[Openstack-operators] Identity service installation - authorization problem
Joe Topjian
joe.topjian at cybera.ca
Mon Mar 18 14:10:08 UTC 2013
Hi Jonathan,
The last few lines of the error message look interesting:
File "/usr/lib/python2.6/site-packages/keystone/catalog/backends/sql.py",
line 160, in get_catalog
admin_url = ep['adminurl'].replace('$(', '%(')
AttributeError: 'NoneType' object has no attribute 'replace'
Are you able to do a "keystone endpoint-list" and see if the Admin URL is
correct for all endpoints? If that command fails, you can run the following
MySQL query against the keystone database:
select * from endpoint
And review the "adminurl" data in the "extra" column.
Thanks,
Joe
On Fri, Mar 15, 2013 at 10:44 AM, jonathan_gershater at trendmicro.com <
jonathan_gershater at trendmicro.com> wrote:
> Hi
> ( first time user of openstack on Centos 6.4 with MySQL backend )
>
> I am following these manual steps
>
> http://docs.openstack.org/folsom/openstack-compute/install/yum/content/ch_installing-openstack-overview.html
>
> I installed the identity service and appeared to have no problems.
>
> I verify using these steps
>
> http://docs.openstack.org/folsom/openstack-compute/install/yum/content/verifying-identity-install.html
>
> Authentication is successful and returns
> ================================
> +----------+----------------------------------+
> | Property | Value |
> +----------+----------------------------------+
> | expires | 2013-03-16T15:36:09Z |
> | id | 9457d8cb44514a6aba6b5ea77c45b18b |
> | user_id | 5eecad2d999f4f9388b2c65da88cead3 |
> +----------+----------------------------------+
>
> Authorization fails and returns:
> =========================
> root at openstack-controller ~]# keystone --os-username=admin
> --os-password=password --os-tenant-name=demo --os-auth-url=
> http://10.202.183.111:35357/v2.0 token-get
> No handlers could be found for logger "keystoneclient.v2_0.client"
> Authorization Failed: An unexpected error prevented the server from
> fulfilling your request. 'NoneType' object has no attribute 'replace' (HTTP
> 500)
>
> And in the log file:
> ==============
> File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line
> 204, in __call__
> result = method(context, **params)
> File "/usr/lib/python2.6/site-packages/keystone/service.py", line 340,
> in authenticate
> metadata=metadata_ref)
> File "/usr/lib/python2.6/site-packages/keystone/catalog/core.py", line
> 78, in get_catalog
> return self.driver.get_catalog(user_id, tenant_id, metadata)
> File
> "/usr/lib/python2.6/site-packages/keystone/catalog/backends/sql.py", line
> 160, in get_catalog
> admin_url = ep['adminurl'].replace('$(', '%(')
> AttributeError: 'NoneType' object has no attribute 'replace'
>
>
> Why is authorization failing ?
>
> TREND MICRO EMAIL NOTICE
> The information contained in this email and any attachments is confidential
> and may be subject to copyright or other intellectual property protection.
> If you are not the intended recipient, you are not authorized to use or
> disclose this information, and we request that you notify us by reply mail or
> telephone and delete the original message from your mail system.
>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
--
Joe Topjian
Systems Administrator
Cybera Inc.
www.cybera.ca
Cybera is a not-for-profit organization that works to spur and support
innovation, for the economic benefit of Alberta, through the use
of cyberinfrastructure.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20130318/2e71d322/attachment.html>
More information about the OpenStack-operators
mailing list