<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Is the create LB happening on a different user than the one that created the barbican container? Maybe im not looking at it right, but cant tell from this. </p>
<p><br>
</p>
<div id="Signature">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin: 0px; padding: 0px; border: 0px; font-family: Arial, sans-serif; font-size: 10px; line-height: 10px; vertical-align: top; outline: none; max-width: 100%; text-align: right; color: rgb(102, 102, 102); -webkit-user-select: none;" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: 210-312-4366</div>
<div>mobile: 210-440-8374</div>
<div><br>
</div>
</div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Madhusudhan Kandadai <madhusudhan.openstack@gmail.com><br>
<b>Sent:</b> Monday, February 29, 2016 3:47 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div dir="ltr">Is what I can see the error logs in barbican svc screen while I create TLS listener like this:
<a href="http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/">http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/</a><br>
<br>
2016-02-29 13:42:55.222 INFO barbican.api.middleware.context [req-65fd0f08-4c1e-4b2f-9cbd-64f186365077 afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 75/75] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:42:55 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
 111 bytes in 214 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
2016-02-29 13:43:17.397 ERROR barbican.model.repositories [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Not found for d96dccd5-0d39-4f67-ba3a-366a84cfd371<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories Traceback (most recent call last):<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories   File "/opt/stack/barbican/barbican/model/repositories.py", line 354, in get<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories     entity = query.one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories   File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line 2699, in one<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories     raise orm_exc.NoResultFound("No row was found for one()")<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories NoResultFound: No row was found for one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories <br>
2016-02-29 13:43:17.398 ERROR barbican.api.controllers [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Webob error seen<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers Traceback (most recent call last):<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 104, in handler<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 90, in enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 146, in content_types_enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 143, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     controllers.containers.container_not_found()<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/containers.py", line 36, in container_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     pecan.abort(404, u._('Not Found. Sorry but your container is in '<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/usr/local/lib/python2.7/dist-packages/pecan/core.py", line 141, in abort<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     exec('raise webob_exception, None, traceback')<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 141, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     external_project_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/model/repositories.py", line 360, in get<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     _raise_entity_not_found(self._do_entity_name(), entity_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers   File "/opt/stack/barbican/barbican/model/repositories.py", line 2173, in _raise_entity_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers     id=entity_id))<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers HTTPNotFound: Not Found. Sorry but your container is in another castle.<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers <br>
2016-02-29 13:43:17.403 INFO barbican.api.middleware.context [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 76/76] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:43:17 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
 111 bytes in 63 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
<br>
<br>
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 29, 2016 at 1:40 PM, Phillip Toohill <span dir="ltr">
<<a href="mailto:phillip.toohill@rackspace.com" target="_blank">phillip.toohill@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt; color:#000000; background-color:#ffffff; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>To further my thoughts, as Adam mentioned, it could be a user issue, which to me is what it sounds like. So being able to view the config and have other information is pertinent to solving the issue. </p>
<span class="">
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin: 0px; padding: 0px; border: 0px; font-family: Arial, sans-serif; font-size: 10px; line-height: 10px; vertical-align: top; outline: none; max-width: 100%; text-align: right; color: rgb(102, 102, 102); -webkit-user-select: none;" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
</span>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block; width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Phillip Toohill <<a href="mailto:phillip.toohill@RACKSPACE.COM" target="_blank">phillip.toohill@RACKSPACE.COM</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:33 PM
<div>
<div class="h5"><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</div>
</div>
</font>
<div> </div>
</div>
<div>
<div class="h5">
<div>
<div style="font-size:12pt; color:#000000; background-color:#ffffff; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>We could use some more information. </p>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin: 0px; padding: 0px; border: 0px; font-family: Arial, sans-serif; font-size: 10px; line-height: 10px; vertical-align: top; outline: none; max-width: 100%; text-align: right; color: rgb(102, 102, 102); -webkit-user-select: none;" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block; width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Madhusudhan Kandadai <<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:21 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div dir="ltr">Wondering, have you guys figured out this issue? I am seeing the same problem that Jiahao is getting.
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Feb 4, 2016 at 9:53 AM, Adam Harwell <span dir="ltr">
<<a href="mailto:adam.harwell@rackspace.com" target="_blank">adam.harwell@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr" style="font-size:12pt; color:#000000; background-color:#ffffff; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Could you provide your neutron-lbaas.conf? Depending on what version you're using, barbican may not be the default secret backend (I believe this has been fixed). Alternatively, it depends on what user accounts are involved -- this should definitely work
 if you are using only the single admin account, but we haven't done a lot of testing around the ACLs yet to make sure they are working (and I believe there is still an outstanding bug in Barbican that would cause the ACLs to not function properly in our use-case).<br>
</p>
<p><br>
</p>
<p>    --Adam<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block; width:98%">
<div dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Jiahao Liang <<a href="mailto:jiahao.liang@oneconvergence.com" target="_blank">jiahao.liang@oneconvergence.com</a>><br>
<b>Sent:</b> Thursday, January 28, 2016 12:18 AM<br>
<b>To:</b> <a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div>
<div>
<div dir="ltr"><span style="font-size:12.8px">Hi community,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I was going through <a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a> with devstack.
 I was stuck at a point when I tried to create a listener within a loadbalancer with this command:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; padding:9.5px; font-family:Monaco,Menlo,Consolas,'Courier New',monospace; font-size:13px; color:rgb(51,51,51); margin-top:0px; margin-bottom:10px; line-height:20px; word-wrap:break-word; background-color:rgb(245,245,245)">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</pre>
</div>
<div style="font-size:12.8px">But the command failed with output:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; padding:9.5px; margin-top:0px; margin-bottom:10px; word-wrap:break-word; background-color:rgb(245,245,245)"><font face="Monaco, Menlo, Consolas, Courier New, monospace" color="#333333"><span style="font-size:13px; line-height:20px">TLS container <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> could not be found<br></span></font></pre>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">When I run:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap; font-size:13px; padding:9.5px; font-family:Monaco,Menlo,Consolas,'Courier New',monospace; color:rgb(51,51,51); margin-top:0px; margin-bottom:10px; line-height:20px; word-wrap:break-word; background-color:rgb(245,245,245)">barbican secret container list</pre>
</div>
<div style="font-size:12.8px">I was able to see the corresponding container in the list and the status is active.</div>
<div style="font-size:12.8px">(Sorry, the format is a little bit ugly.....)</div>
<div style="font-size:12.8px">
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| Container href                                                                 | Name           | Created                   | Status | Type        | Secrets                                                                                 | Consumers |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> | tls_container  | 2016-01-28 04:58:42+00:00 | ACTIVE | certificate
 | private_key=<a href="http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd" target="_blank">http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd</a> | None      |</div>
<div>|                                                                                |                |                           |        |             | certificate=<a href="http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe" target="_blank">http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe</a> |
           |</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee" target="_blank">http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee</a> | tls_container2 | 2016-01-28 04:59:05+00:00 | ACTIVE | certificate
 | private_key=<a href="http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10" target="_blank">http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10</a> | None      |</div>
<div>|                                                                                |                |                           |        |             | certificate=<a href="http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698" target="_blank">http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698</a> |
           |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Also, if I did a GET method from a RESTful client with correct X-Auth-Token to the url: <span style="font-size:13px; line-height:20px; white-space:pre-wrap; color:rgb(51,51,51); font-family:Monaco,Menlo,Consolas,'Courier New',monospace; background-color:rgb(245,245,245)"><a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3</a></span>,
 I was able to receive the JSON information of the TLS container.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><br>
</div>
<div>Anybody could give some advice on how to fix this problem?</div>
<div><br>
</div>
<div>Thank you in advance! </div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Best,</div>
<div style="font-size:12.8px">Jiahao Liang</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>