Hi, All, I'm a newcomer to Openstack Ironic. Recently, I'm work on deploy ironic manually, and I found that the node status 100% *blocked in `callback wait` status* until timeout. The ironic-api log shows that: 2017-01-12 10:21:00.626 158262 INFO keystonemiddleware.auth_token [-] Rejecting request 2017-01-12 10:21:00.627 158262 INFO ironic_api [-] 10.0.81.31 "GET /v1/lookup?addresses=xxx HTTP/1 I guess the problem is IPA, so I dug into IPA source and traced the request process and found that the IPA client request *without any authentication* [1]. [1] https://github.com/openstack/ironic-python-agent/blob/master/ironic_python_agent/ironic_api_client.py#L109-L111 My ironic version is *5.1.1-1(mitaka) *and *IPA has updated to newest version from master branch*. My config as follows: ``` [keystone_authtoken] auth_uri=http://xxxx:5000/ auth_version=v3.0 identity_uri=http://xxxx:35357/ admin_user=ironic admin_password=IRONIC_PASSWORD admin_tenant_name=service [conductor] api_url=http://201.0.0.120:6385 # ensure the node can access ``` I'm really not sure if I miss something or something wrong in config. Thanks for any help! krystism -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20170112/4df3cf6f/attachment.html>