<div dir="ltr">Update: Happy days are here again. I figured out my problem which was a couple issues. I'll share with the group so others won't run into this.<div><br></div><div>I was using two sources of documentation that referenced the URL in two different ways that I didn't catch earlier (one used <font face="courier new, monospace">/AUTH</font> and the other used <font face="courier new, monospace">/auth</font>). That's obviously not going to work but I didn't see it previously.</div>
<div><br></div><div>Second, after doing some further research I learned that tokens are stored in memcached and without memcached running, access is impossible. So to be sure it wasn't that I checked and lo and behold, it wasn't running and wouldnt run even if i started the service. I checked <font face="courier new, monospace">/etc/swift/memcached.conf</font> and realized I had memcached listening on an IP address listed as <font face="courier new, monospace">-1 10.173.0.66</font> and not <font face="courier new, monospace">-l 10.173.0.66</font> (basically I was using number one instead of the letter L). Using L worked.</div>
<div><br></div><div>So, all is well for now. Just thought I'd share that with you guys.</div><div><br></div><div>Mahalo,</div><div>Adam</div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div><font><div style="font-family:arial;font-size:small">
<b><i><br>Adam Lawson</i></b></div><div><font><font color="#666666" size="1"><div style="font-family:arial;font-size:small">AQORN, Inc.</div><div style="font-family:arial;font-size:small">427 North Tatnall Street</div><div style="font-family:arial;font-size:small">
Ste. 58461</div><div style="font-family:arial;font-size:small">Wilmington, Delaware 19801-2230</div><div style="font-family:arial;font-size:small">Toll-free: (888) 406-7620</div></font></font></div></font></div><div style="font-family:arial;font-size:small">
<img src="http://www.aqorn.com/images/logo.png" width="96" height="39"><br></div></div></div>
<br><br><div class="gmail_quote">On Mon, Feb 10, 2014 at 1:57 PM, Adam Lawson <span dir="ltr"><<a href="mailto:alawson@aqorn.com" target="_blank">alawson@aqorn.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div>Thanks for your ideas John. I checked proxy-server.conf and it appears the user exists as it should and tempauth is denoted correctly as well.</div><div><br></div><div>I am able to perform Step1 without an error but Step2 gives me an unauthorized reply and Step3 says account could not be HEADED. Exact response below.</div>
<div><br></div><div>Below are the steps I'm executing, the result and the contents of proxy-server.conf.</div><div><br></div><div><b>STEPS:</b></div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class="">
<font face="courier new, monospace" size="1"># 1 Aqcuire X-Storage-Url and X-Auth-Token<br></font></div><font face="courier new, monospace" size="1">curl -k -v -H 'X-Storage-User: system:root' -H 'X-Storage-Pass: testing' https://$PROXY_LOCAL_NET_IP:8080/AUTH/v1.0</font><div class="">
<font face="courier new, monospace" size="1"><br>
</font><font face="courier new, monospace" size="1"># 2 Test HEAD account process<br></font><font face="courier new, monospace" size="1"># SAMPLE: curl -k -v -H 'X-Auth-Token: <token-from-x-auth-token-above>' <url-from-x-storage-url-above><br>
</font><font face="courier new, monospace" size="1">curl -k -v -H 'X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628' https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system</font><font face="courier new, monospace" size="1"><br>
</font></div><font face="courier new, monospace" size="1"># 3 Test Swift is actually working<br></font><font face="courier new, monospace" size="1">swift -A https://$PROXY_LOCAL_NET_IP:8080/AUTH/v1.0 -U system:root -K testpass stat</font></blockquote>
</div><div><br></div><div><b><br></b></div><div><b>OUTPUT:</b></div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<font face="courier new, monospace" size="1">root@mo-ad1469a10:/home/c52xxx74# swift -A https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0 -U system:root -K testpass stat<br></font><font face="courier new, monospace" size="1">Account HEAD failed: <a href="https://10.173.0.66:8080/v1/AUTH_system" target="_blank">https://10.173.0.66:8080/v1/AUTH_system</a> 401 Unauthorized<br>
</font><font face="courier new, monospace" size="1">root@mo-ad1469a10:/home/c52xxx74# curl -k -v -H 'X-Storage-User: system:root' -H 'X-Storage-Pass: testpass' https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0<br>
</font><div class=""><font face="courier new, monospace" size="1">* About to connect() to 10.173.0.66 port 8080 (#0)<br></font><font face="courier new, monospace" size="1">* Trying 10.173.0.66... connected<br></font><font face="courier new, monospace" size="1">* successfully set certificate verify locations:<br>
</font><font face="courier new, monospace" size="1">* CAfile: none<br></font><font face="courier new, monospace" size="1"> CApath: /etc/ssl/certs<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Client hello (1):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Server hello (2):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, CERT (11):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Server finished (14):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Client key exchange (16):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS change cipher, Client hello (1):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Finished (20):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS change cipher, Client hello (1):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Finished (20):<br></font><font face="courier new, monospace" size="1">* SSL connection using AES256-SHA<br>
</font><font face="courier new, monospace" size="1">* Server certificate:<br></font><font face="courier new, monospace" size="1">* subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd<br></font><font face="courier new, monospace" size="1">* start date: 2014-01-29 00:34:55 GMT<br>
</font><font face="courier new, monospace" size="1">* expire date: 2014-02-28 00:34:55 GMT<br></font><font face="courier new, monospace" size="1">* SSL: unable to obtain common name from peer certificate<br></font><font face="courier new, monospace" size="1">> GET /auth/v1.0 HTTP/1.1<br>
</font></div><font face="courier new, monospace" size="1">> User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/<a href="http://1.2.3.4" target="_blank">1.2.3.4</a> libidn/1.23 librtmp/2.3<br>
</font><div class=""><font face="courier new, monospace" size="1">> Host: <a href="http://10.173.0.66:8080" target="_blank">10.173.0.66:8080</a><br>
</font><font face="courier new, monospace" size="1">> Accept: */*<br></font></div><font face="courier new, monospace" size="1">> X-Storage-User: system:root<br></font><font face="courier new, monospace" size="1">> X-Storage-Pass: testpass<br>
</font><font face="courier new, monospace" size="1">><br></font><font face="courier new, monospace" size="1">< HTTP/1.1 200 OK<br></font><font face="courier new, monospace" size="1">< X-Storage-Url: <a href="https://10.173.0.66:8080/v1/AUTH_system" target="_blank">https://10.173.0.66:8080/v1/AUTH_system</a><br>
</font><font face="courier new, monospace" size="1">< X-Auth-Token: AUTH_tk43103ea556414c57a5aecad62155a8e4<br></font><font face="courier new, monospace" size="1">< Content-Type: text/html; charset=UTF-8<br></font><font face="courier new, monospace" size="1">< X-Storage-Token: AUTH_tk43103ea556414c57a5aecad62155a8e4<br>
</font><font face="courier new, monospace" size="1">< Content-Length: 0<br></font><font face="courier new, monospace" size="1">< Date: Mon, 10 Feb 2014 21:41:54 GMT<br></font><div class=""><font face="courier new, monospace" size="1"><<br>
</font><font face="courier new, monospace" size="1">* Connection #0 to host 10.173.0.66 left intact<br></font><font face="courier new, monospace" size="1">* Closing connection #0<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS alert, Client hello (1):<br>
</font></div><font face="courier new, monospace" size="1">root@mo-ad1469a10:/home/c52xxx74# curl -k -v -H 'X-Auth-Token: AUTH_tk43103ea556414c57a5aecad62155a8e4' <a href="https://10.173.0.66:8080/v1/AUTH_system" target="_blank">https://10.173.0.66:8080/v1/AUTH_system</a><br>
</font><div class=""><font face="courier new, monospace" size="1">* About to connect() to 10.173.0.66 port 8080 (#0)<br></font><font face="courier new, monospace" size="1">* Trying 10.173.0.66... connected<br></font><font face="courier new, monospace" size="1">* successfully set certificate verify locations:<br>
</font><font face="courier new, monospace" size="1">* CAfile: none<br></font><font face="courier new, monospace" size="1"> CApath: /etc/ssl/certs<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Client hello (1):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Server hello (2):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, CERT (11):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Server finished (14):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Client key exchange (16):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS change cipher, Client hello (1):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Finished (20):<br>
</font><font face="courier new, monospace" size="1">* SSLv3, TLS change cipher, Client hello (1):<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS handshake, Finished (20):<br></font><font face="courier new, monospace" size="1">* SSL connection using AES256-SHA<br>
</font><font face="courier new, monospace" size="1">* Server certificate:<br></font><font face="courier new, monospace" size="1">* subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd<br></font><font face="courier new, monospace" size="1">* start date: 2014-01-29 00:34:55 GMT<br>
</font><font face="courier new, monospace" size="1">* expire date: 2014-02-28 00:34:55 GMT<br></font><font face="courier new, monospace" size="1">* SSL: unable to obtain common name from peer certificate<br></font><font face="courier new, monospace" size="1">> GET /v1/AUTH_system HTTP/1.1<br>
</font></div><font face="courier new, monospace" size="1">> User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/<a href="http://1.2.3.4" target="_blank">1.2.3.4</a> libidn/1.23 librtmp/2.3<br>
</font><div class=""><font face="courier new, monospace" size="1">> Host: <a href="http://10.173.0.66:8080" target="_blank">10.173.0.66:8080</a><br>
</font><font face="courier new, monospace" size="1">> Accept: */*<br></font></div><font face="courier new, monospace" size="1">> X-Auth-Token: AUTH_tk43103ea556414c57a5aecad62155a8e4<br></font><div class=""><font face="courier new, monospace" size="1">><br>
</font><font face="courier new, monospace" size="1">< HTTP/1.1 401 Unauthorized<br></font><font face="courier new, monospace" size="1">< Content-Length: 131<br></font><font face="courier new, monospace" size="1">< Content-Type: text/html; charset=UTF-8<br>
</font></div><font face="courier new, monospace" size="1">< Date: Mon, 10 Feb 2014 21:43:29 GMT<br></font><div class=""><font face="courier new, monospace" size="1"><<br></font><font face="courier new, monospace" size="1">* Connection #0 to host 10.173.0.66 left intact<br>
</font><font face="courier new, monospace" size="1">* Closing connection #0<br></font><font face="courier new, monospace" size="1">* SSLv3, TLS alert, Client hello (1):<br></font></div><font face="courier new, monospace" size="1"><html><h1>Unauthorized</h1><p>This server could not verify that you are authorized to access the document you requested.</p></html>root@mo-ad1469a10:/home/c52xxx74#<br>
</font><font face="courier new, monospace" size="1">root@mo-ad1469a10:/home/c52xxx74# swift -A https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0 -U system:root -K testpass stat<br></font><font face="courier new, monospace" size="1">Account HEAD failed: <a href="https://10.173.0.66:8080/v1/AUTH_system" target="_blank">https://10.173.0.66:8080/v1/AUTH_system</a> 401 Unauthorized</font></blockquote>
</div><div><br></div><div><b><br></b></div><div><b>PROXY-SERVER.CONF</b></div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<font face="courier new, monospace" size="1">[DEFAULT]<br></font><font face="courier new, monospace" size="1">cert_file = /etc/swift/cert.crt<br></font><font face="courier new, monospace" size="1">key_file = /etc/swift/cert.key<br>
</font><font face="courier new, monospace" size="1">bind_port = 8080<br></font><font face="courier new, monospace" size="1">workers = 8<br></font><font face="courier new, monospace" size="1">user = swift</font><font face="courier new, monospace" size="1"><br>
</font><font face="courier new, monospace" size="1">[pipeline:main]<br></font><font face="courier new, monospace" size="1">pipeline = healthcheck proxy-logging cache tempauth proxy-logging proxy-server</font><font face="courier new, monospace" size="1"><br>
</font><font face="courier new, monospace" size="1">[app:proxy-server]<br></font><font face="courier new, monospace" size="1">use = egg:swift#proxy<br></font><font face="courier new, monospace" size="1">allow_account_management = true<br>
</font><font face="courier new, monospace" size="1">account_autocreate = true</font><font face="courier new, monospace" size="1"><br></font><font face="courier new, monospace" size="1">[filter:proxy-logging]<br></font><font face="courier new, monospace" size="1">use = egg:swift#proxy_logging</font><font face="courier new, monospace" size="1"><br>
</font><font face="courier new, monospace" size="1">[filter:tempauth]<br></font><font face="courier new, monospace" size="1">use = egg:swift#tempauth<br></font><font face="courier new, monospace" size="1">user_system_root = testpass .admin <a href="https://10.173.0.66:8080/v1/AUTH_system" target="_blank">https://10.173.0.66:8080/v1/AUTH_system</a></font><font face="courier new, monospace" size="1"><br>
</font><font face="courier new, monospace" size="1">[filter:healthcheck]<br></font><font face="courier new, monospace" size="1">use = egg:swift#healthcheck</font><font face="courier new, monospace" size="1"><br></font><font face="courier new, monospace" size="1">[filter:cache]<br>
</font><font face="courier new, monospace" size="1">use = egg:swift#memcache<br></font><font face="courier new, monospace" size="1">memcache_servers = <a href="http://10.173.0.66:11211" target="_blank">10.173.0.66:11211</a></font></blockquote>
</div><div><br></div><div><br></div><div>What am I missing here?</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div class=""><div><font><div style="font-family:arial;font-size:small">
<b><i><br>Adam Lawson</i></b></div>
<div><font><font color="#666666" size="1"><div style="font-family:arial;font-size:small">AQORN, Inc.</div><div style="font-family:arial;font-size:small">427 North Tatnall Street</div><div style="font-family:arial;font-size:small">
Ste. 58461</div><div style="font-family:arial;font-size:small">Wilmington, Delaware 19801-2230</div><div style="font-family:arial;font-size:small">Toll-free: <a href="tel:%28888%29%20406-7620" value="+18884067620" target="_blank">(888) 406-7620</a></div>
</font></font></div></font></div></div><div style="font-family:arial;font-size:small">
<img src="http://www.aqorn.com/images/logo.png" width="96" height="39"><br></div></div></div><div><div class="h5">
<br><br><div class="gmail_quote">On Fri, Feb 7, 2014 at 6:19 PM, John Dickinson <span dir="ltr"><<a href="mailto:me@not.mn" target="_blank">me@not.mn</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
In the output you pasted, you don't have any successful response. I'd suggest looking at the tempauth stanza in the proxy server conf to make sure the users are set up correctly.<br>
<br>
--John<br>
<div><div><br>
<br>
<br>
On Feb 7, 2014, at 4:55 PM, Adam Lawson <<a href="mailto:alawson@aqorn.com" target="_blank">alawson@aqorn.com</a>> wrote:<br>
<br>
> To help with troubleshooting, here is what I've executed thus far on my proxy node...<br>
> Obvious problem/symptom = inability to verify a new Swift install from scratch due to 401 Unauthorized.<br>
> • 1x proxy node<br>
> • 5x storage nodes<br>
> I'll continue working this but anyone have any thoughts? See email to -operators list for further history.<br>
><br>
> Thanks!<br>
> Adam<br>
><br>
> Below is a bash history/output of what is happening right now:<br>
> login as: c5201274<br>
> <a href="mailto:c5201274@10.173.0.66" target="_blank">c5201274@10.173.0.66</a>'s password:<br>
> Welcome to Ubuntu 12.04.3 LTS (GNU/Linux 3.2.0-55-generic x86_64)<br>
> * Documentation: <a href="https://help.ubuntu.com/" target="_blank">https://help.ubuntu.com/</a><br>
> Last login: Thu Feb 6 21:05:32 2014 from 10.7.106.110<br>
> Powered by Monsoon (Version 2.2.465) Platform: ubuntu 12.04<br>
> Hostname : mo-ad1469a10.mo.sap.corp Name : node0p<br>
> Organization : c5201274 Project : swift_poc<br>
> Url : <a href="https://monsoon.mo.sap.corp/instances/mo-ad1469a10" target="_blank">https://monsoon.mo.sap.corp/instances/mo-ad1469a10</a><br>
> c5201274@mo-ad1469a10:~$ sudo su<br>
> root@mo-ad1469a10:/home/c5201274# . credrc.sh<br>
> root@mo-ad1469a10:/home/c5201274# swift-init proxy start<br>
> proxy-server running (5502 - /etc/swift/proxy-server.conf)<br>
> proxy-server already started...<br>
> root@mo-ad1469a10:/home/c5201274# curl -k -v -H 'X-Storage-User: test:tester' -H 'X-Storage-Pass: testing' https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0<br>
> * About to connect() to 10.173.0.66 port 8080 (#0)<br>
> * Trying 10.173.0.66... connected<br>
> * successfully set certificate verify locations:<br>
> * CAfile: none<br>
> CApath: /etc/ssl/certs<br>
> * SSLv3, TLS handshake, Client hello (1):<br>
> * SSLv3, TLS handshake, Server hello (2):<br>
> * SSLv3, TLS handshake, CERT (11):<br>
> * SSLv3, TLS handshake, Server finished (14):<br>
> * SSLv3, TLS handshake, Client key exchange (16):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSL connection using AES256-SHA<br>
> * Server certificate:<br>
> * subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd<br>
> * start date: 2014-01-29 00:34:55 GMT<br>
> * expire date: 2014-02-28 00:34:55 GMT<br>
> * SSL: unable to obtain common name from peer certificate<br>
> > GET /auth/v1.0 HTTP/1.1<br>
> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4libidn/1.23 librtmp/2.3<br>
> > Host: <a href="http://10.173.0.66:8080" target="_blank">10.173.0.66:8080</a><br>
> > Accept: */*<br>
> > X-Storage-User: test:tester<br>
> > X-Storage-Pass: testing<br>
> ><br>
> < HTTP/1.1 401 Unauthorized<br>
> < Content-Length: 131<br>
> < Content-Type: text/html; charset=UTF-8<br>
> < Date: Fri, 07 Feb 2014 18:20:13 GMT<br>
> <<br>
> * Connection #0 to host 10.173.0.66 left intact<br>
> * Closing connection #0<br>
> * SSLv3, TLS alert, Client hello (1):<br>
> <html><h1>Unauthorized</h1><p>This server could not verify that you are authorized to access the document you requested.</p></html>root@mo-ad1469a10:/home/c5201274#<br>
> root@mo-ad1469a10:/home/c5201274# curl -k -v -H 'X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628' https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system<br>
> * About to connect() to 10.173.0.66 port 8080 (#0)<br>
> * Trying 10.173.0.66... connected<br>
> * successfully set certificate verify locations:<br>
> * CAfile: none<br>
> CApath: /etc/ssl/certs<br>
> * SSLv3, TLS handshake, Client hello (1):<br>
> * SSLv3, TLS handshake, Server hello (2):<br>
> * SSLv3, TLS handshake, CERT (11):<br>
> * SSLv3, TLS handshake, Server finished (14):<br>
> * SSLv3, TLS handshake, Client key exchange (16):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSL connection using AES256-SHA<br>
> * Server certificate:<br>
> * subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd<br>
> * start date: 2014-01-29 00:34:55 GMT<br>
> * expire date: 2014-02-28 00:34:55 GMT<br>
> * SSL: unable to obtain common name from peer certificate<br>
> > GET /v1/AUTH_system HTTP/1.1<br>
> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4libidn/1.23 librtmp/2.3<br>
> > Host: <a href="http://10.173.0.66:8080" target="_blank">10.173.0.66:8080</a><br>
> > Accept: */*<br>
> > X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628<br>
> ><br>
> < HTTP/1.1 401 Unauthorized<br>
> < Content-Length: 131<br>
> < Content-Type: text/html; charset=UTF-8<br>
> < Date: Fri, 07 Feb 2014 18:21:22 GMT<br>
> <<br>
> * Connection #0 to host 10.173.0.66 left intact<br>
> * Closing connection #0<br>
> * SSLv3, TLS alert, Client hello (1):<br>
> <html><h1>Unauthorized</h1><p>This server could not verify that you are authorized to access the document you requested.</p></html>root@mo-ad1469a10:/home/c5201274# ^C<br>
> root@mo-ad1469a10:/home/c5201274# ^C<br>
> root@mo-ad1469a10:/home/c5201274# curl -k -v -H 'X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628' https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system<br>
> * About to connect() to 10.173.0.66 port 8080 (#0)<br>
> * Trying 10.173.0.66... connected<br>
> * successfully set certificate verify locations:<br>
> * CAfile: none<br>
> CApath: /etc/ssl/certs<br>
> * SSLv3, TLS handshake, Client hello (1):<br>
> * SSLv3, TLS handshake, Server hello (2):<br>
> * SSLv3, TLS handshake, CERT (11):<br>
> * SSLv3, TLS handshake, Server finished (14):<br>
> * SSLv3, TLS handshake, Client key exchange (16):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSLv3, TLS change cipher, Client hello (1):<br>
> * SSLv3, TLS handshake, Finished (20):<br>
> * SSL connection using AES256-SHA<br>
> * Server certificate:<br>
> * subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd<br>
> * start date: 2014-01-29 00:34:55 GMT<br>
> * expire date: 2014-02-28 00:34:55 GMT<br>
> * SSL: unable to obtain common name from peer certificate<br>
> > GET /v1/AUTH_system HTTP/1.1<br>
> > User-Agent: curl/7.22.0 (x86_64-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1 zlib/1.2.3.4libidn/1.23 librtmp/2.3<br>
> > Host: <a href="http://10.173.0.66:8080" target="_blank">10.173.0.66:8080</a><br>
> > Accept: */*<br>
> > X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628<br>
> ><br>
> < HTTP/1.1 401 Unauthorized<br>
> < Content-Length: 131<br>
> < Content-Type: text/html; charset=UTF-8<br>
> < Date: Fri, 07 Feb 2014 18:22:52 GMT<br>
> <<br>
> * Connection #0 to host 10.173.0.66 left intact<br>
> * Closing connection #0<br>
> * SSLv3, TLS alert, Client hello (1):<br>
> <html><h1>Unauthorized</h1><p>This server could not verify that you are authorized to access the document you requ<br>
> root@mo-ad1469a10:/home/c5201274# swift -A https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0 -U test:tester -K testing stat<br>
> Auth GET failed: <a href="https://10.173.0.66:8080/auth/v1.0" target="_blank">https://10.173.0.66:8080/auth/v1.0</a> 401 Unauthorized<br>
> root@mo-ad1469a10:/home/c5201274#<br>
><br>
><br>
> Adam Lawson<br>
> AQORN, Inc.<br>
> 427 North Tatnall Street<br>
> Ste. 58461<br>
> Wilmington, Delaware 19801-2230<br>
> Toll-free: <a href="tel:%28888%29%20406-7620" value="+18884067620" target="_blank">(888) 406-7620</a><br>
><br>
><br>
><br>
</div></div><div>> On Thu, Feb 6, 2014 at 1:57 PM, Adam Lawson <<a href="mailto:alawson@aqorn.com" target="_blank">alawson@aqorn.com</a>> wrote:<br>
> Hey OpenStack peeps!<br>
><br>
> I'm trying to verify a Swift manual installation with 1x proxy and 5x storage nodes. I turned on all services with no errors (well, no errors I didn't fix anyway).<br>
> My problem is with trying to create an account and heading it. Below is what I'm scripting as I go along.<br>
><br>
> I executed Step1 successfully using system:root as the user. But when I executed Step2, I received a 401 Unauthorized reply.<br>
> Undaunted I executed Step3 which produced nothing. I then tried running Step1 again as shown below with test:tester as the user (thinking it was because I don't actually run as root but I run commands via sudo) and now it always gives me 401 unauthorized replies.<br>
><br>
> Is this an obvious problem with an easy remedy?<br>
><br>
><br>
> # 1 Aqcuire X-Storage-Url and X-Auth-Token<br>
> curl -k -v -H 'X-Storage-User: test:tester' -H 'X-Storage-Pass: testing' https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0<br>
><br>
> # 2 Test HEAD account process<br>
> # SAMPLE: curl -k -v -H 'X-Auth-Token: <token-from-x-auth-token-above>' <url-from-x-storage-url-above><br>
> curl -k -v -H 'X-Auth-Token: AUTH_tkf85b7788c36143ac99e5a5b42d95d628' https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system<br>
><br>
> # Test Swift is actually working<br>
> swift -A https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0 -U system:testuser -K testpass stat<br>
><br>
> Thoughts?<br>
><br>
> Adam Lawson<br>
> AQORN, Inc.<br>
> 427 North Tatnall Street<br>
> Ste. 58461<br>
> Wilmington, Delaware 19801-2230<br>
> Toll-free: <a href="tel:%28888%29%20406-7620" value="+18884067620" target="_blank">(888) 406-7620</a><br>
><br>
><br>
</div>> _______________________________________________<br>
> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
> Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>
> Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div>