Ask Your Question
0

Account HEAD failed 401 Unauthorized issue

asked 2016-05-05 09:15:43 -0500

bacterie gravatar image

Hi guys, I'm having some issues getting the swift proxy to work using the Kilo guide http://docs.openstack.org/kilo/install-guide/install/apt/content/ch_keystone.html (http://docs.openstack.org/kilo/instal...) with Debian.
I have 2 servers: 10.52.12.235 which is the keystone server and 10.52.12.85 which is the proxy, controller and storage node.

The endpoints are:

   +--------------+-----------------------------------------------+
| Field        | Value                                         |
+--------------+-----------------------------------------------+
| adminurl     | http://10.52.12.85:8080                       |
| enabled      | True                                          |
| id           | a10c0974985a466892f574c8edc2f9eb              |
| internalurl  | http://10.52.12.85:8080/v1/AUTH_%(tenant_id)s |
| publicurl    | http://10.52.12.85:8080/v1/AUTH_%(tenant_id)s |
| region       | RegionOne                                     |
| service_id   | 892111d102ec4bd1a8175c1632573486              |
| service_name | swift                                         |
| service_type | object-store                                  |
+--------------+-----------------------------------------------+


+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| adminurl     | http://10.52.12.235:35357/v2.0   |
| enabled      | True                             |
| id           | e6e40a995a884879bf9bbc20db949a97 |
| internalurl  | http://10.52.12.235:5000/v2.0    |
| publicurl    | http://10.52.12.235:5000/v2.0    |
| region       | RegionOne                        |
| service_id   | 76487703163d434a9a688bd19039960c |
| service_name | keystone                         |
| service_type | identity                         |
+--------------+----------------------------------+

My credentials file contains

export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=demo
export OS_TENANT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=password
export OS_AUTH_URL=http://10.52.12.235:5000/v3

The proxy-server.conf file contains

 [DEFAULT]
bind_ip = 10.52.12.85
bind_port=8080
default_port=8080
swift_dir = /etc/swift
user = swift

[pipeline:main]
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk ratelimit authtoken keystoneauth container-quotas account-quotas slo dlo proxy-logging proxy-server

[app:proxy-server]
use = egg:swift#proxy
account_autocreate = true

sorting_method = affinity
read_affinity = r1z1=100, r2=200
write_affinity = r1, r2
write_affinity_node_count = 2 * replicas

[filter:tempauth]
use = egg:swift#tempauth

user_admin_admin = admin .admin .reseller_admin
user_test_tester = testing .admin
user_test2_tester2 = testing2 .admin
user_test_tester3 = testing3
user_test5_tester5 = testing5 service

[filter:authtoken]

paste.filter_factory = keystonemiddleware.auth_token:filter_factory
auth_uri = http://10.52.12.235:5000
auth_url = http://10.52.12.235:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = swift
password = passwordswift
delay_auth_decision = true

[filter:keystoneauth]
use = egg:swift#keystoneauth

operator_roles = admin, user

[filter:healthcheck]
use = egg:swift#healthcheck

[filter:cache]
use = egg:swift#memcache

memcache_servers = 10.52.12.85:11211

[filter:ratelimit]
use = egg:swift#ratelimit


 [filter:domain_remap]
use = egg:swift#domain_remap

[filter:catch_errors]
use = egg:swift#catch_errors

[filter:cname_lookup]
use = egg:swift#cname_lookup

[filter:staticweb]
use = egg:swift#staticweb

[filter:tempurl]
use = egg:swift#tempurl

[filter:formpost]
use = egg:swift#formpost

[filter:name_check]
use = egg:swift#name_check

[filter:list-endpoints]
use = egg:swift#list_endpoints

[filter:proxy-logging]
use = egg:swift#proxy_logging

[filter:bulk]
use = egg:swift#bulk

[filter:slo]
use = egg:swift#slo

[filter:dlo]
use = egg:swift#dlo

[filter:container-quotas]
use = egg:swift#container_quotas

[filter:account-quotas]
use = egg:swift#account_quotas

[filter:gatekeeper]
use = egg:swift#gatekeeper

[filter:container_sync]
use = egg:swift#container_sync

[filter:xprofile]
use = egg:swift#xprofile

When I issue swift --debug -V 3 stat to check if the setup is working, I get a 401 Unauthorized error:

swift --debug  -V 3 stat
DEBUG:keystoneclient.auth.identity.v3:Making authentication request to http://10.52.12.235:5000/v3/auth/tokens
INFO:urllib3.connectionpool:Starting new HTTP connection (1): 10.52.12.235
DEBUG:urllib3.connectionpool:"POST /v3/auth/tokens HTTP/1.1" 201 1701
DEBUG ...
(more)
edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2016-05-09 05:56:47 -0500

bacterie gravatar image

Hi,

Figured it out. Had packages installed from debian backports but not all of them. If you go with backports packages (newer versions), be careful that python-keystonemiddleware, python-swiftclient, python-keystoneclient, and their dependencies are also from backports.

Regards.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

2 followers

Stats

Asked: 2016-05-05 09:14:17 -0500

Seen: 136 times

Last updated: May 09 '16