Ask Your Question
0

Unexpected error while requesting for authentication token

asked 2016-04-15 01:47:51 -0500

DarkKnight gravatar image

updated 2016-04-15 01:50:15 -0500

I am trying to install the Liberty RDO on Centos 7. I have religiously followed the instruction at the link http://docs.openstack.org/liberty/ins...

When i actually try to request for an authentication token as an admin user, i get a

An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-b6b14bae-3772-4625-add3-c28ce048008b)

As suggested in the above link,

I have already unset the environment variables(OS_URL, OS_TOKEN & OS_IDENTITY_API_VERSION). Also i have removed the admin_token_auth from the [pipeline:public_api], [pipeline:admin_api], and [pipeline:api_v3] sections in the /usr/share/keystone/keystone-dist-paste.ini file.

Here is my sample o/p and what i get in the keystone logs. It seems very difficult to debug.

[root@controller ~]# openstack --os-auth-url http://controller:35357/v3 --os-project-domain-id default --os-user-domain-id default --os-project-name admin --os-username admin --os-auth-type password token issue
Password:
An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-b6b14bae-3772-4625-add3-c28ce048008b)
[root@controller ~]#
[root@controller ~]#
[root@controller ~]# grep "req-b6b14bae-3772-4625-add3-c28ce048008b" /var/log/keystone/keystone.log
2016-04-15 17:31:11.464 23112 INFO keystone.common.wsgi [req-b6b14bae-3772-4625-add3-c28ce048008b - - - - -] POST http://controller:35357/v3/auth/tokens
2016-04-15 17:31:18.801 23112 WARNING keystone.common.wsgi [req-b6b14bae-3772-4625-add3-c28ce048008b - - - - -] An unexpected error prevented the server from fulfilling your request.
2016-04-15 17:31:18.803 23112 INFO eventlet.wsgi.server [req-b6b14bae-3772-4625-add3-c28ce048008b - - - - -] 10.0.0.20 - - [15/Apr/2016 17:31:18] "POST /v3/auth/tokens HTTP/1.1" 500 381 7.343067

PS: Also note that i was unable to start the httpd server mentioned in the previous pages of the same documentation and followed the steps mentioned at this question to overcome this .https://ask.openstack.org/en/question/78319/keystone-port-5000-used-by-python/ [Soumtrikarmakar answer] Any help will be deeply appreciated

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
0

answered 2016-04-15 05:40:59 -0500

dbaxps gravatar image

updated 2016-04-18 03:01:11 -0500

UPDATE 04/18/2016

 yum install -y https://www.rdoproject.org/repos/rdo-release.rpm
 yum update -y
 yum install -y openstack-packstack
 packstack --gen-answer-file answerAIO.txt
 Update answerAIO.txt  and set CONFIG_KEYSTONE_API_VERSION = v3
 packstack --anser-file=./answerAIO.txt

END UPDATE
I suggest you switch your mind ( been on CentOS 7.X), rather then religiously follow http://docs.openstack.org/liberty/ins...
For instance see the another sample kinda yours
https://ask.openstack.org/en/question...
Another option provided by RDO
https://www.linux.com/blog/rdo-libert...
Be aware of packstack and Triple0 are passing so called "Continuous integration" testing even between
stable releases. This testing allows to assure that not only packeged RDO versions like Liberty or Mitaka
don't have errors , but installation utilities don't have errors as well. Thus "CI" provides very high level of confidence for installations via Triple0 and packstack on RDO platform like RHEL 7, CentOS 7.
As far as original templates as Heat for Triple0 or answer-file for packstack are written properly.

edit flag offensive delete link more
0

answered 2016-04-18 00:22:28 -0500

DarkKnight gravatar image

updated 2016-04-18 01:00:37 -0500

Hi DBaxps,

I have tried updating the endpoint for these interfaces in the database. Still, the issue persists.For your reference,

[root@controller ~]# mysql --user root --password=root123 keystone -e "select interface, url from endpoint where service_id=(select id from service where service.type='identity');
"
+-----------+---------------------------------+
| interface | url                             |
+-----------+---------------------------------+
| admin     | http://controller:35357/v3 |
| internal  | http://controller:5000/v3  |
| public    | http://controller:5000/v3  |
+-----------+---------------------------------+

I have created the admin-openrc.sh file with the following contents

[root@controller ~]# cat admin-openrc.sh
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=admin
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin123
export OS_AUTH_URL=http://controller:35357/v3
export OS_IDENTITY_API_VERSION=3

=========== Still, i get the same issue.

[root@controller ~]# openstack token issue
An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-62a7fe0b-90da-450b-9624-33b4da683853)

Should i change the OS_AUTH_URL in the admin_openrc.sh file.

I also saw that you suggest the packstack way of installation. Could you guide me to links that get me started with that. Plus, i was thinking of manually doing this installation and then automate the process using ansible and not puppet which i believe has been used in the packstack. For this reason, i would need your help in getting this token issue sorted.

Thanks

edit flag offensive delete link more

Comments

Note: [root@controller ~]# curl http://controller:5000/v2.0 {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json----} [root@controller ~]# ping 192.169.142.127 PING 192.169.142.127 (192.169.142.127) 56(84) bytes of data. nor does curl work

DarkKnight gravatar imageDarkKnight ( 2016-04-18 00:39:45 -0500 )edit

Yes , packstack use puppet technology general idea is here
https://www.linux.com/blog/rdo-libert...
TripleO && Ansible is here https://www.rdoproject.org/tripleo/ ( just virt preview I think )

dbaxps gravatar imagedbaxps ( 2016-04-18 02:05:05 -0500 )edit

Virt preview in details is here :-
http://blog.oddbit.com/2016/02/19/dep...

dbaxps gravatar imagedbaxps ( 2016-04-18 02:09:26 -0500 )edit

Thanks for that. Any idea how to resolve this token issue manually? I have tried almost all the suggestions but none of them seem to work here.

DarkKnight gravatar imageDarkKnight ( 2016-04-18 02:11:33 -0500 )edit

It's hard to find error, running AIO Mitaka per https://www.rdoproject.org/install/qu... works with no problem, however by default generate keystone v2.0. You can switch to v3

dbaxps gravatar imagedbaxps ( 2016-04-18 02:47:52 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2016-04-15 01:47:51 -0500

Seen: 1,426 times

Last updated: Apr 18 '16