[openstack-dev] Compute endpoint auth problem.

Vishvananda Ishaya vishvananda at gmail.com
Thu Mar 21 15:55:29 UTC 2013


Your endpoint is wrong in region two.

It looks like you hardcoded admin as the tenant_id in region two which is never correct. Tenant_id
in keystone is usually a long uuid string without dashes.

You likely need to replace the '8774' with $(compute_port)s and the 'admin' with '$(tenant_id)s'

Vish

On Mar 21, 2013, at 6:45 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:

> Hello folks,
> 
> I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
> 
> I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
> 
> $ keystone endpoint-list
> 
> Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
> region		| RegionOne
> publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
> internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
> adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
> service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |
> 
> 
> Id 		| 6a3e1123d2924048acec4bd06009413e 
> region 		| RegionTwo 
> publicURL 	| http://172.16.103.231:8774/v2/admin          
> internalURL 	| http://172.16.103.231:8774/v2/admin           
> adminURL 	| http://172.16.103.231:8774/v2/admin           
> service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |
> 
> So in this case the RegionOne endpoint works as seen below:
> 
> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
> +--------------------------------------+---------------------------------+--------+--------+
> | ID                                   | Name                            | Status | Server |
> +--------------------------------------+---------------------------------+--------+--------+
> | 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
> | 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
> | 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
> +--------------------------------------+---------------------------------+--------+--------+
> 
> But using the RegionTwo gives me a http 401:
> 
> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
> ERROR: n/a (HTTP 401)
> 
> 
> I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
> 
> Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
> 
> Thanks,
> Gabriel.
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




More information about the OpenStack-dev mailing list