Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Can´t do anything with glance. Authentication fails

Hey there,

I want to setup OpenStack with 4 Nodes(2 Compute Nodes). I followed the Documentation for Icehouse on Ubuntu 14.04. Now I´m at "5. Verify Image Service Installation" and if i try image-create or image-list glance return "Invalid OpenStack Identity credentials.". But Keystone-Commands working fine.

My Glance version is 0.19.0 an my Keystone verion is 1.6.0. For the keystoneclient i get a deprecation warning on each executed command.

Glance output:

glance -d image-list
curl -g -i -X GET -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}8da18f7e26486c085292b96afaf3b8d238a80e64' -H 'Content-Type: application/octet-stream' http://DKCTR001:9292/v1/images/detail?sort_key=name&sort_dir=asc&limit=20
Request returned failure status 401.
Invalid OpenStack Identity credentials.

admin-openrc.sh:

export OS_USERNAME=admin
export OS_PASSWORD=30zX9CWiFWLL
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://DKCTR001:35357/v2.0

/var/log/glance/api.log:

2015-08-20 14:52:55.890 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:56.406 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:57.424 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token

/var/log/glance/registry.log:

2015-08-20 11:12:21.482 2192 WARNING keystoneclient.middleware.auth_token [-] This middleware module is deprecated as of v0.10.0 in favor of keystonemiddleware.auth_token - please update your WSGI pipeline to reference the new middleware package.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring admin URI using auth fragments. This is deprecated, use 'identity_uri' instead.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring auth_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint

/etc/glance/glance-api.conf:

[DEFAULT]
default_store = file
bind_host = 0.0.0.0
bind_port = 9292
log_file = /var/log/glance/api.log
backlog = 4096
workers = 1

registry_host = 0.0.0.0
registry_port = 9191
registry_client_protocol = http

rabbit_host = 172.19.1.1
rabbit_port = 5672
rabbit_use_ssl = false
rabbit_userid = guest
rabbit_password = eSwBjZUmTdOa
rabbit_virtual_host = /
rabbit_notification_exchange = glance
rabbit_notification_topic = notifications
rabbit_durable_queues = False

filesystem_store_datadir = /var/lib/glance/images/

swift_store_auth_version = 2
swift_store_auth_address = 127.0.0.1:5000/v2.0/
swift_store_user = jdoe:jdoe
swift_store_key = a86850deb2742ec3cb41518e26aa2d89
swift_store_container = glance
swift_store_create_container_on_put = False
swift_store_large_object_size = 5120
swift_store_large_object_chunk_size = 200
swift_enable_snet = False

s3_store_host = 127.0.0.1:8080/v1.0/
s3_store_access_key = <20-char AWS access key>
s3_store_secret_key = <40-char AWS secret key>
s3_store_bucket = <lowercased 20-char aws access key>glance
s3_store_create_bucket_on_put = False

sheepdog_store_address = localhost
sheepdog_store_port = 7000
sheepdog_store_chunk_size = 64

delayed_delete = False
scrub_time = 43200
scrubber_datadir = /var/lib/glance/scrubber

image_cache_dir = /var/lib/glance/image-cache/

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

#i also tested auth_uri = http://DKCTR001:5000/v2.0

[paste_deploy]
flavor = keystone


[store_type_location_strategy]

/etc/glance/glance-registry.conf:

[DEFAULT]
bind_host = 0.0.0.0
bind_port = 9191
log_file = /var/log/glance/registry.log
backlog = 4096
api_limit_max = 1000
limit_param_default = 25

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

[paste_deploy]
flavor = keystone

Keystone-Config:

root@DKCTR001:~# keystone user-list
+----------------------------------+--------+---------+---------------------------+
|                id                |  name  | enabled |           email           |
+----------------------------------+--------+---------+---------------------------+
| d0c6e2f8a2ce40dbb0378162da98f5fa | admin  |   True  | test@mail.de |
| dd56c6a02235454498c63d9f7e50c7a5 |  demo  |   True  | demo@mail.de |
| 9ecaeaaf516a4147b87cd36f9c063414 | glance |   True  | glance@mail.de |
+----------------------------------+--------+---------+---------------------------+
root@DKCTR001:~# keystone user-role-list --tenant service --user glance
+----------------------------------+-------+----------------------------------+----------------------------------+
|                id                |  name |             user_id              |            tenant_id             |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 7b4f8bf8232347d6a06cc97a49294303 | admin | 9ecaeaaf516a4147b87cd36f9c063414 | 5bc23ab0e9504c61a13ce53f08f16985 |
+----------------------------------+-------+----------------------------------+----------------------------------+
root@DKCTR001:~# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 3bd075082b234eb6bd1efe0a94c816b1 |  admin  |   True  |
| 30053579618a4a169beab8e3299928ad |   demo  |   True  |
| 5bc23ab0e9504c61a13ce53f08f16985 | service |   True  |
+----------------------------------+---------+---------+
root@DKCTR001:~# keystone service-list
+----------------------------------+----------+----------+-------------------------+
|                id                |   name   |   type   |       description       |
+----------------------------------+----------+----------+-------------------------+
| ca4d1d5589404677829f41bf04350c5b |  glance  |  image   | OpenStack Image Service |
| c80b35dce41843bdb9deb4fe29cfac6d | keystone | identity |    OpenStack Identity   |
+----------------------------------+----------+----------+-------------------------+
root@DKCTR001:~# keystone endpoint-list
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
|                id                |   region  |         publicurl         |        internalurl        |          adminurl          |            service_id            |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
| 202e39ce33d2450c8469ead44128b15d | regionOne |    http://DKCTR001:9292   |    http://DKCTR001:9292   |    http://DKCTR001:9292    | ca4d1d5589404677829f41bf04350c5b |
| dde0f493789043dc917452341c15a8c1 | regionOne | http://DKCTR001:5000/v2.0 | http://DKCTR001:5000/v2.0 | http://DKCTR001:35357/v2.0 | c80b35dce41843bdb9deb4fe29cfac6d |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+

Can anyone help me to figure out the Authentication please?

Thanks in advance

Kind regards Manuals

Can´t do anything with glance. Authentication fails

Hey there,

I want to setup OpenStack with 4 Nodes(2 Compute Nodes). I followed the Documentation for Icehouse on Ubuntu 14.04. Now I´m at "5. Verify Image Service Installation" and if i try image-create or image-list glance return "Invalid OpenStack Identity credentials.". But Keystone-Commands working fine.

My Glance version is 0.19.0 an my Keystone verion is 1.6.0. For the keystoneclient i get a deprecation warning on each executed command.

Glance output:

glance -d image-list
curl -g -i -X GET -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}8da18f7e26486c085292b96afaf3b8d238a80e64' -H 'Content-Type: application/octet-stream' http://DKCTR001:9292/v1/images/detail?sort_key=name&sort_dir=asc&limit=20
Request returned failure status 401.
Invalid OpenStack Identity credentials.

admin-openrc.sh:

export OS_USERNAME=admin
export OS_PASSWORD=30zX9CWiFWLL
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://DKCTR001:35357/v2.0

/var/log/glance/api.log:

2015-08-20 14:52:55.890 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:56.406 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:57.424 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token

/var/log/glance/registry.log:

2015-08-20 11:12:21.482 2192 WARNING keystoneclient.middleware.auth_token [-] This middleware module is deprecated as of v0.10.0 in favor of keystonemiddleware.auth_token - please update your WSGI pipeline to reference the new middleware package.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring admin URI using auth fragments. This is deprecated, use 'identity_uri' instead.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring auth_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint

/etc/glance/glance-api.conf:

[DEFAULT]
default_store = file
bind_host = 0.0.0.0
bind_port = 9292
log_file = /var/log/glance/api.log
backlog = 4096
workers = 1

registry_host = 0.0.0.0
registry_port = 9191
registry_client_protocol = http

rabbit_host = 172.19.1.1
rabbit_port = 5672
rabbit_use_ssl = false
rabbit_userid = guest
rabbit_password = eSwBjZUmTdOa
rabbit_virtual_host = /
rabbit_notification_exchange = glance
rabbit_notification_topic = notifications
rabbit_durable_queues = False

filesystem_store_datadir = /var/lib/glance/images/

swift_store_auth_version = 2
swift_store_auth_address = 127.0.0.1:5000/v2.0/
swift_store_user = jdoe:jdoe
swift_store_key = a86850deb2742ec3cb41518e26aa2d89
swift_store_container = glance
swift_store_create_container_on_put = False
swift_store_large_object_size = 5120
swift_store_large_object_chunk_size = 200
swift_enable_snet = False

s3_store_host = 127.0.0.1:8080/v1.0/
s3_store_access_key = <20-char AWS access key>
s3_store_secret_key = <40-char AWS secret key>
s3_store_bucket = <lowercased 20-char aws access key>glance
s3_store_create_bucket_on_put = False

sheepdog_store_address = localhost
sheepdog_store_port = 7000
sheepdog_store_chunk_size = 64

delayed_delete = False
scrub_time = 43200
scrubber_datadir = /var/lib/glance/scrubber

image_cache_dir = /var/lib/glance/image-cache/

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

#i also tested auth_uri = http://DKCTR001:5000/v2.0

[paste_deploy]
flavor = keystone


[store_type_location_strategy]

/etc/glance/glance-registry.conf:

[DEFAULT]
bind_host = 0.0.0.0
bind_port = 9191
log_file = /var/log/glance/registry.log
backlog = 4096
api_limit_max = 1000
limit_param_default = 25

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

[paste_deploy]
flavor = keystone

Keystone-Config:

root@DKCTR001:~# keystone user-list
+----------------------------------+--------+---------+---------------------------+
|                id                |  name  | enabled |           email           |
+----------------------------------+--------+---------+---------------------------+
| d0c6e2f8a2ce40dbb0378162da98f5fa | admin  |   True  | test@mail.de |
| dd56c6a02235454498c63d9f7e50c7a5 |  demo  |   True  | demo@mail.de |
| 9ecaeaaf516a4147b87cd36f9c063414 | glance |   True  | glance@mail.de |
+----------------------------------+--------+---------+---------------------------+
root@DKCTR001:~# keystone user-role-list --tenant service --user glance
+----------------------------------+-------+----------------------------------+----------------------------------+
|                id                |  name |             user_id              |            tenant_id             |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 7b4f8bf8232347d6a06cc97a49294303 | admin | 9ecaeaaf516a4147b87cd36f9c063414 | 5bc23ab0e9504c61a13ce53f08f16985 |
+----------------------------------+-------+----------------------------------+----------------------------------+
root@DKCTR001:~# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 3bd075082b234eb6bd1efe0a94c816b1 |  admin  |   True  |
| 30053579618a4a169beab8e3299928ad |   demo  |   True  |
| 5bc23ab0e9504c61a13ce53f08f16985 | service |   True  |
+----------------------------------+---------+---------+
root@DKCTR001:~# keystone service-list
+----------------------------------+----------+----------+-------------------------+
|                id                |   name   |   type   |       description       |
+----------------------------------+----------+----------+-------------------------+
| ca4d1d5589404677829f41bf04350c5b |  glance  |  image   | OpenStack Image Service |
| c80b35dce41843bdb9deb4fe29cfac6d | keystone | identity |    OpenStack Identity   |
+----------------------------------+----------+----------+-------------------------+
root@DKCTR001:~# keystone endpoint-list
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
|                id                |   region  |         publicurl         |        internalurl        |          adminurl          |            service_id            |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
| 202e39ce33d2450c8469ead44128b15d | regionOne |    http://DKCTR001:9292   |    http://DKCTR001:9292   |    http://DKCTR001:9292    | ca4d1d5589404677829f41bf04350c5b |
| dde0f493789043dc917452341c15a8c1 | regionOne | http://DKCTR001:5000/v2.0 | http://DKCTR001:5000/v2.0 | http://DKCTR001:35357/v2.0 | c80b35dce41843bdb9deb4fe29cfac6d |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+

My Keystone section of each file(glance-api and glance-registry) looks like this now:

[keystone_authtoken]
auth_uri = http://DKCTR001:5000/v2.0
#auth_host = 127.0.0.1
#auth_port = 35357
#auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

[paste_deploy]
flavor = keystone

Did i do something wrong? Do you have another idea?

Can anyone help me to figure out the Authentication please?

Thanks in advance

Kind regards Manuals

Can´t do anything with glance. Authentication fails

Hey there,

I want to setup OpenStack with 4 Nodes(2 Compute Nodes). I followed the Documentation for Icehouse on Ubuntu 14.04. Now I´m at "5. Verify Image Service Installation" and if i try image-create or image-list glance return "Invalid OpenStack Identity credentials.". But Keystone-Commands working fine.

My Glance version is 0.19.0 an my Keystone verion is 1.6.0. For the keystoneclient i get a deprecation warning on each executed command.

Glance output:

glance -d image-list
curl -g -i -X GET -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}8da18f7e26486c085292b96afaf3b8d238a80e64' -H 'Content-Type: application/octet-stream' http://DKCTR001:9292/v1/images/detail?sort_key=name&sort_dir=asc&limit=20
Request returned failure status 401.
Invalid OpenStack Identity credentials.

admin-openrc.sh:

export OS_USERNAME=admin
export OS_PASSWORD=30zX9CWiFWLL
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://DKCTR001:35357/v2.0

/var/log/glance/api.log:

2015-08-20 14:52:55.890 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:56.406 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:57.424 2704 WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 ERROR keystoneclient.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:510: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
2015-08-20 14:52:59.447 2704 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token

/var/log/glance/registry.log:

2015-08-20 11:12:21.482 2192 WARNING keystoneclient.middleware.auth_token [-] This middleware module is deprecated as of v0.10.0 in favor of keystonemiddleware.auth_token - please update your WSGI pipeline to reference the new middleware package.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring admin URI using auth fragments. This is deprecated, use 'identity_uri' instead.
2015-08-20 11:12:21.483 2192 WARNING keystoneclient.middleware.auth_token [-] Configuring auth_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint

/etc/glance/glance-api.conf:

[DEFAULT]
default_store = file
bind_host = 0.0.0.0
bind_port = 9292
log_file = /var/log/glance/api.log
backlog = 4096
workers = 1

registry_host = 0.0.0.0
registry_port = 9191
registry_client_protocol = http

rabbit_host = 172.19.1.1
rabbit_port = 5672
rabbit_use_ssl = false
rabbit_userid = guest
rabbit_password = eSwBjZUmTdOa
rabbit_virtual_host = /
rabbit_notification_exchange = glance
rabbit_notification_topic = notifications
rabbit_durable_queues = False

filesystem_store_datadir = /var/lib/glance/images/

swift_store_auth_version = 2
swift_store_auth_address = 127.0.0.1:5000/v2.0/
swift_store_user = jdoe:jdoe
swift_store_key = a86850deb2742ec3cb41518e26aa2d89
swift_store_container = glance
swift_store_create_container_on_put = False
swift_store_large_object_size = 5120
swift_store_large_object_chunk_size = 200
swift_enable_snet = False

s3_store_host = 127.0.0.1:8080/v1.0/
s3_store_access_key = <20-char AWS access key>
s3_store_secret_key = <40-char AWS secret key>
s3_store_bucket = <lowercased 20-char aws access key>glance
s3_store_create_bucket_on_put = False

sheepdog_store_address = localhost
sheepdog_store_port = 7000
sheepdog_store_chunk_size = 64

delayed_delete = False
scrub_time = 43200
scrubber_datadir = /var/lib/glance/scrubber

image_cache_dir = /var/lib/glance/image-cache/

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

#i also tested auth_uri = http://DKCTR001:5000/v2.0

[paste_deploy]
flavor = keystone


[store_type_location_strategy]

/etc/glance/glance-registry.conf:

[DEFAULT]
bind_host = 0.0.0.0
bind_port = 9191
log_file = /var/log/glance/registry.log
backlog = 4096
api_limit_max = 1000
limit_param_default = 25

[database]
connection = mysql://glance:MUPwByVwRRr8@DKCTR001/glance

[keystone_authtoken]
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

[paste_deploy]
flavor = keystone

Keystone-Config:

root@DKCTR001:~# keystone user-list
+----------------------------------+--------+---------+---------------------------+
|                id                |  name  | enabled |           email           |
+----------------------------------+--------+---------+---------------------------+
| d0c6e2f8a2ce40dbb0378162da98f5fa | admin  |   True  | test@mail.de |
| dd56c6a02235454498c63d9f7e50c7a5 |  demo  |   True  | demo@mail.de |
| 9ecaeaaf516a4147b87cd36f9c063414 | glance |   True  | glance@mail.de |
+----------------------------------+--------+---------+---------------------------+
root@DKCTR001:~# keystone user-role-list --tenant service --user glance
+----------------------------------+-------+----------------------------------+----------------------------------+
|                id                |  name |             user_id              |            tenant_id             |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 7b4f8bf8232347d6a06cc97a49294303 | admin | 9ecaeaaf516a4147b87cd36f9c063414 | 5bc23ab0e9504c61a13ce53f08f16985 |
+----------------------------------+-------+----------------------------------+----------------------------------+
root@DKCTR001:~# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 3bd075082b234eb6bd1efe0a94c816b1 |  admin  |   True  |
| 30053579618a4a169beab8e3299928ad |   demo  |   True  |
| 5bc23ab0e9504c61a13ce53f08f16985 | service |   True  |
+----------------------------------+---------+---------+
root@DKCTR001:~# keystone service-list
+----------------------------------+----------+----------+-------------------------+
|                id                |   name   |   type   |       description       |
+----------------------------------+----------+----------+-------------------------+
| ca4d1d5589404677829f41bf04350c5b |  glance  |  image   | OpenStack Image Service |
| c80b35dce41843bdb9deb4fe29cfac6d | keystone | identity |    OpenStack Identity   |
+----------------------------------+----------+----------+-------------------------+
root@DKCTR001:~# keystone endpoint-list
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
|                id                |   region  |         publicurl         |        internalurl        |          adminurl          |            service_id            |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+
| 202e39ce33d2450c8469ead44128b15d | regionOne |    http://DKCTR001:9292   |    http://DKCTR001:9292   |    http://DKCTR001:9292    | ca4d1d5589404677829f41bf04350c5b |
| dde0f493789043dc917452341c15a8c1 | regionOne | http://DKCTR001:5000/v2.0 | http://DKCTR001:5000/v2.0 | http://DKCTR001:35357/v2.0 | c80b35dce41843bdb9deb4fe29cfac6d |
+----------------------------------+-----------+---------------------------+---------------------------+----------------------------+----------------------------------+

My Keystone section of each file(glance-api and glance-registry) looks like this now:

[keystone_authtoken]
auth_uri = http://DKCTR001:5000/v2.0
#auth_host auth_host = 127.0.0.1
#auth_port auth_port = 35357
#auth_protocol auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = abcdef

[paste_deploy]
flavor = keystone

Did i do something wrong? Do you have another idea?

Can anyone help me to figure out the Authentication please?

Thanks in advance

Kind regards Manuals