[Openstack-operators] Can I authenticate a Kilo service against an Icehouse identity server?

Gustavo Randich gustavo.randich at gmail.com
Mon May 9 17:24:43 UTC 2016


ok here is a little more log detail...

2016-05-09 13:18:53.246 8014 INFO eventlet.wsgi.server [-] (8014) accepted
('10.181.0.6', 35939)
2016-05-09 13:18:53.253 8014 DEBUG keystoneclient.session [-] REQ: curl -g
-i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET https://icehouse-api:35357
-H "Accept: application/json" -H "User-Agent: python-keystoneclient"
_http_log_request
/usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
2016-05-09 13:18:53.352 8014 DEBUG keystoneclient.session [-] RESP: [300]
content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
Mon, 09 May 2016 17:18:53 GMT content-type: application/json
x-distribution: Ubuntu
RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
"2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
"type": "application/vnd.openstack.identity-v3+json"}, {"base":
"application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
"id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/", "rel":
"self"}]}]}}
 _http_log_response
/usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
2016-05-09 13:18:53.353 8014 DEBUG keystoneclient.auth.identity.v3 [-]
Making authentication request to https://icehouse-api:35357/v3/auth/tokens
get_auth_ref
/usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3.py:125
2016-05-09 13:18:53.549 8014 DEBUG keystoneclient.session [-] REQ: curl -g
-i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET https://icehouse-api:35357/
-H "Accept: application/json" -H "User-Agent: python-keystoneclient"
_http_log_request
/usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
2016-05-09 13:18:53.574 8014 DEBUG keystoneclient.session [-] RESP: [300]
content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
Mon, 09 May 2016 17:18:53 GMT content-type: application/json
x-distribution: Ubuntu
RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
"2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
"type": "application/vnd.openstack.identity-v3+json"}, {"base":
"application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
"id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/", "rel":
"self"}]}]}}
 _http_log_response
/usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
2016-05-09 13:18:53.575 8014 WARNING keystonemiddleware.auth_token [-]
Authorization failed for token
2016-05-09 13:18:53.576 8014 INFO eventlet.wsgi.server [-] 10.181.0.6 - -
[09/May/2016 13:18:53] "GET /v2/ceaa212d5fe949d4b0319d28e8872ff0/volumes
HTTP/1.1" 401 261 0.327230


On Mon, May 9, 2016 at 1:56 PM, Gustavo Randich <gustavo.randich at gmail.com>
wrote:

> Hi,
>
> Is it possible to integrate python-keystoneclient as of Kilo release
> (1.2.0) with keystone Icehouse (2014.1)?
>
> Specifically, I'm trying to make cinder-api (Kilo) authenticate against an
> Icehouse keystone server, but the following appears in the log:
>
> 2016-05-09 12:55:06.846 7623 INFO eventlet.wsgi.server [-] (7623) accepted
> ('10.181.0.6', 35909)
>
> 2016-05-09 12:55:06.851 7623 DEBUG keystoneclient.session [-] REQ: curl -g
> -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
> https://icehouse-api:35357 -H "Accept: application/json" -H "User-Agent:
> python-keystoneclient" _http_log_request
> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
>
> 2016-05-09 12:55:06.866 7623 WARNING
> keystoneclient.auth.identity.generic.base [-] Discovering versions from the
> identity service failed when creating the password plugin. Attempting to
> determine version from URL.
>
> 2016-05-09 12:55:06.867 7623 WARNING keystonemiddleware.auth_token [-]
> Authorization failed for token
>
> 2016-05-09 12:55:06.868 7623 INFO eventlet.wsgi.server [-] 10.181.0.6 - -
> [09/May/2016 12:55:06] "GET /v2//volumes/detail HTTP/1.1" 401 261 0.019666
>
>
> Thanks!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160509/74845ae9/attachment.html>


More information about the OpenStack-operators mailing list