If keystone is in HA, have a look here: https://ask.openstack.org/en/question/90640/keystone-authentication-failure-in-a-ha-setup/?answer=90674#post-id-90674
-Kaustubh From: Dhvanan Shah [mailto:[email protected]] Sent: Wednesday, April 27, 2016 3:52 AM To: [email protected] Subject: [Openstack] Keystone Authorization failed : Forbidden (HTTP 403) Hi, I have a 2 node OpenStack cluster setup running on CentOS. Due to some reason now I'm unable to perform any actions as it is not able to authorize me, it shows an error message saying "Authorization Failed: Forbidden (HTTP 403)" for Keystone when I run the command openstack-status and for nova-managed services it says "No handlers could be found for logger "keystoneclient.auth.identity.generic.base" ERROR (Forbidden): Forbidden (HTTP 403)". The keystone logs at /var/log/keystone show no problem that might have occured. The nova api logs show this : 2016-04-27 04:18:31.279 4314 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62 -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}9d202e0a726633f660321097015cd9d67ac4df19" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:195 2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] RESP: _http_log_response /usr/lib/python2.7/site-packages/keystoneclient/session.py:224 2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] Request returned failure status: 404 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Could not find token: 34e4b79b157a4526bc8ebb80b82cbf62", "code": 404, "title": "Not Found"}} 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62 This link corresponding to the above token shows this error message - {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} So there is a problem in authentication from the keystone.I haven't changed the admin password. Also by chance if my admin password is changed then how can I set it again? All my attempts show an error message of Forbidden (403). Any help would be appreciated. Thanks, Dhvanan Shah
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : [email protected] Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
