[Openstack] Can I authenticate a Kilo service against an Icehouse identity server?

Gustavo Randich gustavo.randich at gmail.com
Mon May 9 18:02:17 UTC 2016


solved; I was hitting this bug:
https://bugs.launchpad.net/keystone/+bug/1343579

:)


On Mon, May 9, 2016 at 2:24 PM, Gustavo Randich <gustavo.randich at gmail.com>
wrote:

> ok here is a little more log detail...
>
> 2016-05-09 13:18:53.246 8014 INFO eventlet.wsgi.server [-] (8014) accepted
> ('10.181.0.6', 35939)
> 2016-05-09 13:18:53.253 8014 DEBUG keystoneclient.session [-] REQ: curl -g
> -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
> https://icehouse-api:35357 -H "Accept: application/json" -H "User-Agent:
> python-keystoneclient" _http_log_request
> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
> 2016-05-09 13:18:53.352 8014 DEBUG keystoneclient.session [-] RESP: [300]
> content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
> Mon, 09 May 2016 17:18:53 GMT content-type: application/json
> x-distribution: Ubuntu
> RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
> "2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
> "type": "application/vnd.openstack.identity-v3+json"}, {"base":
> "application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
> "id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/", "rel":
> "self"}]}]}}
>  _http_log_response
> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
> 2016-05-09 13:18:53.353 8014 DEBUG keystoneclient.auth.identity.v3 [-]
> Making authentication request to https://icehouse-api:35357/v3/auth/tokens
> get_auth_ref
> /usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3.py:125
> 2016-05-09 13:18:53.549 8014 DEBUG keystoneclient.session [-] REQ: curl -g
> -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
> https://icehouse-api:35357/ -H "Accept: application/json" -H "User-Agent:
> python-keystoneclient" _http_log_request
> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
> 2016-05-09 13:18:53.574 8014 DEBUG keystoneclient.session [-] RESP: [300]
> content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
> Mon, 09 May 2016 17:18:53 GMT content-type: application/json
> x-distribution: Ubuntu
> RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
> "2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
> "type": "application/vnd.openstack.identity-v3+json"}, {"base":
> "application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
> "id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/", "rel":
> "self"}]}]}}
>  _http_log_response
> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
> 2016-05-09 13:18:53.575 8014 WARNING keystonemiddleware.auth_token [-]
> Authorization failed for token
> 2016-05-09 13:18:53.576 8014 INFO eventlet.wsgi.server [-] 10.181.0.6 - -
> [09/May/2016 13:18:53] "GET /v2/ceaa212d5fe949d4b0319d28e8872ff0/volumes
> HTTP/1.1" 401 261 0.327230
>
>
> On Mon, May 9, 2016 at 1:56 PM, Gustavo Randich <gustavo.randich at gmail.com
> > wrote:
>
>> Hi,
>>
>> Is it possible to integrate python-keystoneclient as of Kilo release
>> (1.2.0) with keystone Icehouse (2014.1)?
>>
>> Specifically, I'm trying to make cinder-api (Kilo) authenticate against
>> an Icehouse keystone server, but the following appears in the log:
>>
>> 2016-05-09 12:55:06.846 7623 INFO eventlet.wsgi.server [-] (7623)
>> accepted ('10.181.0.6', 35909)
>>
>> 2016-05-09 12:55:06.851 7623 DEBUG keystoneclient.session [-] REQ: curl
>> -g -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
>> https://icehouse-api:35357 -H "Accept: application/json" -H "User-Agent:
>> python-keystoneclient" _http_log_request
>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
>>
>> 2016-05-09 12:55:06.866 7623 WARNING
>> keystoneclient.auth.identity.generic.base [-] Discovering versions from the
>> identity service failed when creating the password plugin. Attempting to
>> determine version from URL.
>>
>> 2016-05-09 12:55:06.867 7623 WARNING keystonemiddleware.auth_token [-]
>> Authorization failed for token
>>
>> 2016-05-09 12:55:06.868 7623 INFO eventlet.wsgi.server [-] 10.181.0.6 - -
>> [09/May/2016 12:55:06] "GET /v2//volumes/detail HTTP/1.1" 401 261 0.019666
>>
>>
>> Thanks!
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160509/d782fc27/attachment.html>


More information about the Openstack mailing list