I think the key is this line:<div><br></div><div><span style>2012-05-11 10:03:11 18461 INFO [keystone.middleware.auth_</span><span style>token] Keystone rejected admin token {'X-Auth-Token': u'</span><span style>6f220a2e7e324bf4bd7a96040f3643</span><span style>16'}, resetting</span> </div>
<div><br></div><div>It looks like your auth_token middleware isn't properly authenticating itself with keystone. Verify that you can receive an admin token from the admin endpoint using whatever credentials you've configured the auth_token middleware to use via [filter:authtoken], (notice I'm using the admin endpoint here):</div>
<div><br></div><div>$ keystone --os_username=glance --os_password=glance --os_tenant=service --os_auth_url=<a href="http://127.0.0.1:35357/v2.0">http://127.0.0.1:35357/v2.0</a> token-get<br><br>I'm guessing this authentication is either failing, or doesn't have the necessary admin privileges to validate other tokens? As shake.chen points out, user-list will probably fail for this reason.</div>
<div><br></div><div>-Dolph<br><br><div class="gmail_quote">On Sat, May 12, 2012 at 3:03 AM, Shake Chen <span dir="ltr"><<a href="mailto:shake.chen@gmail.com" target="_blank">shake.chen@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">you can check your keystone whether work correctly.<br><br>keystone user-list<br><br><br><br><div class="gmail_quote"><div>
<div class="h5">On Fri, May 11, 2012 at 12:42 PM, Shashi Kanth Boddula <span dir="ltr"><<a href="mailto:shashi.bsd@gmail.com" target="_blank">shashi.bsd@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">Ubuntu 12.04 Essex.<br><br># glance index<br>Failed to show index. Got error:<br>You are not authenticated.<br>
Details: 401 Unauthorized<br>
<br>This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.<br>
<br> Authentication required <br><br># glance --os_username=glance --os_password=glance --os_tenant=service --os_auth_url=<a href="http://127.0.0.1:5000/v2.0" target="_blank">http://127.0.0.1:5000/v2.0</a> index<br><br>
Failed to show index. Got error:<br>
You are not authenticated.<br>Details: 401 Unauthorized<br><br>This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.<br>
<br> Authentication required <br><br><br>---------------------------------------<br><br>In the keystone log file i see the error bellow.<br><br><br>2012-05-11 10:03:11 18461 INFO [keystone.middleware.auth_token] Retrying validation<br>
2012-05-11 10:03:11 18461 INFO [keystone.middleware.auth_token] Keystone rejected admin token {'X-Auth-Token': u'6f220a2e7e324bf4bd7a96040f364316'}, resetting<br>2012-05-11 10:03:11 18461 WARNING [keystone.middleware.auth_token] Invalid user token: 238dc305de1e418b8b81bee4f648f984. Keystone response: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Not Authorized'}}.<br>
2012-05-11 10:03:11 18461 INFO [keystone.middleware.auth_token] Invalid user token - rejecting request<br><br><br><br>Not understanding where could be the problem.<br><br>glace user is mapped to admin role in the service tenant.<br>
<br>glance endpoint is created.<br><br>I have specified glance user name, password and the service tenant in glance-api/registry files, and keystone authentication specified.<br><br><br>Anyone tell me what could be the problem? Thank you.<span><font color="#888888"><br>
<br><br clear="all"><br>-- <br>Thanks & Regards,<br>Shashi Kanth<br><br>
</font></span><br></div></div>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><br>-- <br>Shake Chen<br><br><br>
</font></span><br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div>