Ask Your Question
1

Glance image-list: Invalid OpenStack Identity credentials in L [closed]

asked 2015-12-24 23:10:47 -0500

Donn gravatar image

updated 2015-12-31 01:46:17 -0500

hi all,

i met a problem about the identity credential issue. the installation guide is "http://docs.openstack.org/liberty/install-guide-ubuntu/". when trying to create an image or show image list. an error "Invalid OpenStack Identity credentials" occurred. i have tried both on ubuntu 14.04 LTS and ubuntu 15. but issue is same.

i checked this website and found some similar issue, such as 'https://ask.openstack.org/en/question/57155/image-service-invalid-openstack-identity-credentials/". the solution in this issue cannot solve my problem.

i have looked into it for long time but....

all ENV have been sourced into OS.

root@Controller:~# env | grep OS_
OS_PROJECT_DOMAIN_ID=default
OS_IMAGE_API_VERSION=2
OS_USER_DOMAIN_ID=default
OS_PROJECT_NAME=admin
OS_IDENTITY_API_VERSION=3
OS_PASSWORD=Admin123
OS_AUTH_URL=http://controller:35357/v3
OS_USERNAME=admin
OS_TENANT_NAME=admin
root@Controller:~#

when using "glance image-list", blow is error log:

2015-12-26 12:32:35.632 5645 DEBUG eventlet.wsgi.server [-] (5645) accepted ('10.20.0.2', 41093) server /usr/lib/python2.7/dist-packages/eventlet/wsgi.py:826
2015-12-26 12:32:35.636 5645 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET /v2/images Accept: */* process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:47
2015-12-26 12:32:35.637 5645 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:60
2015-12-26 12:32:35.638 5645 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v2 process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:72
2015-12-26 12:32:35.638 5645 DEBUG glance.api.middleware.version_negotiation [-] new path /v2/images process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:73
2015-12-26 12:32:35.640 5645 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://controller:35357 -H "Accept: application/json" -H "User-Agent: glance/11.0.0 keystonemiddleware.auth_token/2.3.0" _http_log_request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:198
2015-12-26 12:32:35.653 5645 DEBUG keystoneclient.session [-] RESP: [300] Content-Length: 591 Vary: X-Auth-Token Keep-Alive: timeout=5, max=100 Server: Apache/2.4.7 (Ubuntu) Connection: Keep-Alive Date: Sat, 26 Dec 2015 04:32:35 GMT Content-Type: application/json X-Distribution: Ubuntu 
RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://controller:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://controller:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
 _http_log_response /usr/lib/python2.7/dist-packages/keystoneclient/session.py:215
2015-12-26 12:32:35.654 5645 DEBUG keystoneclient.auth.identity.v3.base [-] Making authentication request to http://controller:35357/v3/auth/tokens get_auth_ref /usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3/base.py:188
2015-12-26 12:32:35.738 5645 DEBUG keystoneclient.session [-] Request returned failure status: 400 request /usr/lib/python2.7/dist-packages/keystoneclient/session.py:400
2015-12-26 12:32:35.738 ...
(more)
edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by Donn
close date 2016-01-10 20:40:10.467397

2 answers

Sort by ยป oldest newest most voted
0

answered 2015-12-30 01:44:05 -0500

Donn gravatar image

api log while changing "user-name" to "username":

2015-12-24 21:58:37.724 2811 INFO glance.common.wsgi [-] Child 2811 exiting normally 2015-12-24 21:58:38.833 2822 WARNING oslo_config.cfg [-] Option "username" from group "keystone_authtoken" is deprecated. Use option "user-name" from group "keystone_authtoken". 2015-12-24 21:58:38.894 2822 INFO glance.common.wsgi [-] Starting 2 workers 2015-12-24 21:58:38.897 2822 INFO glance.common.wsgi [-] Started child 2831 2015-12-24 21:58:38.898 2831 INFO eventlet.wsgi.server [-] (2831) wsgi starting up on http://0.0.0.0:9292/ 2015-12-24 21:58:38.901 2822 INFO glance.common.wsgi [-] Started child 2832 2015-12-24 21:58:38.902 2832 INFO eventlet.wsgi.server [-] (2832) wsgi starting up on http://0.0.0.0:9292/ root@Controller:/var/log/glance#

register.log while changing to "username":

2015-12-24 21:58:33.126 2767 INFO glance.common.wsgi [-] Child 2767 exiting normally 2015-12-24 21:58:33.917 2778 WARNING oslo_config.cfg [-] Option "username" from group "keystone_authtoken" is deprecated. Use option "user-name" from group "keystone_authtoken". 2015-12-24 21:58:33.920 2778 INFO glance.common.wsgi [-] Starting 2 workers 2015-12-24 21:58:33.923 2778 INFO glance.common.wsgi [-] Started child 2788 2015-12-24 21:58:33.924 2788 INFO eventlet.wsgi.server [-] (2788) wsgi starting up on http://0.0.0.0:9191/ 2015-12-24 21:58:33.927 2778 INFO glance.common.wsgi [-] Started child 2789 2015-12-24 21:58:33.928 2789 INFO eventlet.wsgi.server [-] (2789) wsgi starting up on http://0.0.0.0:9191/ root@Controller:/var/log/glance#

edit flag offensive delete link more

Comments

What's the solution you performed to resolve?

sameerlowlekar gravatar imagesameerlowlekar ( 2016-08-12 04:10:07 -0500 )edit
0

answered 2015-12-29 11:02:55 -0500

aksan gravatar image

I think the configuration of glance-api.conf is wrong. Just do one thing replace "user-name" with "username". The credentials were not loaded because of "user-name".Also, check whether its "username" in glance-registry.conf. Then restart glance-api and glance-registry. Let me know if this works.

edit flag offensive delete link more

Comments

hi, thanks for your reply. "user-name" is correct. if i change it to "username", there are some error log when i start api or registry processes. it's also a document bug in openstack web.

Donn gravatar imageDonn ( 2015-12-29 20:39:24 -0500 )edit

Hi, Can you please post the link for the document bug. Also, can you check the configuration of nova.conf, neutron.conf or the environment script file whether you have used "username" or "user-name"?

aksan gravatar imageaksan ( 2015-12-29 22:41:16 -0500 )edit

hi, thanks. i don't have the corresponding bug link. bug i have saw many time about this issue. the correct should be "user-name" or "user_name". you can say the log file from below when i change it.

Donn gravatar imageDonn ( 2015-12-30 01:42:43 -0500 )edit

Please use username in keystone_authtoken. The deprecation output is wrong. The problem has already been fixed, but it has not been released so far: https://github.com/openstack/python-k...

Herr-Herner gravatar imageHerr-Herner ( 2015-12-30 10:56:45 -0500 )edit

I had nearly the same problem and reported it here: https://ask.openstack.org/en/question.... I got it working now, but I am not sure what was the solution. I have an HA deployment and I think the problem was a missing memcached server destination.

Herr-Herner gravatar imageHerr-Herner ( 2015-12-30 11:07:43 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2015-12-24 23:10:47 -0500

Seen: 731 times

Last updated: Dec 31 '15