Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

havana - heat stack-list returns Invalid openstack identity credentials

I realize this question has been posted before, but not in relation to Havana, nor was it ever answered.

When I run root@openstackcloud1:/etc/heat# heat stack-list Invalid OpenStack Identity credentials.

My heat.conf file shows:

[keystone_authoken] auth_host = openstackcloud1 auth_port = 35357 auth_protocol = http auth_uri = http://openstackcloud1:5000/v2.0 admin_tenant_name =service admin_user = heat admin_password = heat

[ec2authtoken] auth_uri = http://openstackcloud1:5000/v2.0 keystone_ec2_uri = http://openstackcloud1:5000/v2.0/ec2tokens

I create my user/tenant/role by following the Havana OpenStack Installation Guide for Ubuntu 12.04

Here is what I get when I run a debug

root@openstackcloud1:/etc/heat# heat -d stack-list INFO (connectionpool:202) Starting new HTTP connection (1): openstackcloud1 DEBUG (connectionpool:296) "POST /v2.0/tokens HTTP/1.1" 200 5523 DEBUG (http:111) curl -i -X GET -H 'X-Auth-Token: MIIJ-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-SH7C+QPa4D9-TqAkp6WP3LDY3B0OAyheqEa1IoC-aj1C6HiuS3x-LcFC-hO1F17TWUZVZEktadx40GNxKACP2M+w2RCx898I1jkcomtZ-z6imYFDwI4LB-NiSS19+LNg5KR7ii0HlY4pLzChsGdwfcKmei9OCC3yUA96xoWfFpfHjhyV0yThsZbeXpn9kvy4J6bbu0mZRuNHdWBP96OXqOS77+Usv5uFKK164gmmaxRuUgNDJEP6YHyWgrk5p3Z6iRDvogP538W5tfPFTuvTWP2SOnMyZN-+9QjzKNqE6GqEz5eelG+qT4x1zWrL+cDIZmw9w==' -H 'Content-Type: application/json' -H 'Accept: application/json' -H 'User-Agent: python-heatclient' http://openstackcloud1:8004/v1/728de3699e104a9b8a9f2ef8b15c84c7/stacks? DEBUG (http:121) HTTP/1.1 401 Unauthorized date: Tue, 26 Nov 2013 15:44:05 GMT content-length: 23 content-type: text/plain www-authenticate: Keystone uri='https://127.0.0.1:35357'

Authentication required

Invalid OpenStack Identity credentials.

I noticed the keystone uri shows an https protocol, but for this install I have not specified anywhere for https? I can curl other services such as nova and glance just fine. It just appears to be an issue with Heat. Should I edit the api-paste.ini file as well? If so what should I put in it? Thanks in advance.

havana - heat stack-list returns Invalid openstack identity credentials

I realize this question has been posted before, but not in relation to Havana, nor was it ever answered.

When I run root@openstackcloud1:/etc/heat# heat stack-list Invalid OpenStack Identity credentials.

My heat.conf file shows:

[keystone_authoken] auth_host = openstackcloud1 auth_port = 35357 auth_protocol = http auth_uri = http://openstackcloud1:5000/v2.0 admin_tenant_name =service admin_user = heat admin_password = heat

[ec2authtoken] auth_uri = http://openstackcloud1:5000/v2.0 keystone_ec2_uri = http://openstackcloud1:5000/v2.0/ec2tokens

I create my user/tenant/role by following the Havana OpenStack Installation Guide for Ubuntu 12.04

Here is what I get when I run a debug

root@openstackcloud1:/etc/heat# heat heat -d stack-list stack-list INFO (connectionpool:202) Starting new HTTP connection (1): openstackcloud1 openstackcloud1 DEBUG (connectionpool:296) "POST /v2.0/tokens HTTP/1.1" 200 5523 5523 DEBUG (http:111) curl -i -X GET -H 'X-Auth-Token: MIIJ-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-SH7C+QPa4D9-TqAkp6WP3LDY3B0OAyheqEa1IoC-aj1C6HiuS3x-LcFC-hO1F17TWUZVZEktadx40GNxKACP2M+w2RCx898I1jkcomtZ-z6imYFDwI4LB-NiSS19+LNg5KR7ii0HlY4pLzChsGdwfcKmei9OCC3yUA96xoWfFpfHjhyV0yThsZbeXpn9kvy4J6bbu0mZRuNHdWBP96OXqOS77+Usv5uFKK164gmmaxRuUgNDJEP6YHyWgrk5p3Z6iRDvogP538W5tfPFTuvTWP2SOnMyZN-+9QjzKNqE6GqEz5eelG+qT4x1zWrL+cDIZmw9w==' -H MIIJ-

MY LONG TOKEN (DIDNT WANT TO PASTE IT)

'Content-Type: application/json' -H 'Accept: application/json' -H 'User-Agent: python-heatclient' http://openstackcloud1:8004/v1/728de3699e104a9b8a9f2ef8b15c84c7/stacks? http://openstackcloud1:8004/v1/728de3699e104a9b8a9f2ef8b15c84c7/stacks? DEBUG (http:121) HTTP/1.1 401 Unauthorized Unauthorized date: Tue, 26 Nov 2013 15:44:05 GMT GMT content-length: 23 23 content-type: text/plain text/plain www-authenticate: Keystone uri='https://127.0.0.1:35357'

Authentication required

Invalid OpenStack Identity credentials.credentials

.

I noticed the keystone uri shows an https protocol, but for this install I have not specified anywhere for https? I can curl other services such as nova and glance just fine. It just appears to be an issue with Heat. Should I edit the api-paste.ini file as well? If so what should I put in it? Thanks in advance.

havana - heat stack-list returns Invalid openstack identity credentials

I realize this question has been posted before, but not in relation to Havana, nor was it ever answered.

When I run root@openstackcloud1:/etc/heat# heat stack-list Invalid OpenStack Identity credentials.

My heat.conf file shows:

[keystone_authoken] auth_host = openstackcloud1 auth_port = 35357 auth_protocol = http auth_uri = http://openstackcloud1:5000/v2.0 admin_tenant_name =service admin_user = heat admin_password = heat

[ec2authtoken] auth_uri = http://openstackcloud1:5000/v2.0 keystone_ec2_uri = http://openstackcloud1:5000/v2.0/ec2tokens

I create my user/tenant/role by following the Havana OpenStack Installation Guide for Ubuntu 12.04

Here is what I get when I run a debug

root@openstackcloud1:/etc/heat# heat -d stack-list INFO (connectionpool:202) Starting new HTTP connection (1): openstackcloud1 DEBUG (connectionpool:296) "POST /v2.0/tokens HTTP/1.1" 200 5523 DEBUG (http:111) curl -i -X GET -H 'X-Auth-Token: MIIJ-

MY LONG TOKEN (DIDNT WANT TO PASTE IT)

'Content-Type: application/json' -H 'Accept: application/json' -H 'User-Agent: python-heatclient' http://openstackcloud1:8004/v1/728de3699e104a9b8a9f2ef8b15c84c7/stacks? DEBUG (http:121) HTTP/1.1 401 Unauthorized date: Tue, 26 Nov 2013 15:44:05 GMT content-length: 23 content-type: text/plain www-authenticate: Keystone uri='https://127.0.0.1:35357'

Authentication required

Invalid OpenStack Identity credentials

.Also, when I run

root@openstackcloud1:~# heat-api 2013-11-26 09:52:46.205 5563 INFO keystoneclient.middleware.auth_token [-] Starting keystone auth_token middleware 2013-11-26 09:52:46.205 5563 WARNING keystoneclient.middleware.auth_token [-] Configuring auth_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint 2013-11-26 09:52:46.206 5563 INFO keystoneclient.middleware.auth_token [-] Using /tmp/keystone-signing-vSIHIY as cache directory for signing certificate 2013-11-26 09:52:46.207 5563 INFO heat.api [-] Starting Heat ReST API on 0.0.0.0:8004 ERROR: Could not bind to ('0.0.0.0', 8004)after trying for 30 seconds

I get this error.

I noticed the keystone uri shows an https protocol, but for this install I have not specified anywhere for https? I can curl other services such as nova and glance just fine. It just appears to be an issue with Heat. Should I edit the api-paste.ini file as well? If so what should I put in it? Thanks in advance.