Ask Your Question
1

Change Keystone Endpoint IP

asked 2013-12-24 11:25:38 -0600

Ron L. gravatar image

updated 2014-01-22 15:12:42 -0600

Evgeny gravatar image

Hi, I deployed with RDO and now I am running into errors connecting to Keystone because of incorrect IP.

11:11 Module (OpenStack): HTTP error on [http://127.0.0.1:8774/v2/b45d434e73774f1dbc6bd97549fbd577/extensions], curl code [7] message [couldn't connect to host]

Running keystone endpoint-list gets me:

OS Password: 
+----------------------------------+-----------+---------------------------------------------+---------------------------------------------+----------------------------------------+----------------------------------+
|                id                |   region  |                  publicurl                  |                 internalurl                 |                adminurl                |            service_id            |
+----------------------------------+-----------+---------------------------------------------+---------------------------------------------+----------------------------------------+----------------------------------+
| 0728fcdbdf1c49e7933ce63a674b7de9 | RegionOne | http://127.0.0.1:8080/v1/AUTH_%(tenant_id)s | http://127.0.0.1:8080/v1/AUTH_%(tenant_id)s |         http://127.0.0.1:8080/         | b1303583fd2b40eab555c81b36b6f160 |
| 269fa899f785440196a042da6a1bab3f | RegionOne |            http://127.0.0.1:9696/           |            http://127.0.0.1:9696/           |         http://127.0.0.1:9696/         | 59bb18363ae34b4896d6386d8f5ef0c7 |
| 3eace7beb2834a2581a2bd028e75a1da | RegionOne |     http://127.0.0.1:8773/services/Cloud    |     http://127.0.0.1:8773/services/Cloud    |  http://127.0.0.1:8773/services/Admin  | 75837782cc4a46f6963a1b934ffa8bf7 |
| 3fcaa5bdb316456caada736322aff176 | RegionOne |    http://127.0.0.1:8776/v1/%(tenant_id)s   |    http://127.0.0.1:8776/v1/%(tenant_id)s   | http://127.0.0.1:8776/v1/%(tenant_id)s | afd1a0e0f76442fcb4db0fc1347b5222 |
| 4200753e00454aae9c20c84f7497e7b2 | RegionOne |            http://127.0.0.1:8080            |            http://127.0.0.1:8080            |         http://127.0.0.1:8080          | a07fe93955d6435c88be17519d1890c3 |
| 677de708a5fd4548876436d271b4e4c7 | RegionOne |            http://127.0.0.1:8777            |            http://127.0.0.1:8777            |         http://127.0.0.1:8777          | 7a246a5d711a4af5924649b260ebc643 |
| 7d2f2e078480450390729d8fa9b9c243 | RegionOne |    http://127.0.0.1:8774/v2/%(tenant_id)s   |    http://127.0.0.1:8774/v2/%(tenant_id)s   | http://127.0.0.1:8774/v2/%(tenant_id)s | c04d6c83ba3f49d6a9ec944acb01f6bf |
| 9e17a789f8954618adbd2506742a52cd | RegionOne |          http://127.0.0.1:5000/v2.0         |          http://127.0.0.1:5000/v2.0         |      http://127.0.0.1:35357/v2.0       | 97f63f9eb23143c5abd1965cf1f67fea |
| a89f06f94e654614a57c5b96bd1db15f | RegionOne |            http://127.0.0.1:9292            |            http://127.0.0.1:9292            |         http://127.0.0.1:9292          | 96d662fcdda4460da3f6b5b315453f89 |
| c4673deefe5147e2aa9b07ba4ce99cbc | RegionOne |    http://127.0.0.1:8776/v2/%(tenant_id)s   |    http://127.0.0.1:8776/v2/%(tenant_id)s   | http://127.0.0.1:8776/v2/%(tenant_id)s | e19554ccbc2e446587d18a8d8efa54e9 |
+----------------------------------+-----------+---------------------------------------------+---------------------------------------------+----------------------------------------+----------------------------------+

As you can see, all of the URLs start with "127.0.0.1". I believe changing that to the public IP will fix my issue. What's the process for changing that?

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by ยป oldest newest most voted
1

answered 2013-12-24 13:58:58 -0600

jtopjian gravatar image

You could do three different things:

  1. Use the various keystone help | grep endpoint commands to remove your current endpoints and re-add them with the right URLs.
  2. Use a SQL query to update the rows directly against MySQL
  3. Switch to a text-based TemplatedCatalog in keystone.conf as then the catalog is defined as a plain text file and you'd just update the endpoints just as you would with any other text file and restart Keystone when you're done.

Hope that helps,

Joe

edit flag offensive delete link more

Comments

Thanks Joe. After my server finishing reinstalling I'll try the first method. And how do I find out the correct auth URL and keystone admin token? I always get a 404 when running keystone commands after using "export ADMIN_TOKEN" (the right command, not this" and "export OS_AUTH_URL"

Ron L. gravatar imageRon L. ( 2013-12-24 15:00:57 -0600 )edit

OS_AUTH_URL will be http://localhost:5000/v2.0 if you are just going to run commands on the local server. Replace localhost with a remote server if you'll be running commands remotely. I've pasted a generic openrc file here: http://paste.openstack.org/show/56759/ which might help.

jtopjian gravatar imagejtopjian ( 2013-12-24 16:07:21 -0600 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2013-12-24 11:25:38 -0600

Seen: 5,358 times

Last updated: Dec 24 '13

Related questions

DomainNotFound: Could not find domain: default

Ceilometer central agent failing

How to use multiple ldap url in keystone.conf for HA

keystone HTTP 500 error

keystone via httpd and remote_user

Doubts about User role in keystone

You are not authorized to perform the requested action: admin_required (Disable debug mode to suppress these details.)

how keystone using gunicorn

python-openstackclient token scope issue for user/domain

could not telnet to keystone port from another machine