Re: [Openstack] [openstack-dev] [Swift] community meeting Oct 1
Reminder for today's meeting. On Sep 24, 2012, at 10:59 PM, John Dickinson m...@not.mn wrote: As we finish up Folsom and head into the Grizzly summit, I'd like to have a Swift community meeting. Who: The Swift community (users, deployers, contributors, core devs) When: October 1, 2012 at 8pm (UTC), 3pm (Central), 1pm (Pacific) Where: #openstack-meeting on freenode (IRC) Agenda: http://wiki.openstack.org/SwiftOct1Meeting The goal of this meeting is to prepare for the summit, and therefore also the next six months of Swift's development. We will do this by reviewing feature ideas (gathered from the community) and ensuring that the most important topics are addressed at the summit. Even if you are not able to attend the summit, please try to attend this meeting. It's an opportunity for you to share what's important to you as we continue to move Swift forward. --John ___ OpenStack-dev mailing list openstack-...@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] When will the distro (specifically Ubuntu) have package for Folsom release
Hello, Does anybody know when will the distress, specifically Ubuntu, have packages for the OpenStack Folsom release. Is this effort done indecently of OpenStack by Ubuntu and the release date will be mentioned on Ubuntu's website? Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] When will the distro (specifically Ubuntu) have package for Folsom release
From the release notes: http://wiki.openstack.org/ReleaseNotes/Folsom#Ubuntu_12.04_.2BAC8_Ubuntu_12.10 On Oct 1, 2012 1:17 PM, Matt Joyce matt.jo...@cloudscaling.com wrote: I am not sure indecently was the word you were looking for there. But I gather you are asking if Ubuntu is packaging folsom on their own (as in it's not part of openstack). So yes, Ubuntu is packaging folsom on their own. And I assume ubuntu will let people know when they are done packaging. They tend to be pretty good about that sort of thing. -Matt On Mon, Oct 1, 2012 at 10:02 AM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hello, Does anybody know when will the distress, specifically Ubuntu, have packages for the OpenStack Folsom release. Is this effort done indecently of OpenStack by Ubuntu and the release date will be mentioned on Ubuntu's website? Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] When will the distro (specifically Ubuntu) have package for Folsom release
Hi Matt, Thank you very much for the response. And my sincere apologies for using the wrong word (spelling error auto-correction…g). I meant, independently. Regards, Ahmed. From: Matt Joyce matt.jo...@cloudscaling.commailto:matt.jo...@cloudscaling.com Date: Monday, October 1, 2012 10:12 AM To: Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com Cc: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: Re: [Openstack] When will the distro (specifically Ubuntu) have package for Folsom release I am not sure indecently was the word you were looking for there. But I gather you are asking if Ubuntu is packaging folsom on their own (as in it's not part of openstack). So yes, Ubuntu is packaging folsom on their own. And I assume ubuntu will let people know when they are done packaging. They tend to be pretty good about that sort of thing. -Matt On Mon, Oct 1, 2012 at 10:02 AM, Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com wrote: Hello, Does anybody know when will the distress, specifically Ubuntu, have packages for the OpenStack Folsom release. Is this effort done indecently of OpenStack by Ubuntu and the release date will be mentioned on Ubuntu's website? Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] HTTP_X_SERVICE_CATALOG endpoints_links
After a user gets authenticated, each following request will have a header named HTTP_X_SERVICE_CATALOG which contains service end point links, can any one tell me if it is safe to use the information contained in the header to get the various end points from a filter in the pipeline? Notice this header is set in the keystone, any other implementation of keystone may choose not to include the information in the header, can anyone tell me putting the endpoints in the headers is required by any implementation like keystone for authentication? Thanks. Tong Li Emerging Technologies Standards Building 501/B205 liton...@us.ibm.com___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] HTTP_X_SERVICE_CATALOG endpoints_links
The environment variables that auth_token sets are documented in the module's docstring: https://github.com/openstack/keystone/blob/master/keystone/middleware/auth_token.py As these variables are the defined interface for any projects consuming authentication services from middleware, it's safe to say they'll be supported be supported by any variations of auth_token, and will either continue to be supported or carefully deprecated. Speaking of, there are currently three headers that were deprecated prior to the release of essex (i.e. they were documented as deprecated in both essex and folsom), and could be reviewed for removal in grizzly (HTTP_X_USER, HTTP_X_ROLE, HTTP_X_TENANT). -Dolph On Mon, Oct 1, 2012 at 2:56 PM, Tong Li liton...@us.ibm.com wrote: After a user gets authenticated, each following request will have a header named HTTP_X_SERVICE_CATALOG which contains service end point links, can any one tell me if it is safe to use the information contained in the header to get the various end points from a filter in the pipeline? Notice this header is set in the keystone, any other implementation of keystone may choose not to include the information in the header, can anyone tell me putting the endpoints in the headers is required by any implementation like keystone for authentication? Thanks. Tong Li Emerging Technologies Standards Building 501/B205 liton...@us.ibm.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] HTTP_X_SERVICE_CATALOG endpoints_links
Great. thanks a lot. Tong Li Emerging Technologies Standards Building 501/B205 liton...@us.ibm.com From: Dolph Mathews dolph.math...@gmail.com To: Tong Li/Raleigh/IBM@IBMUS, Cc: openstack@lists.launchpad.net Date: 10/01/2012 04:12 PM Subject:Re: [Openstack] HTTP_X_SERVICE_CATALOG endpoints_links The environment variables that auth_token sets are documented in the module's docstring: https://github.com/openstack/keystone/blob/master/keystone/middleware/auth_token.py As these variables are the defined interface for any projects consuming authentication services from middleware, it's safe to say they'll be supported be supported by any variations of auth_token, and will either continue to be supported or carefully deprecated. Speaking of, there are currently three headers that were deprecated prior to the release of essex (i.e. they were documented as deprecated in both essex and folsom), and could be reviewed for removal in grizzly (HTTP_X_USER, HTTP_X_ROLE, HTTP_X_TENANT). -Dolph On Mon, Oct 1, 2012 at 2:56 PM, Tong Li liton...@us.ibm.com wrote: After a user gets authenticated, each following request will have a header named HTTP_X_SERVICE_CATALOG which contains service end point links, can any one tell me if it is safe to use the information contained in the header to get the various end points from a filter in the pipeline? Notice this header is set in the keystone, any other implementation of keystone may choose not to include the information in the header, can anyone tell me putting the endpoints in the headers is required by any implementation like keystone for authentication? Thanks. Tong Li Emerging Technologies Standards Building 501/B205 liton...@us.ibm.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp inline: graycol.gif___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] nova-manage service list does not list all nova services
You should give us /var/log/nova/{nova-api,nova-compute,nova-network}.log. But please, use http://paste.openstack.org/, dont fill the email with logs entry. Also paste /etc/nova/nova.conf and /etc/nova/api-paste.ini Check the user and permissions of /etc/nova and my last shot in the dark: flush the nova db and restart all services $ mysql -uroot -p'MYSQLPASSWD' -e 'drop database nova;' $ mysql -uroot -p'MYSQLPASSWD' -e 'create database nova;' $ nova-manage db sync $ for a in libvirt-bin nova-network nova-compute nova-api nova-objectstore nova-scheduler nova-volume nova-consoleauth nova-cert; do service $a restart; done On Sat, Sep 29, 2012 at 7:56 AM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hi Trinath, Thank you for your suggestion. Even though I am leery of reboot pc and try again approach, I did give it a try. After reboot (prior to starting any services, not even mysql), I am seeing more odd behavior. - Only nova-scheduler service is listed with an XXX status. I understand why the XXX, but why is the other nova services not listed or for that matter why is nova-scheduler list even though I have not started it? root@sonoma root@sonoma:/etc:/etc root@sonoma:/etc# who -r run-level 2 2012-09-29 02:57 root@sonoma root@sonoma:/etc:/etc root@sonoma:/etc# ls -l /etc/rc2.d/*nova* ls: cannot access /etc/rc2.d/*nova*: No such file or directory - After starting mysql, nova-scheduler is still listed with a XXX, but now nova-consoleauth (which I did not start) is listed with a :), and no other nova-services are not listed. - After I start nova-scheduler, I see a :) for it. - I started nova-api, and nova-network, but I don't see them listed. root@sonoma:~# nova-manage service list 2012-09-29 02:57:30 DEBUG nova.utils [req-7fafe814-a2ba-4862-84b5 -e3eddaf838c8 None None] backend module 'nova.db.sqlalchemy.api' from '/usr/lib/python2.7/dist-packages/nova/db/sqlalc rom (pid=1742) __get_backend /usr/lib/python2.7 /dist-packages/nova/utils.py:658 2012-09-29 02:57:30 WARNING nova.db.sqlalchemy.session [req-7fafe814-a2ba -4862-84b5-e3eddaf838c8 None None] SQL connection failed. 10 attempts left. Binary Host Zone Status State Updated_At nova-scheduler sonoma nova enabledXXX 2012-09-29 09:54:09 root@sonoma:~# service mysql restart mysql stop/waiting mysql start/running, process 2372 root@sonoma:~ root@sonoma:~# nova-manage service list 2012-09-29 02:58:47 DEBUG nova.utils[req-ad295ee2-ac50-41a0-bb75-636dbc8882c3None None] backend module 'nova.db.sqlalchemy.api' from '/usr/lib/python2.7 /dist-packages/nova/db/sqlalc rom (pid=2505) __get_backend /usr/lib/python2.7 /dist-packages/nova/utils.py:658 Binary Host Zone Status State Updated_At nova-scheduler sonoma nova enabledXXX 2012-09-29 09:54:09 nova-consoleauth sonoma nova enabled:-) 2012-09-29 09:58:44 root@sonoma:~# service nova-scheduler restart stop: Unknown instance: nova-scheduler start/running, process 2521 root@sonoma:~# nova-manage service list 2012-09-29 02:59:22 DEBUG nova.utils[req-e88c4d94-fc28-4bab-b49d-fc99601f75ceNone None] backend module 'nova.db.sqlalchemy.api' from '/usr/lib/python2.7 /dist-packages/nova/db/sqlalc rom (pid=2538) __get_backend /usr/lib/python2.7 /dist-packages/nova/utils.py:658 Binary Host Zone Status State Updated_At nova-scheduler sonoma nova enabled:-) 2012-09-29 09:59:18 nova-consoleauth sonoma nova enabled:-) 2012-09-29 09:59:14 root@sonoma:~# service nova-api start start: Job is already running: nova-api root@sonoma:~# nova-manage service list 2012-09-29 02:59:42 DEBUG nova.utils[req-fc7d7908-75bd-4b8e-ae5b-6edc72df1ec3None None] backend module 'nova.db.sqlalchemy.api' from '/usr/lib/python2.7 /dist-packages/nova/db/sqlalc rom (pid=2547) __get_backend /usr/lib/python2.7 /dist-packages/nova/utils.py:658 Binary Host Zone Status State Updated_At nova-scheduler sonoma nova enabled:-) 2012-09-29 09:59:38 nova-consoleauth sonoma nova enabled:-) 2012-09-29 09:59:35 root@sonoma root@sonoma:/etc:/etc root@sonoma:/etc# service nova-network start nova-network start/running, process 3550 root@sonoma root@sonoma:/etc:/etc root@sonoma:/etc# root@sonoma root@sonoma:/etc:/etc root@sonoma:/etc# nova-manage service list 2012-09-29 03:45:03 DEBUG nova.utils[req-fa150ddb-1c24-4bca-8b4f-351130abf76bNone None] backend module 'nova.db.sqlalchemy.api' from '/usr/lib/pyt rom (pid=3576) __get_backend /usr/lib/python2.7 /dist-packages/nova/utils.py:658 Binary
[Openstack] Installing Folsom on Ubuntu 12.04
Hello, I am attempting to do a fresh install of OpenStack / Folsom release on Ubuntu 12.04 following the doc - Install and Deploy Manual – Red Hat Ubuntu (Folsom version). I added a new file to /etc/apt/sources.list.d, folsom.list: root@bodega:/etc/apt/sources.list.d# cat folsom.list deb http://ubuntu-cloud.archive.canonical.com/ubuntu precise-updates/folsom main root@bodega:/etc/apt/sources.list.d# When I check with aptitude as to what version of keystone will be installed, it seems Essex will be installed. root@bodega:/etc/apt/sources.list.d# aptitude show keystone Package: keystone State: not installed Version: 2012.1+stable~20120824-a16a0ab9-0ubuntu2.2 Priority: extra Section: python Maintainer: Ubuntu Developers ubuntu-devel-disc...@lists.ubuntu.com My understanding is version 2012.1 is Essex? I must be missing something or doing something real silly, any help would be very appreciated. Thank you, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Installing Folsom on Ubuntu 12.04
Hi, Have you tried 'apt-get update' before checking the repository ? Keystone should be 2012.2~rc1-0ubuntu1~cloud0 in Cloud Archive [1] Regards [1] http://ubuntu-cloud.archive.canonical.com/dists/precise-updates/folsom/main/binary-amd64/Packages On Tue, Oct 2, 2012 at 12:06 AM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hello, I am attempting to do a fresh install of OpenStack / Folsom release on Ubuntu 12.04 following the doc - Install and Deploy Manual – Red Hat Ubuntu (Folsom version). I added a new file to /etc/apt/sources.list.d, folsom.list: root@bodega:/etc/apt/sources.list.d# cat folsom.list deb http://ubuntu-cloud.archive.canonical.com/ubuntuprecise-updates/folsom main root@bodega:/etc/apt/sources.list.d# When I check with aptitude as to what version of keystone will be installed, it seems Essex will be installed. root@bodega:/etc/apt/sources.list.d# aptitude show keystone Package: keystone State: not installed Version: *2012.1*+stable~20120824-a16a0ab9-0ubuntu2.2 Priority: extra Section: python Maintainer: Ubuntu Developers ubuntu-devel-disc...@lists.ubuntu.com My understanding is version *2012.1* is Essex? I must be missing something or doing something real silly, any help would be very appreciated. Thank you, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- *Emilien Macchi * System Engineer (Intern) http://www.enovance.com *EMAIL :* emil...@enovance.com n.marc...@enovance.com – *SKYPE : * enovance-emilien.macchi *WEB : *www.enovance.com eNoCloud_petit.pngeNovance_petit.png___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Installing Folsom on Ubuntu 12.04
Hi Emilien, That did it. Thank you for your quick response. Regards, Ahmed. From: Emilien Macchi emil...@enovance.commailto:emil...@enovance.com Date: Monday, October 1, 2012 3:19 PM To: Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com Cc: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: Re: [Openstack] Installing Folsom on Ubuntu 12.04 Hi, Have you tried 'apt-get update' before checking the repository ? Keystone should be 2012.2~rc1-0ubuntu1~cloud0 in Cloud Archive [1] Regards [1] http://ubuntu-cloud.archive.canonical.com/dists/precise-updates/folsom/main/binary-amd64/Packages On Tue, Oct 2, 2012 at 12:06 AM, Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com wrote: Hello, I am attempting to do a fresh install of OpenStack / Folsom release on Ubuntu 12.04 following the doc - Install and Deploy Manual – Red Hat Ubuntu (Folsom version). I added a new file to /etc/apt/sources.list.d, folsom.list: root@bodega:/etc/apt/sources.list.d# cat folsom.list deb http://ubuntu-cloud.archive.canonical.com/ubuntu precise-updates/folsom main root@bodega:/etc/apt/sources.list.d# When I check with aptitude as to what version of keystone will be installed, it seems Essex will be installed. root@bodega:/etc/apt/sources.list.d# aptitude show keystone Package: keystone State: not installed Version: 2012.1+stable~20120824-a16a0ab9-0ubuntu2.2 Priority: extra Section: python Maintainer: Ubuntu Developers ubuntu-devel-disc...@lists.ubuntu.commailto:ubuntu-devel-disc...@lists.ubuntu.com My understanding is version 2012.1 is Essex? I must be missing something or doing something real silly, any help would be very appreciated. Thank you, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Emilien Macchi System Engineer (Intern) [cid:b1af41af42b15f9ccf2c339e8d3bd8d3fceaac3f@zimbra] http://www.enovance.com EMAIL : emil...@enovance.commailto:emil...@enovance.commailto:n.marc...@enovance.com– SKYPE : enovance-emilien.macchi WEB : www.enovance.comhttp://www.enovance.com/ [cid:70b3b099fbd3e266e756b19fd456b5ce67e7044a@zimbra] attachment: eNoCloud_petit.pngattachment: eNovance_petit.png___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Enabling logging in keystone.
Hello, I am trying to verify the installation of keystone. When I try to run some curl commands, I get the following error message: root@bodega:~/ahmed/keystone-init# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 15205 15074 --:--:-- --:--:-- --:--:-- 16571 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } I don't see any message in the /var/log/keystone/logging.conf file. I can pass -debug option to keystone to enable debugging, but I am not sure how to do that from curl. Following is content of /etc/keystone/logging.conf file: root@bodega:~# cat /etc/keystone/logging.conf [loggers] keys=root [formatters] keys=normal,normal_with_name,debug [handlers] keys=production,file,devel [logger_root] level=WARNING handlers=file [handler_production] class=handlers.SysLogHandler level=ERROR formatter=normal_with_name args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER) [handler_file] class=FileHandler level=DEBUG formatter=normal_with_name args=('/var/log/keystone/keystone.log', 'a') [handler_devel] class=StreamHandler level=NOTSET formatter=debug args=(sys.stdout,) [formatter_normal] format=%(asctime)s %(levelname)s %(message)s [formatter_normal_with_name] format=(%(name)s): %(asctime)s %(levelname)s %(message)s [formatter_debug] format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s root@bodega:~# Any help would be greatly appreciated. Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Enabling logging in keystone.
Hi Joe, Actually, the curl command with the X_Auth_Token is my weak attempt to try to find a solution. I am actually issuing the following command (per recommendation from the OpenStack document - Install and Deploy Manual – Red Hat Ubuntu): root@bodega:~# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 12927 12816 --:--:-- --:--:-- --:--:-- 14500 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } Regards, Ahmed. From: heckj he...@mac.commailto:he...@mac.com Date: Monday, October 1, 2012 5:23 PM To: Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com Cc: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: Re: [Openstack] Enabling logging in keystone. Ahmed - The header that's supposed to have the token within it is labelled X-Auth-Token', not X_Auth_Token. Unless you're really comfortable with the protocol, I'd recommend using the keystone CLI from the python-keystoneclient to do your verifying, using it's debugging (which is to show you the curl output that you did below). -joe On Oct 1, 2012, at 5:12 PM, Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com wrote: Hello, I am trying to verify the installation of keystone. When I try to run some curl commands, I get the following error message: root@bodega:~/ahmed/keystone-init# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 15205 15074 --:--:-- --:--:-- --:--:-- 16571 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } I don't see any message in the /var/log/keystone/logging.conf file. I can pass -debug option to keystone to enable debugging, but I am not sure how to do that from curl. Following is content of /etc/keystone/logging.conf file: root@bodega:~# cat /etc/keystone/logging.conf [loggers] keys=root [formatters] keys=normal,normal_with_name,debug [handlers] keys=production,file,devel [logger_root] level=WARNING handlers=file [handler_production] class=handlers.SysLogHandler level=ERROR formatter=normal_with_name args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER) [handler_file] class=FileHandler level=DEBUG formatter=normal_with_name args=('/var/log/keystone/keystone.log', 'a') [handler_devel] class=StreamHandler level=NOTSET formatter=debug args=(sys.stdout,) [formatter_normal] format=%(asctime)s %(levelname)s %(message)s [formatter_normal_with_name] format=(%(name)s): %(asctime)s %(levelname)s %(message)s [formatter_debug] format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s root@bodega:~# Any help would be greatly appreciated. Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Enabling logging in keystone.
Can you invoke the keystone commands with --token and --endpoint? That's the same thing as what you're trying to do with curl, but using the CLI to do the hard work of making sure you get the header's all nailed down correctly. Some good ones to try are: (using your example token and endpoint from below - modify if they don't match your config) keystone --token ahmedadmintoken --endpoint http://10.176.20.158:35357/v2.0 tenant-list keystone --token ahmedadmintoken --endpoint http://10.176.20.158:35357/v2.0 user-list keystone --token ahmedadmintoken --endpoint http://10.176.20.158:35357/v2.0 service-list keystone --token ahmedadmintoken --endpoint http://10.176.20.158:35357/v2.0 role-list All of these should report back *without* errors, even if you haven't bootstrapped Keystone to include any services, tenants, users, or roles. You can also add --debug (as in keystone --debug --token ahmedadmintoken --endpoint http://10.176.20.158:35357/v2.0 user-list) to see the underlying HTTP protocol going back and forth and what's getting sent to Keystone. -joe On Oct 1, 2012, at 5:30 PM, Ahmed Al-Mehdi ah...@coraid.com wrote: Actually, the curl command with the X_Auth_Token is my weak attempt to try to find a solution. I am actually issuing the following command (per recommendation from the OpenStack document - Install and Deploy Manual – Red Hat Ubuntu): root@bodega:~# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 12927 12816 --:--:-- --:--:-- --:--:-- 14500 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } Regards, Ahmed. From: heckj he...@mac.com Date: Monday, October 1, 2012 5:23 PM To: Ahmed Al-Mehdi ah...@coraid.com Cc: openstack@lists.launchpad.net openstack@lists.launchpad.net Subject: Re: [Openstack] Enabling logging in keystone. Ahmed - The header that's supposed to have the token within it is labelled X-Auth-Token', not X_Auth_Token. Unless you're really comfortable with the protocol, I'd recommend using the keystone CLI from the python-keystoneclient to do your verifying, using it's debugging (which is to show you the curl output that you did below). -joe On Oct 1, 2012, at 5:12 PM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hello, I am trying to verify the installation of keystone. When I try to run some curl commands, I get the following error message: root@bodega:~/ahmed/keystone-init# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 15205 15074 --:--:-- --:--:-- --:--:-- 16571 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } I don't see any message in the /var/log/keystone/logging.conf file. I can pass -debug option to keystone to enable debugging, but I am not sure how to do that from curl. Following is content of /etc/keystone/logging.conf file: root@bodega:~# cat /etc/keystone/logging.conf [loggers] keys=root [formatters] keys=normal,normal_with_name,debug [handlers] keys=production,file,devel [logger_root] level=WARNING handlers=file [handler_production] class=handlers.SysLogHandler level=ERROR formatter=normal_with_name args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER) [handler_file] class=FileHandler level=DEBUG formatter=normal_with_name args=('/var/log/keystone/keystone.log', 'a') [handler_devel] class=StreamHandler level=NOTSET formatter=debug args=(sys.stdout,) [formatter_normal] format=%(asctime)s %(levelname)s %(message)s [formatter_normal_with_name] format=(%(name)s): %(asctime)s %(levelname)s %(message)s [formatter_debug] format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s root@bodega:~# Any help would be greatly appreciated. Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Enabling logging in keystone.
The X-Auth-Token is what you get back from the authentication call you're trying to make -- try removing the header completely. If you're still getting a 401 error back, either your username or password is wrong, your tenant name is wrong, or you haven't granted adminUser any role(s) on adminTenant. -Dolph On Mon, Oct 1, 2012 at 7:30 PM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hi Joe, Actually, the curl command with the X_Auth_Token is my weak attempt to try to find a solution. I am actually issuing the following command (per recommendation from the OpenStack document - Install and Deploy Manual – Red Hat Ubuntu): root@bodega:~# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 12927 12816 --:--:-- --:--:-- --:--:-- 14500 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } Regards, Ahmed. From: heckj he...@mac.com Date: Monday, October 1, 2012 5:23 PM To: Ahmed Al-Mehdi ah...@coraid.com Cc: openstack@lists.launchpad.net openstack@lists.launchpad.net Subject: Re: [Openstack] Enabling logging in keystone. Ahmed - The header that's supposed to have the token within it is labelled X-Auth-Token', not X_Auth_Token. Unless you're really comfortable with the protocol, I'd recommend using the keystone CLI from the python-keystoneclient to do your verifying, using it's debugging (which is to show you the curl output that you did below). -joe On Oct 1, 2012, at 5:12 PM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hello, I am trying to verify the installation of keystone. When I try to run some curl commands, I get the following error message: root@bodega:~/ahmed/keystone-init# curl -d '{auth: {tenantName: adminTenant, passwordCredentials: {username: adminUser, password: secretword}}}' -H Content-type: application/json -H X_Auth_Token: ahmedadmintoken http://10.176.20.158:35357/v2.0/tokens | python -mjson.tool % Total% Received % Xferd Average Speed TimeTime Time Current Dload Upload Total SpentLeft Speed 100 2310 116 100 115 15205 15074 --:--:-- --:--:-- --:--:-- 16571 { error: { code: 401, message: The request you have made requires authentication., title: Not Authorized } } I don't see any message in the /var/log/keystone/logging.conf file. I can pass -debug option to keystone to enable debugging, but I am not sure how to do that from curl. Following is content of /etc/keystone/logging.conf file: root@bodega:~# cat /etc/keystone/logging.conf [loggers] keys=root [formatters] keys=normal,normal_with_name,debug [handlers] keys=production,file,devel [logger_root] level=WARNING handlers=file [handler_production] class=handlers.SysLogHandler level=ERROR formatter=normal_with_name args=(('localhost', handlers.SYSLOG_UDP_PORT), handlers.SysLogHandler.LOG_USER) [handler_file] class=FileHandler level=DEBUG formatter=normal_with_name args=('/var/log/keystone/keystone.log', 'a') [handler_devel] class=StreamHandler level=NOTSET formatter=debug args=(sys.stdout,) [formatter_normal] format=%(asctime)s %(levelname)s %(message)s [formatter_normal_with_name] format=(%(name)s): %(asctime)s %(levelname)s %(message)s [formatter_debug] format=(%(name)s): %(asctime)s %(levelname)s %(module)s %(funcName)s %(message)s root@bodega:~# Any help would be greatly appreciated. Regards, Ahmed. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Cells Status
Hi all, As Chris is a rather busy guy, I've taken the liberty of putting up a blueprint and wiki page for Nova Compute Cells. https://blueprints.launchpad.net/nova/+spec/nova-compute-cells http://wiki.openstack.org/blueprint-nova-compute-cells NeCTAR's got to have this feature working well before year-end, and recently Sam Morrison and the team at the University of Melbourne have been working to try and iron out some of the kinks (security group and access key propagation) from Chris' current branch. The plan is to move forward and try and update the code from the comstud repo and the local changes here to get them into master asap. Regards, Tom ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Cells Status
Thanks, Tom! I have changes to push up that add rpc versioning, etc. Maybe I can get those up tomorrow. On Oct 1, 2012, at 7:08 PM, Tom Fifield fifie...@unimelb.edu.au wrote: Hi all, As Chris is a rather busy guy, I've taken the liberty of putting up a blueprint and wiki page for Nova Compute Cells. https://blueprints.launchpad.net/nova/+spec/nova-compute-cells http://wiki.openstack.org/blueprint-nova-compute-cells NeCTAR's got to have this feature working well before year-end, and recently Sam Morrison and the team at the University of Melbourne have been working to try and iron out some of the kinks (security group and access key propagation) from Chris' current branch. The plan is to move forward and try and update the code from the comstud repo and the local changes here to get them into master asap. Regards, Tom ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Cells Status
On 02/10/2012, at 12:33 PM, Chris Behrens cbehr...@codestud.com wrote: Thanks, Tom! I have changes to push up that add rpc versioning, etc. Maybe I can get those up tomorrow. Great! I was going to start looking into it but will hold off if you've already done it. Cheers, Sam ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Cells Status
Yup, it's done. I just have to deal with some conflicts with our internal branch and my public one.. On Oct 1, 2012, at 7:47 PM, Sam Morrison sorri...@gmail.com wrote: On 02/10/2012, at 12:33 PM, Chris Behrens cbehr...@codestud.com wrote: Thanks, Tom! I have changes to push up that add rpc versioning, etc. Maybe I can get those up tomorrow. Great! I was going to start looking into it but will hold off if you've already done it. Cheers, Sam ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack-qa-team] Tempest gate situation
It was recently discovered that the gating job was not running tests with no @attr. One of the tests that was not being run as a result of this is broken in at least its XML component. It would be great if one of the folks who worked on the XML stuff could pick this up soon: https://bugs.launchpad.net/tempest/+bug/1059568. -David -- Mailing list: https://launchpad.net/~openstack-qa-team Post to : openstack-qa-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack-qa-team More help : https://help.launchpad.net/ListHelp