Hello,

We definitely need more info.

Does only HEAD-on-account fail or other requests
are affected as well?
Can we get more verbose RadosGW's log? In such
situation debug_rgw=20 might be necessary.

Regards,
Radoslaw Zarzynski

On Mon, Sep 19, 2016 at 12:33 PM, Orit Wasserman <owass...@redhat.com> wrote:
> Any ideas?
> I would guess the swift user is not created correctly but as it with
> keystone ...
>
>
> ---------- Forwarded message ----------
> From: Brian Chang-Chien <brian.changch...@gmail.com>
> Date: Mon, Sep 19, 2016 at 5:22 AM
> Subject: Re: [ceph-users] swiftclient call radosgw, it always response
> 401 Unauthorized
> To: ceph-users@lists.ceph.com
>
>
> no body meet this situation? Can somebody help me slove the issue,
> please !!! THX
>
> 2016-09-16 13:02 GMT+08:00 Brian Chang-Chien <brian.changch...@gmail.com>:
>>
>> Can anyone know this problem,please help me to watch this
>>
>>
>> 2016年9月13日 下午5:58,"Brian Chang-Chien" <brian.changch...@gmail.com>寫道:
>>>
>>> Hi ,naga.b
>>>
>>> I use Ceph jewel 10.2.2
>>> my ceph.conf  as follow
>>> [global]
>>> fsid = d056c174-2e3a-4c36-a067-cb774d176ce2
>>> mon_initial_members = brianceph
>>> mon_host = 10.62.9.140
>>> auth_cluster_required = cephx
>>> auth_service_required = cephx
>>> auth_client_required = cephx
>>> osd_crush_chooseleaf_type = 0
>>> osd_pool_default_size = 1
>>> osd_journal_size = 100
>>> [client.radosgw.gateway]
>>> host = brianceph
>>> keyring = /etc/ceph/ceph.client.radosgw.keyring
>>> log_file = /var/log/ceph/radosgw.log
>>> rgw_dns_name = brianceph
>>> rgw_keystone_url = http://10.62.13.253:35357
>>> rgw_keystone_admin_token = 7bb8e26cbc714c47a26ffec3d96f246f
>>> rgw_keystone_accepted_roles = admin, swiftuser
>>> rgw_ketstone_token_cache_size = 200
>>> rgw_keystone_revocation_interval = 30
>>> rgw_s3_auth_use_keystone = true
>>> nss_db_path = /var/ceph/nss
>>>
>>> and my radosgw.log
>>>
>>> 2016-09-13 17:42:38.638462 7efd964619c0  0 starting handler: fastcgi
>>> 2016-09-13 17:42:38.638523 7efcadf9b700  0 ERROR: no socket server point 
>>> defined, cannot start fcgi frontend
>>> 2016-09-13 17:47:33.597070 7efcdeffd700  1 ====== starting new request 
>>> req=0x7efcdeff7710 =====
>>> 2016-09-13 17:47:33.597329 7efcdeffd700  1 ====== req done 
>>> req=0x7efcdeff7710 op status=0 http_status=401 ======
>>> 2016-09-13 17:47:33.597379 7efcdeffd700  1 civetweb: 0x7efd20000bb0: 
>>> 10.62.9.34 - - [13/Sep/2016:17:47:33 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 
>>> - python-swiftclient-2.6.0
>>> 2016-09-13 17:47:34.755291 7efcdffff700  1 ====== starting new request 
>>> req=0x7efcdfff9710 =====
>>> 2016-09-13 17:47:34.755443 7efcdffff700  1 ====== req done 
>>> req=0x7efcdfff9710 op status=0 http_status=401 ======
>>> 2016-09-13 17:47:34.755481 7efcdffff700  1 civetweb: 0x7efd48004020: 
>>> 10.62.9.34 - - [13/Sep/2016:17:47:34 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 
>>> - python-swiftclient-2.6.0
>>> 2016-09-13 17:49:04.718249 7efcdf7fe700  1 ====== starting new request 
>>> req=0x7efcdf7f8710 =====
>>> 2016-09-13 17:49:04.718438 7efcdf7fe700  1 ====== req done 
>>> req=0x7efcdf7f8710 op status=0 http_status=401 ======
>>> 2016-09-13 17:49:04.718483 7efcdf7fe700  1 civetweb: 0x7efd68001f60: 
>>> 10.62.9.34 - - [13/Sep/2016:17:49:04 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 
>>> - python-swiftclient-2.6.0
>>> 2016-09-13 17:49:05.870115 7efcde7fc700  1 ====== starting new request 
>>> req=0x7efcde7f6710 =====
>>> 2016-09-13 17:49:05.870280 7efcde7fc700  1 ====== req done 
>>> req=0x7efcde7f6710 op status=0 http_status=401 ======
>>> 2016-09-13 17:49:05.870324 7efcde7fc700  1 civetweb: 0x7efd28000bb0: 
>>> 10.62.9.34 - - [13/Sep/2016:17:49:05 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 
>>> - python-swiftclient-2.6.0
>>> 2016-09-13 17:51:32.036065 7efd157fa700  1 handle_sigterm
>>> 2016-09-13 17:51:32.036099 7efd157fa700  1 handle_sigterm set alarm for 120
>>> 2016-09-13 17:51:32.036153 7efd964619c0 -1 shutting down
>>> 2016-09-13 17:51:32.037977 7efd78df9700  0 monclient: hunting for new mon
>>> 2016-09-13 17:51:32.038172 7efd783f6700  0 -- 10.62.9.140:0/1002906388 >> 
>>> 10.62.9.140:6789/0 pipe(0x7efd60016670 sd=7 :0 s=1 pgs=0 cs=0 l=1 
>>> c=0x7efd60014d70).fault
>>> 2016-09-13 17:51:32.906553 7efd964619c0  1 final shutdown
>>> 2016-09-13 17:51:39.294948 7ff5175f29c0  0 deferred set uid:gid to 167:167 
>>> (ceph:ceph)
>>> 2016-09-13 17:51:39.295097 7ff5175f29c0  0 ceph version 10.2.2 
>>> (45107e21c568dd033c2f0a3107dec8f0b0e58374), process radosgw, pid 13251
>>> 2016-09-13 17:51:39.318311 7ff5175e8700  0 -- :/175783115 >> 
>>> 10.62.9.140:6789/0 pipe(0x7ff51987b9b0 sd=7 :0 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519842430).fault
>>> 2016-09-13 17:51:39.596568 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :0 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).fault
>>> 2016-09-13 17:51:40.197109 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42233 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:40.997618 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42234 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:42.598080 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42235 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:45.798587 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42236 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:52.199050 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42237 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:54.596518 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 
>>> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42238 s=1 pgs=0 cs=0 l=1 
>>> c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 
>>> 10.62.9.140:6800/11336 - wrong node!
>>> 2016-09-13 17:51:54.611720 7ff5175f29c0  0 RGWZoneParams::create(): error 
>>> creating default zone params: (17) File exists
>>> 2016-09-13 17:51:55.285047 7ff5175f29c0  0 starting handler: civetweb
>>> 2016-09-13 17:51:55.285405 7ff4f5d7b700  0 monclient: hunting for new mon
>>> 2016-09-13 17:51:55.289646 7ff5175f29c0  0 starting handler: fastcgi
>>> 2016-09-13 17:51:55.289712 7ff42dfa3700  0 ERROR: no socket server point 
>>> defined, cannot start fcgi frontend
>>> 2016-09-13 17:52:40.055599 7ff469ffb700  1 handle_sigterm
>>> 2016-09-13 17:52:40.055639 7ff469ffb700  1 handle_sigterm set alarm for 120
>>> 2016-09-13 17:52:40.055652 7ff5175f29c0 -1 shutting down
>>> 2016-09-13 17:52:40.825472 7ff5175f29c0  1 final shutdown
>>> 2016-09-13 17:52:40.855310 7f488bcd19c0  0 deferred set uid:gid to 167:167 
>>> (ceph:ceph)
>>> 2016-09-13 17:52:40.855346 7f488bcd19c0  0 ceph version 10.2.2 
>>> (45107e21c568dd033c2f0a3107dec8f0b0e58374), process radosgw, pid 14025
>>> 2016-09-13 17:52:40.893218 7f488bcd19c0  0 RGWZoneParams::create(): error 
>>> creating default zone params: (17) File exists
>>> 2016-09-13 17:52:40.980767 7f488bcd19c0  0 starting handler: civetweb
>>> 2016-09-13 17:52:40.981060 7f486a57c700  0 monclient: hunting for new mon
>>> 2016-09-13 17:52:40.984229 7f488bcd19c0  0 starting handler: fastcgi
>>> 2016-09-13 17:52:40.984290 7f47a379e700  0 ERROR: no socket server point 
>>> defined, cannot start fcgi frontend
>>> 2016-09-13 17:52:47.822307 7f47f5ffb700  1 ====== starting new request 
>>> req=0x7f47f5ff5710 =====
>>> 2016-09-13 17:52:47.829912 7f47f5ffb700  1 ====== req done 
>>> req=0x7f47f5ff5710 op status=0 http_status=200 ======
>>> 2016-09-13 17:52:47.829982 7f47f5ffb700  1 civetweb: 0x7f4850003e40: 
>>> 10.62.8.246 - - [13/Sep/2016:17:52:47 +0800] "GET / HTTP/1.1" 200 0 - 
>>> Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) 
>>> Chrome/52.0.2743.116 Safari/537.36
>>> 2016-09-13 17:53:13.496015 7f47f4ff9700  1 ====== starting new request 
>>> req=0x7f47f4ff3710 =====
>>> 2016-09-13 17:53:13.496232 7f47f4ff9700  1 ====== req done 
>>> req=0x7f47f4ff3710 op status=0 http_status=401 ======
>>> 2016-09-13 17:53:13.496314 7f47f4ff9700  1 civetweb: 0x7f4858001280: 
>>> 10.62.13.253 - - [13/Sep/2016:17:53:13 +0800] "HEAD /swift/v1 HTTP/1.1" 401 
>>> 0 - python-swiftclient-2.6.0
>>> 2016-09-13 17:53:14.597218 7f47d3fff700  1 ====== starting new request 
>>> req=0x7f47d3ff9710 =====
>>> 2016-09-13 17:53:14.597366 7f47d3fff700  1 ====== req done 
>>> req=0x7f47d3ff9710 op status=0 http_status=401 ======
>>> 2016-09-13 17:53:14.597403 7f47d3fff700  1 civetweb: 0x7f4818000bb0: 
>>> 10.62.13.253 - - [13/Sep/2016:17:53:14 +0800] "HEAD /swift/v1 HTTP/1.1" 401 
>>> 0 - python-swiftclient-2.6.0
>>>
>>>
>>> Please help me to find out problem, Thx
>>>
>>>
>>> 2016-09-13 2:21 GMT+08:00 B, Naga Venkata <nag...@hpe.com>:
>>>>
>>>> The parameters you configured for keystone in ceph.conf are correct? Can 
>>>> you provide your radosgw configuration in ceph.conf?
>>>>
>>>> And include radosgw.log after radosgw service restart and during swift 
>>>> list.
>>>>
>>>>
>>>>
>>>> Thanks & Regards,
>>>>
>>>> Naga Venkata
>>>>
>>>>
>>>>
>>>> From: ceph-users [mailto:ceph-users-boun...@lists.ceph.com] On Behalf Of 
>>>> Brian Chang-Chien
>>>> Sent: Monday, September 12, 2016 11:35 AM
>>>> To: ceph-users@lists.ceph.com
>>>> Subject: [ceph-users] swiftclient call radosgw, it always response 401 
>>>> Unauthorized
>>>>
>>>>
>>>>
>>>> Hi all
>>>>
>>>>
>>>>
>>>> I use openstack keystone to integrate with ceph radosgw for object storage
>>>>
>>>> But when i call "swift stat" command , it always 401 error
>>>>
>>>> "Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized"
>>>>
>>>>
>>>>
>>>> following is log
>>>>
>>>>
>>>>
>>>> DEBUG:keystoneclient.auth.identity.v2:Making authentication request to 
>>>> http://10.62.13.253:5000/v2.0/tokens
>>>> INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection 
>>>> (1): 10.62.13.253
>>>> DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens 
>>>> HTTP/1.1" 200 3638
>>>> INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection 
>>>> (1): 10.62.9.140
>>>> DEBUG:requests.packages.urllib3.connectionpool:"HEAD /swift/v1 HTTP/1.1" 
>>>> 401 0
>>>> INFO:swiftclient:REQ: curl -i http://10.62.9.140:7480/swift/v1 -I -H 
>>>> "X-Auth-Token: 677444dfb01b41f98d786a28c84ad4e2"
>>>> INFO:swiftclient:RESP STATUS: 401 Unauthorized
>>>> INFO:swiftclient:RESP HEADERS: [('X-Trans-Id', 
>>>> 'tx000000000000000000001-0057d6600f-d352-default'), ('Content-Length', 
>>>> '12'), ('Accept-Ranges', 'bytes'), ('Content-Type', 'text/plain; 
>>>> charset=utf-8'), ('Date', 'Mon, 12 Sep 2016 07:58:07 GMT')]
>>>> DEBUG:keystoneclient.auth.identity.v2:Making authentication request to 
>>>> http://10.62.13.253:5000/v2.0/tokens
>>>> INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection 
>>>> (1): 10.62.13.253
>>>> DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens 
>>>> HTTP/1.1" 200 3638
>>>> INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection 
>>>> (1): 10.62.9.140
>>>> DEBUG:requests.packages.urllib3.connectionpool:"HEAD /swift/v1 HTTP/1.1" 
>>>> 401 0
>>>> INFO:swiftclient:REQ: curl -i http://10.62.9.140:7480/swift/v1 -I -H 
>>>> "X-Auth-Token: f67c29ebff52413a9b2f0119fbf9c60e"
>>>> INFO:swiftclient:RESP STATUS: 401 Unauthorized
>>>> INFO:swiftclient:RESP HEADERS: [('X-Trans-Id', 
>>>> 'tx000000000000000000002-0057d66010-d352-default'), ('Content-Length', 
>>>> '12'), ('Accept-Ranges', 'bytes'), ('Content-Type', 'text/plain; 
>>>> charset=utf-8'), ('Date', 'Mon, 12 Sep 2016 07:58:08 GMT')]
>>>> ERROR:swiftclient:Account HEAD failed: http://10.62.9.140:7480/swift/v1 
>>>> 401 Unauthorized
>>>> Traceback (most recent call last):
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 
>>>> 1390, in _retry
>>>>     service_token=self.service_token, **kwargs)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 591, 
>>>> in head_account
>>>>     http_response_content=body)
>>>> ClientException: Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 
>>>> Unauthorized
>>>> ERROR:swiftclient.service:Account HEAD failed: 
>>>> http://10.62.9.140:7480/swift/v1 401 Unauthorized
>>>> Traceback (most recent call last):
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/service.py", line 
>>>> 435, in stat
>>>>     items, headers = get_future_result(stats_future)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/service.py", line 
>>>> 204, in get_future_result
>>>>     res = f.result(timeout=timeout)
>>>>   File "/usr/lib/python2.7/site-packages/concurrent/futures/_base.py", 
>>>> line 403, in result
>>>>     return self.__get_result()
>>>>   File "/usr/lib/python2.7/site-packages/concurrent/futures/thread.py", 
>>>> line 55, in run
>>>>     result = self.fn(*self.args, **self.kwargs)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/multithreading.py", 
>>>> line 188, in conn_fn
>>>>     return fn(*conn_args, **kwargs)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/command_helpers.py", 
>>>> line 23, in stat_account
>>>>     headers = conn.head_account()
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 
>>>> 1430, in head_account
>>>>     return self._retry(None, head_account)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 
>>>> 1390, in _retry
>>>>     service_token=self.service_token, **kwargs)
>>>>   File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 591, 
>>>> in head_account
>>>>     http_response_content=body)
>>>> ClientException: Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 
>>>> Unauthorized
>>>> Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized
>>>>
>>>>
>>>>
>>>> Could you tell me what happened ?
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>
>
> _______________________________________________
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Reply via email to