Hi Karan Some more stuff
1. Run cinder --debug list. This will give some info on token sent, url sent etc. 2. http://docs.openstack.org/api/quick-start/content/index.html#Openstack-API-Concepts-a09234. Just look command 1 and 2. This link and examples will give good details on what is happening with authorization. 3. Using command #1 you get the token with user name, password and tenant. 4. Use the command #2 with URL you got in the step#1 to query. See what happens. -Dheerendra On Sun, Nov 24, 2013 at 8:50 PM, Dheerendra < [email protected]> wrote: > Hi Karan > > This is clear case of authorization. So keystone is not able to authorize > with credential and token you are giving. Token supplied is wrong. Hence > you are hitting the issue. > > I was suspecting the tenant definition as you defined it as 'services'. I > thought it is defined as 'service'(no s at the end). That is not the case > now. > > Try the following. > > 1. Set OS_USERNAME= cinder, OS_TENANT = services and ENDPOINT_URL now. > 2. Run the keystone token-get . THis should display the current token of > user > 3. Run the above command --debug option. > 4. Can you set keystone to debug as well /etc/keystone/keystone.conf > --debug = True > 5. Send me teh cinder.log and keystone.log and debug out. > > -Dheerendra > > > On Sun, Nov 24, 2013 at 8:00 PM, Karan Singh <[email protected]> wrote: > >> Hello Dheerendra >> >> Thanks for your reply , please find keystone tenant and role-list output. >> Please suggest. >> >> >> [root@rdo ~]# >> [root@rdo ~]# keystone tenant-list >> +----------------------------------+----------+---------+ >> | id | name | enabled | >> +----------------------------------+----------+---------+ >> | 0dafe42cfde242ddbb67b681f59bdb00 | admin | True | >> | f5e21418087f43f7afb2352576136f0a | alt_demo | True | >> | 94a2c960f68d45cdb763fe5b05147206 | demo | True | >> | af2f42d510fa405aa8d4e75c1a669ab8 | services | True | >> +----------------------------------+----------+---------+ >> [root@rdo ~]# >> [root@rdo ~]# keystone role-list >> +----------------------------------+---------------+ >> | id | name | >> +----------------------------------+---------------+ >> | cd5b0d2475374bb6bbf65ccc9b349145 | Member | >> | 63ad68eee2a94cd0b477ee67bf7df36a | ResellerAdmin | >> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | >> | 6042354830ef4e3b9678fe18c40a8ed7 | admin | >> +----------------------------------+---------------+ >> [root@rdo ~]# >> >> >> >> >> Many Thanks >> Karan Singh >> >> >> ------------------------------ >> *From: *"Dheerendra" <[email protected]> >> *To: *"karan.singh" <[email protected]> >> *Cc: *[email protected] >> *Sent: *Sunday, 24 November, 2013 4:20:45 PM >> *Subject: *Re: [Openstack] Error with Cinder **Need Urgent help** HIGH >> PRIORITY >> >> >> Can you past 'keystone tenant-list' and 'keystone role-list' ? >> >> -Dheerendra >> >> >> On Sun, Nov 24, 2013 at 5:35 AM, Karan Singh <[email protected]> wrote: >> >>> Please help I am in urgent need >>> >>> >>> -------- Original message -------- >>> From: Karan Singh <[email protected]> >>> Date: 23/11/2013 18:24 (GMT+02:00) >>> To: [email protected] >>> Subject: Error with Cinder **Need Urgent help** HIGH PRIORITY >>> >>> >>> Hello Openstack Community Members. >>> >>> I need your quick support on my issue related to Cinder. >>> >>> >>> *1 . Error Logs from cinder/api.log* >>> >>> 2013-11-23 18:08:02.037 29478 INFO urllib3.connectionpool [-] Starting >>> new HTTP connection (1): 127.0.0.1 >>> 2013-11-23 18:08:02.100 29478 WARNING >>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone >>> service: {u'error': {u'message': u'The request you have made requires >>> authentication.', u'code': 401, u'title': u'Unauthorized'}} >>> 2013-11-23 18:08:02.101 29478 WARNING >>> keystoneclient.middleware.auth_token [-] Authorization failed for token >>> d675640b9346a631549c85c156159fb9 >>> 2013-11-23 18:08:02.102 29478 INFO keystoneclient.middleware.auth_token >>> [-] Invalid user token - rejecting request >>> 2013-11-23 18:08:02.362 29478 INFO urllib3.connectionpool [-] Starting >>> new HTTP connection (1): 127.0.0.1 >>> 2013-11-23 18:08:02.434 29478 WARNING >>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone >>> service: {u'error': {u'message': u'The request you have made requires >>> authentication.', u'code': 401, u'title': u'Unauthorized'}} >>> 2013-11-23 18:08:02.435 29478 WARNING >>> keystoneclient.middleware.auth_token [-] Authorization failed for token >>> 03aee2508b2c4132a9c23b382c6ba284 >>> 2013-11-23 18:08:02.435 29478 INFO keystoneclient.middleware.auth_token >>> [-] Invalid user token - rejecting request >>> >>> >>> >>> *2 . Errors from cinder list command output * >>> >>> [root@rdo cinder]# cinder list >>> >>> ERROR: Unauthorized (HTTP 401) >>> [root@rdo cinder]# >>> >>> >>> *3. Output from cinder/api-paste.ini* >>> >>> [filter:keystonecontext] >>> paste.filter_factory = >>> cinder.api.middleware.auth:CinderKeystoneContext.factory >>> >>> [filter:authtoken] >>> paste.filter_factory = >>> keystoneclient.middleware.auth_token:filter_factory >>> service_protocol = http >>> service_host = 127.0.0.1 >>> service_port = 5000 >>> signing_dir = /var/lib/cinder >>> >>> auth_host = 127.0.0.1 >>> auth_port = 35357 >>> auth_protocol = http >>> admin_tenant_name = services >>> admin_user = cinder >>> admin_password = root >>> auth_uri = http://127.0.0.1:5000/ >>> >>> >>> >>> *4. Output from cinder/cinder.conf* >>> >>> >>> rootwrap_config=/etc/cinder/rootwrap.conf >>> sql_connection = mysql://cinder:root@localhost/cinder >>> api_paste_config = /etc/cinder/api-paste.ini >>> >>> iscsi_helper=tgtadm >>> volume_name_template = volume-%s >>> volume_group = cinder-volumes >>> verbose = True >>> auth_strategy = keystone >>> #osapi_volume_listen_port=5900 >>> [keystone_authtoken] >>> admin_tenant_name = services >>> admin_user = cinder >>> admin_password = root >>> auth_host = 127.0.0.1 >>> auth_port = 35357 >>> auth_protocol = http >>> signing_dirname = /tmp/keystone-signing-cinder >>> >>> >>> 5. All the components from Horizon web interface works fine except , >>> VOLUME ( cinder component ) , as soon as i click on volume it throws errors >>> *Error: Unauthorised: Unable to retrieve volume list. Error: >>> Unauthorised: Unable to retrieve volume types* >>> >>> 6. Keystone has cinder user >>> >>> [root@rdo cinder]# keystone user-list >>> >>> +----------------------------------+------------+---------+----------------------+ >>> | id | name | enabled | email | >>> >>> +----------------------------------+------------+---------+----------------------+ >>> | 99f8019ba2694d78a680a5de46aa1afd | admin | True | [email protected] | >>> | ee6de67df5bf4498bd477e2a973f393f | alt_demo | True | | >>> | f632591a717c4f9b91c4ebfdc8eb86ef | ceilometer | True | >>> ceilometer@localhost | >>> | be199f4da0e84abb9f0ca069f0a4b408 | cinder | True | >>> [email protected] | >>> | 79071cdc981d4f5787a8d1abebac7eec | demo | True | | >>> | 8d8d4107a72d4cdd838f3cc8f643a0f2 | glance | True | glance@localhost | >>> | 901d979b861d45ada359252da45082f6 | neutron | True | neutron@localhost| >>> | 0e371ae93dce4ea392224354929c8257 | nova | True | nova@localhost | >>> | 069624d0554a432bb1f57629bde6ebc8 | swift | True | swift@localhost | >>> >>> +----------------------------------+------------+---------+----------------------+ >>> [root@rdo cinder]# >>> >>> >>> 7. I am able to connect to mysql db with user cinder and password ( >>> root ) >>> >>> >>> [root@rdo cinder]# mysql -u cinder -p >>> Enter password: >>> Welcome to the MySQL monitor. Commands end with ; or \g. >>> Your MySQL connection id is 1230 >>> Server version: 5.1.69 Source distribution >>> >>> Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights >>> reserved. >>> >>> Oracle is a registered trademark of Oracle Corporation and/or its >>> affiliates. Other names may be trademarks of their respective >>> owners. >>> >>> Type 'help;' or '\h' for help. Type '\c' to clear the current input >>> statement. >>> >>> mysql> >>> >>> >>> I have set up openstack using RDO , i tried all possible ways but >>> cinder ( volumes ) are not working , except everything works well , please >>> advise a solution ASAP , i am on a very tight deadline. >>> >>> >>> Waiting for your quick responses. >>> >>> Karan Singh >>> CSC - IT Center for Science Ltd. >>> P.O. Box 405, FI-02101 Espoo, FINLAND >>> http://www.csc.fi/ | +358 (0) 503 812758 >>> >>> >>> >>> _______________________________________________ >>> Mailing list: >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>> Post to : [email protected] >>> Unsubscribe : >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>> >>> >> >> >
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : [email protected] Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
