<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jan 21, 2016 at 1:48 PM, Bob Hansen <span dir="ltr"><<a href="mailto:hansenb@us.ibm.com" target="_blank">hansenb@us.ibm.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><p>Found it. The contents of  the admin file (e.g. ../devstack/accrc/admin/admin) that I sourced for the admin credentials do not work with the nova cli. This combination of OS_* variables produced the error.<br><br>export OS_PROJECT_NAME="admin"<br>export OS_AUTH_URL="<a href="http://127.0.0.1:35357/" target="_blank">http://127.0.0.1:35357</a>"<br>export OS_CACERT=""<br>export OS_AUTH_TYPE=v2password<br>export OS_PASSWORD="secretadmin"<br>export OS_USER_DOMAIN_ID=default<br>export OS_PROJECT_DOMAIN_ID=default<br><br>this combination works with nova, glance and neutron.<br><br>export OS_PROJECT_NAME=admin<br>export OS_PASSWORD=secretadmin<br>export OS_AUTH_URL=<a href="http://127.0.0.1:35357" target="_blank">http://127.0.0.1:35357</a><br>export OS_USERNAME=admin<br>export OS_TENANT_NAME=admin<br>export OS_CACERT=<br><br>To be honest, I've seen so many examples of the 'correct' set of environment variables with different AUTH_TYPES, it's very hard to tell which variable 'set' is appropriate for which AUTH_TYPE and version of the keystone API.<br><br>A pointer to this sort of information is appreciated.<span class=""><br></span></p></div></blockquote><div>AFAIK, OpenStackClient (OSC) is making it a bit saner. See the docs <a href="http://docs.openstack.org/developer/python-openstackclient/">http://docs.openstack.org/developer/python-openstackclient/</a>, and "authentication" section in particular.<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><p><span class=""><br>Bob Hansen<br>z/VM OpenStack Enablement <br><br><br></span><img src="cid:1__=8FBBF5D2DFCFF1E28f9e8a93df938690918c8FB@" alt="Inactive hide details for Bob Hansen---01/21/2016 10:46:15 AM---Yes, it is image-list not image list. I don't seem to be able t" border="0" height="16" width="16"><font color="#424282">Bob Hansen---01/21/2016 10:46:15 AM---Yes, it is image-list not image list. I don't seem to be able to  find any other hints in any of the</font><br><br><font color="#5F5F5F" size="2">From:        </font><font size="2">Bob Hansen/Endicott/IBM@IBMUS</font><span class=""><br><font color="#5F5F5F" size="2">To:        </font><font size="2">"OpenStack Development Mailing List \(not for usage questions\)" <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>></font><br></span><font color="#5F5F5F" size="2">Date:        </font><font size="2">01/21/2016 10:46 AM</font></p><div><div class="h5"><br><font color="#5F5F5F" size="2">Subject:        </font><font size="2">Re: [openstack-dev] nova cli commands fail with 404. devstack        installation from today</font><br><hr style="color:rgb(128,145,165)" align="left" size="2" noshade width="100%"><br><br><br><font size="4">Yes, it is image-list not image list. I don't seem to be able to find any other hints in any of the nova logs.<br><br>nova --debug image-list shows this:<br><br>DEBUG (extension:157) found extension EntryPoint.parse('token = keystoneauth1.loading._plugins.identity.generic:Token')<br>DEBUG (extension:157) found extension EntryPoint.parse('v3token = keystoneauth1.loading._plugins.identity.v3:Token')<br>DEBUG (extension:157) found extension EntryPoint.parse('password = keystoneauth1.loading._plugins.identity.generic:Password')<br>DEBUG (v2:62) Making authentication request to </font><a href="http://127.0.0.1:35357/tokens" target="_blank"><u><font color="#0000FF" size="4">http://127.0.0.1:35357/tokens</font></u></a><font size="4"><br>INFO (connectionpool:207) Starting new HTTP connection (1): 127.0.0.1<br>DEBUG (connectionpool:387) "POST /tokens HTTP/1.1" 404 93<br>DEBUG (session:439) Request returned failure status: 404<br>DEBUG (shell:894) The resource could not be found. (HTTP 404)<br>Traceback (most recent call last):<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/shell.py", line 892, in main<br>OpenStackComputeShell().main(argv)<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/shell.py", line 726, in main<br>api_version = api_versions.discover_version(self.cs, api_version)<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/api_versions.py", line 267, in discover_version<br>client)<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/api_versions.py", line 248, in _get_server_version_range<br>version = client.versions.get_current()<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/v2/versions.py", line 83, in get_current<br>return self._get_current()<br>File "/usr/local/lib/python2.7/dist-packages/novaclient/v2/versions.py", line 56, in _get_current<br>url = "%s" % self.api.client.get_endpoint()<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/adapter.py", line 132, in get_endpoint<br>return self.session.get_endpoint(auth or self.auth, **kwargs)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/session.py", line 634, in get_endpoint<br>return auth.get_endpoint(self, **kwargs)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/identity/base.py", line 209, in get_endpoint<br>service_catalog = self.get_access(session).service_catalog<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/identity/base.py", line 135, in get_access<br>self.auth_ref = self.get_auth_ref(session)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/identity/v2.py", line 64, in get_auth_ref<br>authenticated=False, log=False)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/session.py", line 545, in post<br>return self.request(url, 'POST', **kwargs)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/_utils.py", line 180, in inner<br>return func(*args, **kwargs)<br>File "/usr/local/lib/python2.7/dist-packages/keystoneauth1/session.py", line 440, in request<br>raise exceptions.from_response(resp, method, url)<br>NotFound: The resource could not be found. (HTTP 404)<br><br><br><br>Bob Hansen<br>z/VM OpenStack Enablement <br><br><br></font><img src="cid:1__=8FBBF5D2DFCFF1E28f9e8a93df938690918c8FB@" alt="Inactive hide details for "Chen CH Ji" ---01/21/2016 04:25:28 AM---Guess it's image-list instead of image list,right?  maybe yo" height="16" width="16"><font color="#424282" size="4">"Chen CH Ji" ---01/21/2016 04:25:28 AM---Guess it's image-list instead of image list,right? maybe you can check with nova --debug image-list</font><font size="4"><br></font><font color="#5F5F5F"><br>From: </font>"Chen CH Ji" <<a href="mailto:jichenjc@cn.ibm.com" target="_blank">jichenjc@cn.ibm.com</a>><font color="#5F5F5F"><br>To: </font>"OpenStack Development Mailing List \(not for usage questions\)" <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>><font color="#5F5F5F"><br>Date: </font>01/21/2016 04:25 AM<font color="#5F5F5F"><br>Subject: </font>Re: [openstack-dev] nova cli commands fail with 404. devstack installation from today<font size="4"><br></font><hr align="left" size="2" noshade width="100%"><font size="4"><br><br><br><br>Guess it's image-list instead of image list,right? maybe you can check with nova --debug image-list and see the API which was<br>send to nova-api server then analyze the nova api log to know what's exactly the error?</font><font color="#990099" size="4"><br><br>-----"Bob Hansen" <</font><a href="mailto:hansenb@us.ibm.com" target="_blank"><u><font color="#0000FF" size="4">hansenb@us.ibm.com</font></u></a><font color="#990099" size="4">> wrote: -----</font><font size="4"><br>To: </font><a href="mailto:openstack-dev@lists.openstack.org" target="_blank"><u><font color="#0000FF" size="4">openstack-dev@lists.openstack.org</font></u></a><font size="4"><br>From: "Bob Hansen" <</font><a href="mailto:hansenb@us.ibm.com" target="_blank"><u><font color="#0000FF" size="4">hansenb@us.ibm.com</font></u></a><font size="4">><br>Date: 01/20/2016 10:31PM<br>Subject: [openstack-dev] nova cli commands fail with 404. devstack installation from today</font><p><font size="4">Installed devstack today, this morning actually, and most everything works.... except simple nova cli commands, nova image list, list, flavor-list all fail).... glance ok, nuetron ok,<br><br>As an example, nova image list returns:<br><br>devstack$ nova image list<br>ERROR (NotFound): The resource could not be found. (HTTP 404)<br><br>However the command; openstack image list returns the correct list of cirros images, plus one I have already imported.<br><br>key.log has:<br><br>127.0.0.1 - - [20/Jan/2016:21:10:49 +0000] "POST /tokens HTTP/1.1" 404 93 "-" "keystoneauth1/2.2.0 python-requests/2.9.1 CPython/2.7.6" 2270(us)<br><br>Clearly an authentication thing. Since other commands work, e.g. neutorn subnet-list, I concluded keystone auth is just fine.<br><br>I suspect it is something in nova.conf. [keystone_auth] has this in it, which stack.sh built<br><br>[keystone_authtoken]<br>signing_dir = /var/cache/nova<br>cafile = /opt/stack/data/ca-bundle.pem<br>auth_uri = </font><a href="http://127.0.0.1:5000/" target="_blank"><u><font color="#0000FF" size="4">http://127.0.0.1:5000</font></u></a><font size="4"><br>project_domain_id = default<br>project_name = service<br>user_domain_id = default<br>password = secretservice<br>username = nova<br>auth_url = </font><a href="http://127.0.0.1:35357/" target="_blank"><u><font color="#0000FF" size="4">http://127.0.0.1:35357</font></u></a><font size="4"><br>auth_type = password<br><br>Any suggestions on where else to look?<br><br>Bob Hansen<br>z/VM OpenStack Enablement </font></p><p><font face="Courier New" size="4">__________________________________________________________________________<br>OpenStack Development Mailing List (not for usage questions)<br>Unsubscribe: </font><a href="mailto:OpenStack-dev-request@lists.openstack.org?subject" target="_blank"><u><font color="#0000FF" face="Courier New" size="4">OpenStack-dev-request@lists.openstack.org?subject</font></u></a><font face="Courier New" size="4">:unsubscribe</font><u><font color="#0000FF" size="4"><br></font></u><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank"><u><font color="#0000FF" face="Courier New" size="4">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</font></u></a><tt><font size="4"><br>__________________________________________________________________________<br>OpenStack Development Mailing List (not for usage questions)<br>Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a></font></tt><tt><u><font color="#0000FF" size="4"><br></font></u></tt><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank"><tt><u><font color="#0000FF" size="4">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</font></u></tt></a><font size="4"><br><br></font><tt>__________________________________________________________________________<br>OpenStack Development Mailing List (not for usage questions)<br>Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br></tt><tt><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></tt><tt><br></tt></p><p><br>
</p><p></p><p></p></div></div><p></p></div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div></div>