Re: [Openstack-operators] [Mitaka - Heat] HTTPInternalServerError: ERROR: Remote error: BadRequest Expecting to find domain in user

2017-05-02 Thread Saverio Proto 
Edgar,

as admin, and using V3, do the following command:

openstack user show heat

in the field domain_id do you see default or Default with capital D ?

in the heat config you pasted you have capital D, is that correct ?

ciao,

Saverio



2017-05-02 21:47 GMT+02:00 Edgar Magana :
> Hi,
>
> Yes, all that is in place. This is why #openstack stack list works.
> The openstack client is:
>
> # yum list installed |grep client
> python-openstackclient.noarch  3.2.0-2.el7  @3rdParty7
> python2-heatclient.noarch  1.5.0-1.el7  @3rdParty7
>
> Edgar
>
> On 5/2/17, 12:39 PM, "Saverio Proto"  wrote:
>
> Hello Edgar,
>
> what is the version of the openstack client ?
>
> did you export this?
>
> export OS_IDENTITY_API_VERSION=3
>
> also the auth URL should have the v3, like;
>
> export 
> OS_AUTH_URL=https://urldefense.proofpoint.com/v2/url?u=https-3A__hostname-3A5000_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=aS1zOIR-pRfqhzkrTpilZrUBGwKku7fn_O5OjaYOV3g=
>
> check the client configuration and give us feedback,
>
> ciao,
>
> Saverio
>
> 2017-05-02 21:15 GMT+02:00 Edgar Magana :
> > Hello Ops,
> >
> >
> >
> > In our Mitaka Deployment with SSL and Keystone v3, we are having the 
> below
> > errors while trying to create a stack but they do not show while listing
> > them:
> >
> >
> >
> > # openstack stack list
> >
> > WARNING: openstackclient.common.utils is deprecated and will be removed
> > after Jun 2017. Please use osc_lib.utils
> >
> >
> >
> > [root@wpc-controller ~]# openstack stack create --template 
> instance-hot.yaml
> > hot-instance
> >
> > ERROR: Remote error: BadRequest Expecting to find domain in user - the
> > server could not comply with the request since it is either malformed or
> > otherwise incorrect. The client is assumed to be in error. (HTTP 400)
> > (Request-ID: req-e281f8bd-c7cd-486f-87be-dd6401b25cd3)
> >
> > [u'
> >
> >
> >
> > Our Heat Conf:
> >
> > [DEFAULT]
> >
> > log_dir = /var/log/heat
> >
> > heat_metadata_server_url =
> > 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8000=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=JENHqqh-HFBKqgqYOoBuhULMNKV1XIV3lrsM2GKWfio=
> >
> > heat_waitcondition_server_url =
> > 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8000_v1_waitcondition=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=3ja1hV81lm9YdBA3c9asFSLij9cYr9toU8oZ4giTHAQ=
> >
> > heat_watch_server_url = 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8003=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=X_TRvJLmYhjJXyOPwbfGan5uYINzsBwkyc6VfmIlZNE=
> >
> > region_name_for_services = RegionOne
> >
> > num_engine_workers = 5
> >
> > auth_encryption_key = orchestration_auth_encryption_32
> >
> >
> >
> > # Domain
> >
> > stack_domain_admin_password = service_pass
> >
> > stack_domain_admin = heat_domain_admin
> >
> > stack_user_domain = d41933e4c1314a9e8f589db66cc9f844
> >
> > deferred_auth_method=trusts
> >
> >
> >
> >
> >
> > [oslo_messaging_notifications]
> >
> > driver = heat.openstack.common.notifier.rpc_notifier
> >
> >
> >
> > [keystone_authtoken]
> >
> > auth_type = v3password
> >
> > username = heat
> >
> > project_name = service
> >
> > project_domain_name = Default
> >
> > user_domain_name = Default
> >
> > auth_url = 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A5000_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=EDuJAtFHgXbovHF0QpJ_KEezY55ZJOejBB-SEryLmx0=
> >
> > password = $PASSWORD
> >
> >
> >
> > [trustee]
> >
> > auth_plugin = v3password
> >
> > username = heat
> >
> > auth_url = 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A35357_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=zHxyJNBgBbBhaoFqVs4JYjLRLPlJ3WIhArdyMeYP5yg=
> >
> >

Re: [Openstack-operators] [Mitaka - Heat] HTTPInternalServerError: ERROR: Remote error: BadRequest Expecting to find domain in user

2017-05-02 Thread Edgar Magana 
Hi,

Yes, all that is in place. This is why #openstack stack list works.
The openstack client is:

# yum list installed |grep client
python-openstackclient.noarch  3.2.0-2.el7  @3rdParty7
python2-heatclient.noarch  1.5.0-1.el7  @3rdParty7

Edgar

On 5/2/17, 12:39 PM, "Saverio Proto"  wrote:

Hello Edgar,

what is the version of the openstack client ?

did you export this?

export OS_IDENTITY_API_VERSION=3

also the auth URL should have the v3, like;

export 
OS_AUTH_URL=https://urldefense.proofpoint.com/v2/url?u=https-3A__hostname-3A5000_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=aS1zOIR-pRfqhzkrTpilZrUBGwKku7fn_O5OjaYOV3g=
 

check the client configuration and give us feedback,

ciao,

Saverio

2017-05-02 21:15 GMT+02:00 Edgar Magana :
> Hello Ops,
>
>
>
> In our Mitaka Deployment with SSL and Keystone v3, we are having the below
> errors while trying to create a stack but they do not show while listing
> them:
>
>
>
> # openstack stack list
>
> WARNING: openstackclient.common.utils is deprecated and will be removed
> after Jun 2017. Please use osc_lib.utils
>
>
>
> [root@wpc-controller ~]# openstack stack create --template 
instance-hot.yaml
> hot-instance
>
> ERROR: Remote error: BadRequest Expecting to find domain in user - the
> server could not comply with the request since it is either malformed or
> otherwise incorrect. The client is assumed to be in error. (HTTP 400)
> (Request-ID: req-e281f8bd-c7cd-486f-87be-dd6401b25cd3)
>
> [u'
>
>
>
> Our Heat Conf:
>
> [DEFAULT]
>
> log_dir = /var/log/heat
>
> heat_metadata_server_url =
> 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8000=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=JENHqqh-HFBKqgqYOoBuhULMNKV1XIV3lrsM2GKWfio=
 
>
> heat_waitcondition_server_url =
> 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8000_v1_waitcondition=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=3ja1hV81lm9YdBA3c9asFSLij9cYr9toU8oZ4giTHAQ=
 
>
> heat_watch_server_url = 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A8003=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=X_TRvJLmYhjJXyOPwbfGan5uYINzsBwkyc6VfmIlZNE=
 
>
> region_name_for_services = RegionOne
>
> num_engine_workers = 5
>
> auth_encryption_key = orchestration_auth_encryption_32
>
>
>
> # Domain
>
> stack_domain_admin_password = service_pass
>
> stack_domain_admin = heat_domain_admin
>
> stack_user_domain = d41933e4c1314a9e8f589db66cc9f844
>
> deferred_auth_method=trusts
>
>
>
>
>
> [oslo_messaging_notifications]
>
> driver = heat.openstack.common.notifier.rpc_notifier
>
>
>
> [keystone_authtoken]
>
> auth_type = v3password
>
> username = heat
>
> project_name = service
>
> project_domain_name = Default
>
> user_domain_name = Default
>
> auth_url = 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A5000_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=EDuJAtFHgXbovHF0QpJ_KEezY55ZJOejBB-SEryLmx0=
 
>
> password = $PASSWORD
>
>
>
> [trustee]
>
> auth_plugin = v3password
>
> username = heat
>
> auth_url = 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A35357_v3=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=zHxyJNBgBbBhaoFqVs4JYjLRLPlJ3WIhArdyMeYP5yg=
 
>
> password = mypass
>
>
>
> [oslo_messaging_rabbit]
>
> rabbit_userid = admin
>
> rabbit_password = mypass
>
> [clients_keystone]
>
> auth_uri = 
https://urldefense.proofpoint.com/v2/url?u=https-3A__wpc-2Dcontroller.cedev1.d002.eng.pdx.wd-3A5000_=DwIBaQ=DS6PUFBBr_KiLo7Sjt3ljp5jaW5k2i9ijVXllEdOozc=G0XRJfDQsuBvqa_wpWyDAUlSpeMV4W1qfWqBfctlWwQ=bwlIMYJQM6k26RrwtU0-iHi3-63kP3vUZLLHvFNSWZ0=TNlOxoo5HP3md1G8oUuc6f3Z-dzi38x49DxP_On4L5Y=
 
>
> [ec2authtoken]
>
> auth_uri =

[Openstack-operators] [Mitaka - Heat] HTTPInternalServerError: ERROR: Remote error: BadRequest Expecting to find domain in user

2017-05-02 Thread Edgar Magana 
Hello Ops,

In our Mitaka Deployment with SSL and Keystone v3, we are having the below 
errors while trying to create a stack but they do not show while listing them:

# openstack stack list
WARNING: openstackclient.common.utils is deprecated and will be removed after 
Jun 2017. Please use osc_lib.utils

[root@wpc-controller ~]# openstack stack create --template instance-hot.yaml 
hot-instance
ERROR: Remote error: BadRequest Expecting to find domain in user - the server 
could not comply with the request since it is either malformed or otherwise 
incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: 
req-e281f8bd-c7cd-486f-87be-dd6401b25cd3)
[u'

Our Heat Conf:
[DEFAULT]
log_dir = /var/log/heat
heat_metadata_server_url = https://wpc-controller.cedev1.d002.eng.pdx.wd:8000
heat_waitcondition_server_url = 
https://wpc-controller.cedev1.d002.eng.pdx.wd:8000/v1/waitcondition
heat_watch_server_url = https://wpc-controller.cedev1.d002.eng.pdx.wd:8003
region_name_for_services = RegionOne
num_engine_workers = 5
auth_encryption_key = orchestration_auth_encryption_32

# Domain
stack_domain_admin_password = service_pass
stack_domain_admin = heat_domain_admin
stack_user_domain = d41933e4c1314a9e8f589db66cc9f844
deferred_auth_method=trusts


[oslo_messaging_notifications]
driver = heat.openstack.common.notifier.rpc_notifier

[keystone_authtoken]
auth_type = v3password
username = heat
project_name = service
project_domain_name = Default
user_domain_name = Default
auth_url = https://wpc-controller.cedev1.d002.eng.pdx.wd:5000/v3
password = $PASSWORD

[trustee]
auth_plugin = v3password
username = heat
auth_url = https://wpc-controller.cedev1.d002.eng.pdx.wd:35357/v3
password = mypass

[oslo_messaging_rabbit]
rabbit_userid = admin
rabbit_password = mypass
[clients_keystone]
auth_uri = https://wpc-controller.cedev1.d002.eng.pdx.wd:5000/
[ec2authtoken]
auth_uri = https://wpc-controller.cedev1.d002.eng.pdx.wd:5000/v3
[heat_api]
bind_host = 0.0.0.0
bind_port = 8004
workers = 5
cert_file = /etc/heat/ssl/certs/sslcert.pem
key_file = /etc/heat/ssl/private/sslkey.pem



Anyone has faced this problem? I tried any things and I got stuck!

Edgar
___
OpenStack-operators mailing list
OpenStack-operators@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators