<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Mincho";
panose-1:2 2 6 9 4 2 5 8 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>My problem was wrong repositories again. After setting up the right repos, the glance client behaves as expected. I am finally making progress with my installation (currently unable to start nova-novncproxy, but that is not a showstopper).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Matt Kassawara [mailto:mkassawara@gmail.com] <br><b>Sent:</b> Tuesday, April 14, 2015 10:46 PM<br><b>To:</b> Anne Gentle<br><b>Cc:</b> Bernd Bausch; openstack-docs@lists.openstack.org<br><b>Subject:</b> Re: [OpenStack-docs] [install-guide] (not that much) progress with Kilo install on RHEL/Centos 7<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Bernd,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The glance image-create command in the Kilo version of the installation guide [1] works using an installation from the proposed/kilo branch. I can't imagine this changing for the official release.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>[1] <a href="http://docs-draft.openstack.org/92/167692/13/gate/gate-openstack-manuals-tox-doc-publish-checkbuild/31c1ab2/publish-docs/trunk/install-guide/install/apt/content/glance-verify.html">http://docs-draft.openstack.org/92/167692/13/gate/gate-openstack-manuals-tox-doc-publish-checkbuild/31c1ab2//publish-docs/trunk/install-guide/install/apt/content/glance-verify.html</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Matt<o:p></o:p></p></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Tue, Apr 14, 2015 at 8:21 AM, Anne Gentle <<a href="mailto:annegentle@justwriteclick.com" target="_blank">annegentle@justwriteclick.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><o:p> </o:p></p><div><div><div><p class=MsoNormal>On Mon, Apr 13, 2015 at 10:30 AM, Matt Kassawara <<a href="mailto:mkassawara@gmail.com" target="_blank">mkassawara@gmail.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><p class=MsoNormal>Responses inline...<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On Sun, Apr 12, 2015 at 8:49 PM, Bernd Bausch <<a href="mailto:berndbausch@gmail.com" target="_blank">berndbausch@gmail.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal>In preparation for the install guide meeting on Tuesday, I would like to<br>share what I have been able to do so far and what problems I hit. Advice<br>would be welcome (I'd be happy to discuss that in the meeting):<br><br>- There are places where the install guide content should be modified<br>(flagged with "CONTENT" below). What's the procedure - I file a bug and<br>immediately provide the fix?<br>- Other places look like packaging bugs; I am using a Kilo repository for<br>the Red Hat RDO project that is still work in progress. I think I should<br>leave such bugs alone for now, since they are likely to go away. Correct?<br><br>This is my report. It's based on Matt's version of the install guide<br><a href="http://docs-draft.openstack.org/92/167692/13/gate/gate-openstack-manuals-tox-doc-publish-checkbuild/31c1ab2/publish-docs/trunk/install-guide/install/yum/content/index.html" target="_blank">http://docs-draft.openstack.org/92/167692/13/gate/gate-openstack-manuals-tox<br>-doc-publish-checkbuild/31c1ab2//publish-docs/trunk/install-guide/install/yu<br>m/content/index.html</a>.<br><br>---------------------------<br>Section 2 Basic environment<br>---------------------------<br><br>openstack-selinux not found in the repositories I am using. On first look,<br>it seems that there is no need to install it, as rules in<br>/etc/selinux/targeted/contexts/files/* seem to be the same as on my Juno<br>installation. So I am brave, plan to watch the audit log and go ahead<br>without modifying SELinux configs.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>In Juno and prior releases, RHEL/CentOS required installing openstack-selinux to configure SELinux rules, but Fedora included them by default. Maybe this requirement changed for RHEL/CentOS in Kilo?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT: The guide lacks info about the firewall rules, except a vague<br>allusion in Chapter 2 Basic Environment.<br>Since this is Red Hat with a locked-down firewall, nothing will work without<br>opening ports for fundamental services (DB, RabbitMQ) and the OpenStack<br>services.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>A couple of cycles ago, we decided to make first-time installations easier by recommending that people disable the the firewall and then use the security guide later to increase security before moving to production. Furthermore, no one should use the installation guide architecture for production without augmenting it with at least the security guide, HA guide, and potentially a deployment automation system.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>My NTP server doesn't work (this has nothing to do with OpenStack).<br>This forum says that NTP needs to be started after DNS (???)<br> <a href="https://forum.zentyal.org/index.php/topic,13045.0.html" target="_blank">https://forum.zentyal.org/index.php/topic,13045.0.html</a><br>In any case, issuing a ``systemctl restart ntpd.service`` fixes the problem,<br>but how can it be done automatically?<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I haven't seen this issue and need more information here... perhaps some error messages?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>---------------------------------<br>section 2, Maria DB installation:<br>---------------------------------<br><br>``/usr/bin/mysql_secure_installation: line 379: find_mysql_client: command<br>not found``<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I haven't seen this issue. Seems like packaging, but I can't imagine RH breaking the MariaDB packages.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal>CONTENT: The install guide doesn't say how to answer the questions of this<br>script.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I think we could add some information to the guide, but in the long run think we should expect our audience to know at least the basics of MariaDB.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal>After setting the root password on the DB, I just hit enter at each<br>question.<br><br>------------------------------------<br>Section 2, Rabbit MQ installation:<br>------------------------------------<br><br>CONTENT: The guide asks for adding a line to /etc/rabbitmq/rabbitmq.config.<br>Scratching my head because I don't have that file, but then I see that it<br>may not always exist. Perhaps this should be made clearer to accommodate<br>slow thinkers.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I don't see where the guide asks to edit this file.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>-------------------------------<br>Section 3, Identity concepts<br>-------------------------------<br><br>CONTENT: The diagram showing the process flow confuses me more than it<br>helps.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Most of the conceptual sections come from common content (outside of the installation guide) that needs clarification.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>--------------------------------<br>Section 3, install and configure<br>--------------------------------<br><br>``yum install openstack-keystone python-keystoneclient``: dependency<br>python-cryptography can't be found<br><br>After adding this repo (found via internet search):<br><br> [npmccallum-python-cryptography]<br> name=Copr repo for python-cryptography owned by npmccallum<br><br>baseurl=<a href="https://copr-be.cloud.fedoraproject.org/results/npmccallum/python-cryptography/epel-7-$basearch/" target="_blank">https://copr-be.cloud.fedoraproject.org/results/npmccallum/python-cr<br>yptography/epel-7-$basearch/</a><br> skip_if_unavailable=True<br> gpgcheck=1<br><br>gpgkey=<a href="https://copr-be.cloud.fedoraproject.org/results/npmccallum/python-cryptography/pubkey.gpg" target="_blank">https://copr-be.cloud.fedoraproject.org/results/npmccallum/python-cry<br>ptography/pubkey.gpg</a><br> enabled=1<br><br>it works.<br>This looks very much like a packaging error, and I hope it will eventually<br>go away.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I'm going with a packaging problem.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT (or perhaps not CONTENT): keystone.conf contains "connection =<br><None>" rather than the connection string cited in the install guide. This<br>may be legitimately so, in which case the guide needs to be modified, or a<br>packaging error.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I don't understand the problem. The guide says to configure "connection = mysql://keystone:KEYSTONE_DBPASS@controller/keystone" in the keystone.conf file.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>------------------------------------------------------<br>Section 3, create the service entity and API endpoints<br>------------------------------------------------------<br><br>CONTENT: ``openstack`` command missing. Found in the package<br>python-openstackclient.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We need to update the list of packages to install.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT: ``openstack service create --type identity`` gives me:<br> WARNING: openstackclient.identity.v2_0.service.CreateService The<br>argument --type is deprecated, use service create --name <service-name> type<br>instead.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>What version of python-openstackclient?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>I don't like the openstack client, because its help facility is much<br>inferior to the one of the separate command line clients. Tough luck, I<br>guess.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Keystone requires it now, but we don't need to use it for other services.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT: The relevance of the sentence "Also, OpenStack supports multiple<br>regions for scalability" is not clear to a first time (even n-th time) user.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I think we're trying to explain why we keep the installation guide as simple as possible. What do you suggest?<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT: Why are we using API v2, not v3? Why a separate adminurl port, and<br>same port for internal and publicurl? Some clarification would help.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We support Keystone API v2 and v3. Keystone kept /v2.0 for compatibility, although most clients know how to access v3. We could add some clarification between the two ports. In short, administrative operations use 35357 and user operations use 5000.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT: I would phrase the note at the end differently, e.g. "You will<br>create similar endpoints for each of the other services as you install them"<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>For whatever reason, we're not allowed to use future tense.<o:p></o:p></p></div></div></div></div></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div></div></div><div><p class=MsoNormal>Here are our reasons. Future tense can be difficult to translate. The IBM Style Guide is our base guidance, "Use past or future tense only when you cannot use present tense or it does not make sense to..." So, try to write for global audiences with somewhat mechanical understandings of the English language.<o:p></o:p></p></div><div><div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>--------------------------------------------<br>Section 3, Create projects, users, and roles<br>--------------------------------------------<br><br>CONTENT: Rather than saying "project (tenant)", be a bit more explicit e.g.<br>"project (also named "tenant" in earlier OpenStack releases)"<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Seems reasonable... but we'll just mention it once.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>CONTENT:<br># openstack role add --project demo --user demo _member_<br>ERROR: openstack No role with a name or ID of '_member_' exists.<br>I fix this by adding the _member_ role first:<br># openstack role create _member_<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Keystone should create the _member_ role automatically during creation of the demo tenant/user. The guide used to explicitly create this role and later stopped after it caused problems. I think some distributions are using strange configuration options.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>--------------------------------------------<br>Section 3, verify operation<br>--------------------------------------------<br><br>CONTENT: There is no /etc/keystone/keystone-paste.ini; it's now under<br>/usr/share/keystone. Not sure yet if this file is supposed to be modified.<br>It seems that all the Paste/Deploy files are now under /usr/share.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>We can use a different directory for RH.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>For now, instead of changing paste.ini I just remove the admin token from<br>keystone.conf.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This just changes the token to "ADMIN" rather than disabling the method.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>--------------------------------------------<br>Section 4, Glance install and configure<br>--------------------------------------------<br><br>ugly message when synching DB:<br>/usr/lib/python2.7/site-packages/glance/db/sqlalchemy/artifacts.py:20:<br>DeprecationWarning: The oslo namespace package is deprecated. Please use<br>oslo_config instead.<br>Not sure what to do about this.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I haven't seen this on Ubuntu yet. Maybe a packaging problem.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>--------------------------------------------<br>Section 4, Verify operation<br>--------------------------------------------<br><br>Major problems with glance. I am stuck with problem 3 below.<br><br>Problem 1:<br>~~~~~~~~~~<br><br>glance image-create fails. See also Monty Taylor's comments on the docs and<br>dev mailing lists.<br><br>It turns out that I am using glance API v2, set in the rc files:<br><br> export OS_IMAGE_API_VERSION=2<br><br>Glance v2 requires a quite different workflow to upload images. Setting API<br>version to 1 for the moment.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The python-glanceclient should use version 2, but nova still uses version 1. The command to upload images changes slightly for version 2. Basically, "--is-public True" becomes "--visibility public" for image creation.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>Problem 2:<br>~~~~~~~~~~<br><br>It turns out glance is not running. api.log says:<br><br> ERROR glance.common.config [-] Unable to load glance-api-keystone<br>from configuration file /usr/share/glance/glance-api-dist-paste.ini.<br> Got: ImportError('No module named elasticsearch',)<br><br>After pip install elasticsearch, I can start glance.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Packaging.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>Still getting a strange warning in api.log:<br> 2015-04-12 17:42:30.267 6789 WARNING oslo_config.cfg [-] Option<br>"username" from group "keystone_authtoken" is deprecated. Use option<br>"username" from group "keystone_authtoken".<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This is a side effect of OpenStack deprecating "username" several releases ago and then bringing it back in a different form for Kilo. Upstream problem.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>Problem 3:<br>~~~~~~~~~~<br><br>Trying to upload an image now fails because of wrong credentials???? Haven't<br>resolved this yet. Any glance request is rejected with<br> # glance image-list<br> Invalid OpenStack Identity credentials.<o:p></o:p></p></blockquote><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Could be a number of things.<o:p></o:p></p></div><div><p class=MsoNormal> <o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal><br>Glance's API log:<br>2015-04-12 22:31:03.932 9048 DEBUG keystoneclient.session [-] REQ: curl -g<br>-i -X GET <a href="http://kilocontrol:35357" target="_blank">http://kilocontrol:35357</a> -H "Accept: application/json" -H<br>"User-Agent: python-keystoneclient" _http_log_request<br>/usr/lib/python2.7/site-packages/keystoneclient/session.py:195<br>2015-04-12 22:31:03.935 9048 WARNING<br>keystoneclient.auth.identity.generic.base [-] Discovering versions from the<br>identity service failed when creating the password plugin. Attempting to<br>determine version from URL.<br>2015-04-12 22:31:03.936 9048 WARNING keystonemiddleware.auth_token [-]<br>Authorization failed for token<br><br>This seems to be related with this DEBUG entry in keystone.log:<br>keystone.middleware.core [-] Auth token not in the request header. Will not<br>build auth context. process_request<br>/usr/lib/python2.7/site-packages/keystone/middleware/core.py:229<br><br>I assume a misconfiguration on my side but haven't figured out what it might<br>be. Need to study the nature of WSGI middleware.<br><br><br>_______________________________________________<br>OpenStack-docs mailing list<br><a href="mailto:OpenStack-docs@lists.openstack.org" target="_blank">OpenStack-docs@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs</a><o:p></o:p></p></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>_______________________________________________<br>OpenStack-docs mailing list<br><a href="mailto:OpenStack-docs@lists.openstack.org" target="_blank">OpenStack-docs@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-docs</a><o:p></o:p></p></blockquote></div></div></div><p class=MsoNormal><span style='color:#888888'><br><br clear=all><span class=hoenzb><o:p></o:p></span></span></p><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><span class=hoenzb><span style='color:#888888'>-- </span><o:p></o:p></span></p><div><p class=MsoNormal><span style='color:#888888'>Anne Gentle<br><a href="mailto:annegentle@justwriteclick.com" target="_blank">annegentle@justwriteclick.com</a></span><o:p></o:p></p></div></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>