Revision history [back]

click to hide/show revision 1
initial version

Newton on Ubuntu 16.04 - Horizon login failed - keystone.log Authorization failed. The request you have made requires authentication.

Openstack Distro: Newton Operating System Ubuntu 16.04 New Build following Venu Murthy video series and adapting for Newton along the way.

So far build has been working well. I installed the Horizon module on my control node and am trying to login to the portal control/horizon. I confirmed that I am able to authenticate from two sources: 1. Error is different vs when I intentionally enter in a bad pwd. 2. /var/log/apache2/error.log shows my account logged in successfully.

After authenticating the page shows a generic error "Something went wrong!". The environment has been rebooted any google searches have not found any relevant fixes. So far I have validated the credentials for all accounts including service based accounts. Checked the config files to ensure the username and password entered in are accurate.

The error that I believe points to the issue is in the keystone.log file (copied below). It reports the error: * Authorization failed. The request you have made requires authentication. from 127.0.0.1

Here is a output of the logs I new to check:

/var/log/apache2/error.log [Tue Feb 07 18:00:58.344631 2017] [wsgi:error] [pid 1639:tid 140055415990016] Login successful for user "khuggins1". [Tue Feb 07 18:01:00.163017 2017] [wsgi:error] [pid 1639:tid 140055415990016] Internal Server Error: /horizon/auth/login/ [Tue Feb 07 18:01:00.163048 2017] [wsgi:error] [pid 1639:tid 140055415990016] Traceback (most recent call last): [Tue Feb 07 18:01:00.163053 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 132, in get_response [Tue Feb 07 18:01:00.163057 2017] [wsgi:error] [pid 1639:tid 140055415990016] response = wrapped_callback(request, callback_args, *callback_kwargs) [Tue Feb 07 18:01:00.163060 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 76, in sensitive_post_parameters_wrapper [Tue Feb 07 18:01:00.163069 2017] [wsgi:error] [pid 1639:tid 140055415990016] return view(request, args, *kwargs) [Tue Feb 07 18:01:00.163072 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py", line 110, in _wrapped_view [Tue Feb 07 18:01:00.163076 2017] [wsgi:error] [pid 1639:tid 140055415990016] response = view_func(request, args, *kwargs) [Tue Feb 07 18:01:00.163078 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/views/decorators/cache.py", line 57, in _wrapped_view_func [Tue Feb 07 18:01:00.163080 2017] [wsgi:error] [pid 1639:tid 140055415990016] response = view_func(request, args, *kwargs) [Tue Feb 07 18:01:00.163082 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/openstack_auth/views.py", line 103, in login [Tue Feb 07 18:01:00.163083 2017] [wsgi:error] [pid 1639:tid 140055415990016] *kwargs) [Tue Feb 07 18:01:00.163085 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 76, in sensitive_post_parameters_wrapper [Tue Feb 07 18:01:00.163087 2017] [wsgi:error] [pid 1639:tid 140055415990016] return view(request, *args, *kwargs) [Tue Feb 07 18:01:00.163089 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py", line 110, in _wrapped_view [Tue Feb 07 18:01:00.163091 2017] [wsgi:error] [pid 1639:tid 140055415990016] response = view_func(request, args, *kwargs) [Tue Feb 07 18:01:00.163092 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/views/decorators/cache.py", line 57, in _wrapped_view_func [Tue Feb 07 18:01:00.163094 2017] [wsgi:error] [pid 1639:tid 140055415990016] response = view_func(request, args, *kwargs) [Tue Feb 07 18:01:00.163096 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/contrib/auth/views.py", line 51, in login [Tue Feb 07 18:01:00.163098 2017] [wsgi:error] [pid 1639:tid 140055415990016] auth_login(request, form.get_user()) [Tue Feb 07 18:01:00.163100 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/contrib/auth/__init__.py", line 110, in login [Tue Feb 07 18:01:00.163107 2017] [wsgi:error] [pid 1639:tid 140055415990016] request.session.cycle_key() [Tue Feb 07 18:01:00.163110 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/contrib/sessions/backends/base.py", line 285, in cycle_key [Tue Feb 07 18:01:00.163111 2017] [wsgi:error] [pid 1639:tid 140055415990016] self.create() [Tue Feb 07 18:01:00.163113 2017] [wsgi:error] [pid 1639:tid 140055415990016] File "/usr/lib/python2.7/dist-packages/django/contrib/sessions/backends/cache.py", line 48, in create [Tue Feb 07 18:01:00.163115 2017] [wsgi:error] [pid 1639:tid 140055415990016] "Unable to create a new session key. " [Tue Feb 07 18:01:00.163116 2017] [wsgi:error] [pid 1639:tid 140055415990016] RuntimeError: Unable to create a new session key. It is likely that the cache is unavailable.

/var/log/apache2/keystone.log 2017-02-07 18:00:57.252938 2017-02-07 18:00:57.252 1644 WARNING keystone.assignment.core [-] Deprecated: Use of the identity driver config to automatically configure the same assignment driver has been deprecated, in the "O" release, the assignment driver will need to be expicitly configured if different than the default (SQL). 2017-02-07 18:00:57.621688 2017-02-07 18:00:57.621 1644 WARNING keystone.middleware.core [-] The admin_token_auth middleware presents a security risk and should be removed from the [pipeline:api_v3], [pipeline:admin_api], and [pipeline:public_api] sections of your paste ini file. 2017-02-07 18:00:57.656092 2017-02-07 18:00:57.655 1644 WARNING keystone.middleware.core [-] The admin_token_auth middleware presents a security risk and should be removed from the [pipeline:api_v3], [pipeline:admin_api], and [pipeline:public_api] sections of your paste ini file. 2017-02-07 18:00:57.718423 2017-02-07 18:00:57.717 1644 INFO keystone.common.wsgi [req-e0cabf42-7f22-457d-b3b2-67c1090bcdc5 - - - - -] POST http://control:5000/v3/auth/tokens 2017-02-07 18:00:57.993042 2017-02-07 18:00:57.991 1643 INFO keystone.common.wsgi [req-2214408c-6ca1-478f-a6d2-3f66189521e4 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] POST http://control:5000/v3/auth/tokens 2017-02-07 18:00:58.055350 2017-02-07 18:00:58.054 1643 WARNING keystone.common.wsgi [req-2214408c-6ca1-478f-a6d2-3f66189521e4 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] Authorization failed. The request you have made requires authentication. from 127.0.0.1 2017-02-07 18:00:58.091840 2017-02-07 18:00:58.085 1642 INFO keystone.common.wsgi [req-19b10c35-1128-4709-a7ae-7da94e21ae7f - - - - -] GET http://control:5000/v3/ 2017-02-07 18:00:58.127415 2017-02-07 18:00:58.127 1643 INFO keystone.common.wsgi [req-0fd826eb-1b1c-4686-bda7-3631f8b90e43 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] GET http://control:5000/v3/users/d59c31b8d27b41c7baf49f125c2b306f/projects 2017-02-07 18:00:58.230732 2017-02-07 18:00:58.229 1646 INFO keystone.common.wsgi [req-8163e441-5885-4e5b-b730-937898cde81f d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] POST http://control:5000/v3/auth/tokens

Newton on Ubuntu 16.04 - Horizon login failed - keystone.log Authorization failed. The request you have made requires authentication.

Openstack Distro: Newton Operating System Ubuntu 16.04 New Build following Venu Murthy video series and adapting for Newton along the way.

So far build has been working well. I installed the Horizon module on my control node and am trying to login to the portal control/horizon. I confirmed that I am able to authenticate from two sources: 1. Error is different vs when I intentionally enter in a bad pwd. 2. /var/log/apache2/error.log shows my account logged in successfully.

After authenticating the page shows a generic error "Something went wrong!". The environment has been rebooted any google searches have not found any relevant fixes. So far I have validated the credentials for all accounts including service based accounts. Checked the config files to ensure the username and password entered in are accurate.

The error that I believe points to the issue is in the keystone.log file (copied below). It reports the error: * Authorization failed. The request you have made requires authentication. from 127.0.0.1

Here is a output of the logs I new to check:

/var/log/apache2/error.log

[Tue Feb 07 18:00:58.344631 2017] [wsgi:error] [pid 1639:tid 140055415990016] Login successful for user "khuggins1".
[Tue Feb 07 18:01:00.163017 2017] [wsgi:error] [pid 1639:tid 140055415990016] Internal Server Error: /horizon/auth/login/
[Tue Feb 07 18:01:00.163048 2017] [wsgi:error] [pid 1639:tid 140055415990016] Traceback (most recent call last):
[Tue Feb 07 18:01:00.163053 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 132, in get_response
[Tue Feb 07 18:01:00.163057 2017] [wsgi:error] [pid 1639:tid 140055415990016]     response = wrapped_callback(request, callback_args, *callback_kwargs)
*callback_args, **callback_kwargs)
[Tue Feb 07 18:01:00.163060 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 76, in sensitive_post_parameters_wrapper
[Tue Feb 07 18:01:00.163069 2017] [wsgi:error] [pid 1639:tid 140055415990016]     return view(request, args, *kwargs)
*args, **kwargs)
[Tue Feb 07 18:01:00.163072 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py", line 110, in _wrapped_view
[Tue Feb 07 18:01:00.163076 2017] [wsgi:error] [pid 1639:tid 140055415990016]     response = view_func(request, args, *kwargs)
*args, **kwargs)
[Tue Feb 07 18:01:00.163078 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/views/decorators/cache.py", line 57, in _wrapped_view_func
[Tue Feb 07 18:01:00.163080 2017] [wsgi:error] [pid 1639:tid 140055415990016]     response = view_func(request, args, *kwargs)
*args, **kwargs)
[Tue Feb 07 18:01:00.163082 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/openstack_auth/views.py", line 103, in login
[Tue Feb 07 18:01:00.163083 2017] [wsgi:error] [pid 1639:tid 140055415990016]     *kwargs)
**kwargs)
[Tue Feb 07 18:01:00.163085 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/views/decorators/debug.py", line 76, in sensitive_post_parameters_wrapper
[Tue Feb 07 18:01:00.163087 2017] [wsgi:error] [pid 1639:tid 140055415990016]     return view(request, *args, *kwargs)
**kwargs)
[Tue Feb 07 18:01:00.163089 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/utils/decorators.py", line 110, in _wrapped_view
[Tue Feb 07 18:01:00.163091 2017] [wsgi:error] [pid 1639:tid 140055415990016]     response = view_func(request, args, *kwargs)
*args, **kwargs)
[Tue Feb 07 18:01:00.163092 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/views/decorators/cache.py", line 57, in _wrapped_view_func
[Tue Feb 07 18:01:00.163094 2017] [wsgi:error] [pid 1639:tid 140055415990016]     response = view_func(request, args, *kwargs)
*args, **kwargs)
[Tue Feb 07 18:01:00.163096 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/contrib/auth/views.py", line 51, in login
[Tue Feb 07 18:01:00.163098 2017] [wsgi:error] [pid 1639:tid 140055415990016]     auth_login(request, form.get_user())
[Tue Feb 07 18:01:00.163100 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/contrib/auth/__init__.py", line 110, in login
[Tue Feb 07 18:01:00.163107 2017] [wsgi:error] [pid 1639:tid 140055415990016]     request.session.cycle_key()
[Tue Feb 07 18:01:00.163110 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/contrib/sessions/backends/base.py", line 285, in cycle_key
[Tue Feb 07 18:01:00.163111 2017] [wsgi:error] [pid 1639:tid 140055415990016]     self.create()
[Tue Feb 07 18:01:00.163113 2017] [wsgi:error] [pid 1639:tid 140055415990016]   File "/usr/lib/python2.7/dist-packages/django/contrib/sessions/backends/cache.py", line 48, in create
[Tue Feb 07 18:01:00.163115 2017] [wsgi:error] [pid 1639:tid 140055415990016]     "Unable to create a new session key. "
[Tue Feb 07 18:01:00.163116 2017] [wsgi:error] [pid 1639:tid 140055415990016] RuntimeError: Unable to create a new session key. It is likely that the cache is unavailable.

unavailable.

/var/log/apache2/keystone.log

2017-02-07 18:00:57.252938 2017-02-07 18:00:57.252 1644 WARNING keystone.assignment.core [-] Deprecated: Use of the identity driver config to automatically configure the same assignment driver has been deprecated, in the "O" release, the assignment driver will need to be expicitly configured if different than the default (SQL).
2017-02-07 18:00:57.621688 2017-02-07 18:00:57.621 1644 WARNING keystone.middleware.core [-] The admin_token_auth middleware presents a security risk and should be removed from the [pipeline:api_v3], [pipeline:admin_api], and [pipeline:public_api] sections of your paste ini file.
2017-02-07 18:00:57.656092 2017-02-07 18:00:57.655 1644 WARNING keystone.middleware.core [-] The admin_token_auth middleware presents a security risk and should be removed from the [pipeline:api_v3], [pipeline:admin_api], and [pipeline:public_api] sections of your paste ini file.
2017-02-07 18:00:57.718423 2017-02-07 18:00:57.717 1644 INFO keystone.common.wsgi [req-e0cabf42-7f22-457d-b3b2-67c1090bcdc5 - - - - -] POST http://control:5000/v3/auth/tokens
2017-02-07 18:00:57.993042 2017-02-07 18:00:57.991 1643 INFO keystone.common.wsgi [req-2214408c-6ca1-478f-a6d2-3f66189521e4 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] POST http://control:5000/v3/auth/tokens
2017-02-07 18:00:58.055350 2017-02-07 18:00:58.054 1643 WARNING keystone.common.wsgi [req-2214408c-6ca1-478f-a6d2-3f66189521e4 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] Authorization failed. The request you have made requires authentication. from 127.0.0.1
2017-02-07 18:00:58.091840 2017-02-07 18:00:58.085 1642 INFO keystone.common.wsgi [req-19b10c35-1128-4709-a7ae-7da94e21ae7f - - - - -] GET http://control:5000/v3/
2017-02-07 18:00:58.127415 2017-02-07 18:00:58.127 1643 INFO keystone.common.wsgi [req-0fd826eb-1b1c-4686-bda7-3631f8b90e43 d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] GET http://control:5000/v3/users/d59c31b8d27b41c7baf49f125c2b306f/projects
2017-02-07 18:00:58.230732 2017-02-07 18:00:58.229 1646 INFO keystone.common.wsgi [req-8163e441-5885-4e5b-b730-937898cde81f d59c31b8d27b41c7baf49f125c2b306f - - 7a5186b522264657bdfc295148771460 -] POST http://control:5000/v3/auth/tokens

http://control:5000/v3/auth/tokens