<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>We’ve run into this, too, and it’s been a frustration for a while. No way to tell python-requests to use a different cacert file (that I know of), and (at least in the packaging we use), the packaged cacert.pem file isn’t marked as a configuration file,
meaning that it gets overwritten any time the package is upgraded.</div>
<div><br>
</div>
<div>Glad you got it figured out.</div>
<div><br>
</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Xav Paice <<a href="mailto:xavpaice@gmail.com">xavpaice@gmail.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, November 11, 2015 at 7:07 PM<br>
<span style="font-weight:bold">To: </span>OpenStack Operators <<a href="mailto:openstack-operators@lists.openstack.org">openstack-operators@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Openstack-operators] Kilo upgrade challenges<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Follow up to this...
<div><br>
</div>
<div>It turns out that using a self signed SSL cert is problematic when python requests bundles it's cacerts separately to the system list of ca certs (in a virtual env).</div>
<div><br>
</div>
<div>This was solved by cat'ing the ca cert for our ca >> /usr/share/python/python-heat/lib/python2.7/site-packages/requests/cacert.pem</div>
<div><br>
</div>
<div>It was bound to be something daft like that!</div>
<div><br>
</div>
<div>Many thanks for the replies, very much appreciated.</div>
<div><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 12 November 2015 at 13:20, Matt Kassawara <span dir="ltr">
<<a href="mailto:mkassawara@gmail.com" target="_blank">mkassawara@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Did you change anything under [keystone_authtoken] in the heat.conf file?</div>
<div class="">
<div class="h5">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Nov 11, 2015 at 4:43 PM, Leslie-Alexandre DENIS <span dir="ltr">
<<a href="mailto:contact@ladenis.fr" target="_blank">contact@ladenis.fr</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>
<div>
<div>Le 11/11/2015 05:46, Xav Paice a écrit :<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">
<div>Hi,</div>
<div><br>
</div>
<div>Late to the party, I'm only just doing the Kilo upgrade now (with a couple of projects going direct to Liberty). I seem to have hit a bit of a snag, and I've now spent a bit too long banging my head against this, was wondering if anyone else has advice/experiences
to share.</div>
<div><br>
</div>
<div>If it's a "you Muppet, you did X wrong" thing, I'd love to hear about it - I'm 99.9% sure I've stuffed up a config somewhere.</div>
<div><br>
</div>
<div>In short, after upgrading, say, Heat, to Kilo, and running the db migration, restarting etc, the CLI is returning 'Authentication required'. My user is admin, and nothing has changed that I'm aware of. I can't see anything particularly new in the logs
for keystone, nor in heat, except that I now see "WARNING keystonemiddleware.auth_token [-] Authorization failed for token". I'm not sure if that's a problem or not though.</div>
<div><br>
</div>
<div>Some details etc are in <a href="http://paste.openstack.org/show/478501/" target="_blank">
http://paste.openstack.org/show/478501/</a> -> from a dev environment so not even sanitized.</div>
<div><br>
</div>
<div>Anyone been there?</div>
<div><br>
</div>
<div>Thanks<br>
Xav</div>
</div>
<br>
<fieldset></fieldset> <br>
</div>
</div>
<pre>_______________________________________________
OpenStack-operators mailing list
<a href="mailto:OpenStack-operators@lists.openstack.org" target="_blank">OpenStack-operators@lists.openstack.org</a><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a></pre>
</blockquote>
<br>
Hello Xav,<br>
<br>
I faced similar problems last few weeks, during an Icehouse to Kilo upgrade, regarding to Cinder and I found out that it was due to client version.<br>
You can find the correct version in <a href="https://github.com/openstack/heat/blob/stable/kilo/requirements.txt" target="_blank">
https://github.com/openstack/heat/blob/stable/kilo/requirements.txt</a><br>
At least, you can double check it and eventually solve this.<br>
<br>
My 2 cents,<br>
</div>
<br>
_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org" target="_blank">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>