v2.0/tokens
DEBUG: keystoneclient.session RESP:
DEBUG: keystoneclient.session Request returned failure status: 401
ERROR: neutronclient.shell Unauthorized (HTTP 401) (Request-ID: req-33cdd9ee-1838-42e3-b2c8-f2bf2e24400e)
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/neutronclient/shell.py", line 691, in run_subcommand
    return run_command(cmd, cmd_parser, sub_argv)
  File "/usr/lib/python2.7/dist-packages/neutronclient/shell.py", line 90, in run_command
    return cmd.run(known_args)
  File "/usr/lib/python2.7/dist-packages/neutronclient/common/command.py", line 29, in run
    return super(OpenStackCommand, self).run(parsed_args)
  File "/usr/lib/python2.7/dist-packages/cliff/display.py", line 91, in run
    column_names, data = self.take_action(parsed_args)
  File "/usr/lib/python2.7/dist-packages/neutronclient/common/command.py", line 35, in take_action
    return self.get_data(parsed_args)
  File "/usr/lib/python2.7/dist-packages/neutronclient/neutron/v2_0/__init__.py", line 669, in get_data
    data = self.retrieve_list(parsed_args)
  File "/usr/lib/python2.7/dist-packages/neutronclient/neutron/v2_0/__init__.py", line 638, in retrieve_list
    data = self.call_server(neutron_client, search_opts, parsed_args)
  File "/usr/lib/python2.7/dist-packages/neutronclient/neutron/v2_0/__init__.py", line 610, in call_server
    data = obj_lister(**search_opts)
  File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line 99, in with_params
    ret = self.function(instance, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/neutronclient/v2_0/client.py", line ...
edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2015-08-04 02:04:07 -0600

Tobias Urdin gravatar image

I had issues configuration keystone_authtoken a while ago and needed to add the following, maybe it helps you. I have not cleaned the configuration yet, some of these options is deprecated and will be removed but have checked which ones yet.

auth_uri =
auth_url = http://12.3.4:35357
identity_uri =
auth_host =
auth_protocol = http
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = neutronpasswordhere

Best regards

edit flag offensive delete link more


You sir, are the man!! Thank you so much. All working.

BlackSpy21 gravatar imageBlackSpy21 ( 2015-08-19 09:37:50 -0600 )edit

I'm glad it helped you :)

Tobias Urdin gravatar imageTobias Urdin ( 2015-08-27 02:19:30 -0600 )edit

answered 2015-07-29 12:38:41 -0600

Your credentials in adminrc is fine. Check the keystone service credential in neutron.conf. Most probably they are wrong.

edit flag offensive delete link more


Hi Haneef

Have checked the keystone credentials in neutron.conf. They all look correct. Do you have any other ideas?

[keystone_authtoken] auth_uri = http://controller:5000/v2.0 identity_url = http://controller:35357 admin_tenant_name = service admin_user = neutron admin_password = admin_password

BlackSpy21 gravatar imageBlackSpy21 ( 2015-07-30 01:55:32 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools



Asked: 2015-07-29 10:15:59 -0600

Seen: 1,883 times

Last updated: Aug 04 '15