This issue is now solved. I reinstalled mysql galera.

keystone user-list returns users on node1. Then I stop keystone service in
node1 and try to get user list on node2. This should not be the case I
think.

Error is Authorization failed: Unable to establish connection to
http;//<VIP>:35357/v2.0/tokens

I have copied /etc/keystone/ssl from node1 to node2 and given keystone
ownership to it on node2.

Stopping keystone on node2 and retrieving users on node1 works fine.

Janki Chhatbar
M.Tech (Embedded Systems)
Nirma University
(+91) 9409239106

On Fri, May 8, 2015 at 2:37 PM, Janki Chhatbar <[email protected]>
wrote:

> Keystone user-list replies for few seconds after restarting mysql in both
> nodes. Attaching haproxy.cnf here.
>
> Janki Chhatbar
> M.Tech (Embedded Systems)
> Nirma University
> (+91) 9409239106
>
> On Thu, May 7, 2015 at 9:05 PM, Joe Topjian <[email protected]> wrote:
>
>> Hello,
>>
>> Do you have HAProxy configured to round-robin the MySQL traffic? If so,
>> change the balance config to something where the source connection will
>> always hit the same mysql node.
>>
>> Or just make one of the mysql nodes a designated "write" node by setting
>> the opposite node as "backup". This will then send all traffic to the
>> writing node and resolve any deadlock errors that you might encounter:
>>
>>
>> https://www.percona.com/blog/2014/09/11/openstack-users-shed-light-on-percona-xtradb-cluster-deadlock-issues/
>>
>> http://www.joinfu.com/2015/01/understanding-reservations-concurrency-locking-in-nova/
>>
>> So you'll end up killing two birds with one stone.
>>
>> Hope that helps,
>> Joe
>>
>>
>> On Thu, May 7, 2015 at 6:55 AM, Janki Chhatbar <[email protected]>
>> wrote:
>>
>>> Hi
>>>
>>> I have 2 nodes with HAProxy, MySQL-Galera and keystone each.
>>>
>>> node1: IP1 = HAproxy, Galera and keystone
>>> node2: IP2 = HAproxy, Galera and keystone
>>> 1 VIP
>>>
>>> I have created keystone users, endpoints, tenants. These are updated in
>>> keystone DB as well. Galera cluster is also working fine.
>>>
>>> Keystone user-list
>>> gives error. The error is at http://paste.openstack.org/show/216095/
>>>
>>> Mysql users:
>>>
>>> mysql> select user,host from mysql.user; 
>>> +------------------+--------------+ | user             | host         | 
>>> +------------------+--------------+ | keystone         | %            | | 
>>> root             | %            | | keystone         | IP1 | | keystone     
>>>     | IP2 | | keystone         | VIP | | root             | 127.0.0.1    | 
>>> | root             | ::1          | | debian-sys-maint | localhost    | | 
>>> keystone         | localhost    | | root             | localhost    | 
>>> +------------------+--------------+ 10 rows in set (0.00 sec)
>>>
>>> Telnet to MYSQL:
>>>
>>> root@server2:/var/log/keystone# telnet VIP 3308 Trying 10.107.0.180... 
>>> Connected to 10.107.0.180. Escape character is '^]'.
>>> R 5.6.23-1trustyZ#v'[wcjl# �#tMb%/\c^,^vYmysql_native_passwordConnection 
>>> closed by foreign host.
>>>
>>>
>>> I have installed mysql-galera wsrep-5.6 from its official site. After
>>> installing MySQL didnot start. I had to manually start with command
>>>
>>> mysqld --console
>>>
>>> What could be the possible error and its solution? I have tried
>>> reinstalled and yet I get the same error.
>>>
>>> Janki Chhatbar
>>> M.Tech (Embedded Systems)
>>> Nirma University
>>> (+91) 9409239106
>>>
>>> _______________________________________________
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to     : [email protected]
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>
>
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : [email protected]
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to