<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div>Thank you very much for the explanation. After some further tinkering with keystone.conf file, what you explained below is exactly what is happening. Thank you again for bearing with my questions.</div><div><br></div><div>Regards,</div><div>Ahmed.</div><div><br></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Dolph Mathews <<a href="mailto:dolph.mathews@gmail.com">dolph.mathews@gmail.com</a>><br><span style="font-weight:bold">Date: </span> Wednesday, October 31, 2012 2:16 PM<br><span style="font-weight:bold">To: </span> Joshua Harlow <<a href="mailto:harlowja@yahoo-inc.com">harlowja@yahoo-inc.com</a>><br><span style="font-weight:bold">Cc: </span> Ahmed Al-Mehdi <<a href="mailto:ahmed@coraid.com">ahmed@coraid.com</a>>, Joseph Heck <<a href="mailto:Joe.Heck@nebula.com">Joe.Heck@nebula.com</a>>, "<a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>" <<a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>><br><span style="font-weight:bold">Subject: </span> Re: [Openstack] Verification of Keystone Installation fails<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div>
There are basically two rules at work:
<div><br></div><div>1) an existing token takes precedence over username+password credentials.</div><div>2) CLI options take precedence over configuration from the environment.</div><div><br></div><div>In Folsom, these options look like:</div><div><br></div><div>(existing token)</div><div>--os-token / OS_SERVICE_TOKEN</div><div>--os-endpoint / OS_SERVICE_ENDPOINT</div><div><br></div><div>(credentials)</div><div>--os-username / OS_USERNAME</div><div>--os-password / OS_PASSWORD</div><div>--os-tenant-name / OS_TENANT_NAME</div><div>--os-auth-url / OS_AUTH_URL<br clear="all"><div><br></div><div>(there are also a few other options like region, api version, etc)</div><div><br></div><div>Rule 1 is universally applied before rule 2, which means the token + endpoint from the environment is taking precedence over username + password from the CLI. IMO, it's a bug that rule 2 isn't applied before rule 1.</div></div><div><br></div>
-Dolph<br><br><br><div class="gmail_quote">On Wed, Oct 31, 2012 at 3:32 PM, Joshua Harlow <span dir="ltr">
<<a href="mailto:harlowja@yahoo-inc.com" target="_blank">harlowja@yahoo-inc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>I think the overall issue is connected to <a href="https://bugs.launchpad.net/keystone/+bug/962600" target="_blank">https://bugs.launchpad.net/keystone/+bug/962600</a></div><div><br></div><div>Right? Seems like that is still happening :-(</div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none"><span style="font-weight:bold">From: </span>Ahmed Al-Mehdi <<a href="mailto:ahmed@coraid.com" target="_blank">ahmed@coraid.com</a>><br><span style="font-weight:bold">Date: </span>Wednesday, October 31, 2012 1:15 PM<br><span style="font-weight:bold">To: </span>Dolph Mathews <<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>><br><span style="font-weight:bold">Cc: </span>Joseph Heck <<a href="mailto:Joe.Heck@nebula.com" target="_blank">Joe.Heck@nebula.com</a>>, "<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>" <<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>>
<div><div class="h5"><br><span style="font-weight:bold">Subject: </span>Re: [Openstack] Verification of Keystone Installation fails<br></div></div></div><div><div class="h5"><div><br></div><div><div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Hi Dolph,</div><div><br></div><div>Awesome, that worked. Thank you very much. Just out of curiosity, what was the exact conflict? Between which environment variable and option passed to the CLI?</div><div><br></div><div>Regards,</div><div>Ahmed.</div><div><br></div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none"><span style="font-weight:bold">From: </span>Dolph Mathews <<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>><br><span style="font-weight:bold">Date: </span>Wednesday, October 31, 2012 10:46 AM<br><span style="font-weight:bold">To: </span>Ahmed Al-Mehdi <<a href="mailto:ahmed@coraid.com" target="_blank">ahmed@coraid.com</a>><br><span style="font-weight:bold">Cc: </span>"<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>" <<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>>, Joseph Heck <<a href="mailto:Joe.Heck@nebula.com" target="_blank">Joe.Heck@nebula.com</a>><br><span style="font-weight:bold">Subject: </span>Re: [Openstack] Verification of Keystone Installation fails<br></div><div><br></div><blockquote style="BORDER-LEFT:#b5c4df 5 solid;PADDING:0 0 0 5;MARGIN:0 0 0 5"><div><div>I was able to reproduce by defining SERVICE_ENDPOINT and SERVICE_TOKEN in my own environment, which appear to be overriding the credentials provided on the CLI -- I don't think that's the intended behavior.
<div><br></div><div>If you unset them, you should be able to verify the install.</div><div><br></div><div>If you skip verifying keystone and something is wrong with it, you'll likely find out pretty quick when another service calls keystone for the first time :)<br clear="all"><div><br></div>
-Dolph<br><br><br><div class="gmail_quote">On Wed, Oct 31, 2012 at 12:22 PM, Ahmed Al-Mehdi <span dir="ltr">
<<a href="mailto:ahmed@coraid.com" target="_blank">ahmed@coraid.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Hi Dolph,</div><div><br></div><div>Thank you very much for helping me on this issue. Following is the environment variables related to openstack:</div><div><br></div><div><div>root@bodega:~# env | egrep "OS_|SERVICE_"</div><div>SERVICE_ENDPOINT=<a href="http://10.176.20.158:35357/v2.0/" target="_blank">http://10.176.20.158:35357/v2.0/</a></div><div>SERVICE_TOKEN=012345SECRET99TOKEN012345</div><div>root@bodega:~# ifconfig eth0</div><div>eth0 Link encap:Ethernet HWaddr 00:1e:67:06:1b:67 </div><div> inet addr:10.176.20.158 Bcast:10.176.255.255 Mask:255.255.0.0</div><div> inet6 addr: fe80::21e:67ff:fe06:1b67/64 Scope:Link</div><div> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1</div><div> RX packets:12760203 errors:0 dropped:0 overruns:0 frame:0</div><div> TX packets:203944 errors:0 dropped:0 overruns:0 carrier:0</div><div> collisions:0 txqueuelen:1000 </div><div> RX bytes:1044985224 (1.0 GB) TX bytes:22642912 (22.6 MB)</div><div> Interrupt:16 Memory:b2000000-b2020000 </div><div>root@bodega:~# </div></div><div><br></div><div>I am attaching keystone.conf file.</div><div><br></div><div>Would you happen to know if there is a high level document document on keystone (more than just a user guide, but a architectural/functional doc, but not a API doc). Something similar to <a href="http://docs.openstack.org/trunk/openstack-identity/admin/os-identity-starter-guide-trunk.pdf" target="_blank">http://docs.openstack.org/trunk/openstack-identity/admin/os-identity-starter-guide-trunk.pdf</a> but
updated.</div><div><br></div><div>Does my current issue prohibit me from progressing forward with the next steps in the install document, setting up glance, nova, etc.?</div><div><br></div><div>Regards,</div><div>Ahmed.</div><div><br></div><div><br></div><div><br></div><span><div style="border-right:medium none;padding-right:0in;padding-left:0in;padding-top:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:Calibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium none"><span style="font-weight:bold">From: </span>Dolph Mathews <<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>><br><span style="font-weight:bold">Date: </span>Wednesday, October 31, 2012 9:44 AM<br><span style="font-weight:bold">To: </span>Ahmed Al-Mehdi <<a href="mailto:ahmed@coraid.com" target="_blank">ahmed@coraid.com</a>><br><span style="font-weight:bold">Cc: </span>"<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>" <<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>><br><span style="font-weight:bold">Subject: </span>Re: [Openstack] Verification of Keystone Installation fails<br></div><div><div><div><br></div><blockquote style="BORDER-LEFT:#b5c4df 5 solid;PADDING:0 0 0 5;MARGIN:0 0 0 5"><div><div>The error you're seeing is actually client-side, so there won't be anything in keystone's logs. It indicates that you're not actually authenticating with keystone (and instead bypassing authentication using --token and --endpoint, for example) ... however,
that's obviously not the case, as you're explicitly providing --os-username, etc.
<div><br></div><div>Unfortunately, I'm not able to reproduce this issue. Can you share your OS_* environment variables? I suspect something there is unexpectedly overriding what you're providing on the CLI... which would be a legitimate bug.<br clear="all"><div><br></div><div>Thanks,</div><div><br></div>
-Dolph<br><br><br><div class="gmail_quote">On Wed, Oct 31, 2012 at 2:08 AM, Ahmed Al-Mehdi <span dir="ltr">
<<a href="mailto:ahmed@coraid.com" target="_blank">ahmed@coraid.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Hello,</div><div><br></div><div>I followed the steps in the "OpenStack Install Deploy for Ubuntu" manual to install Keystone. However, when I issue the commands in section "Verifying the Identity Service Installation" (
<a href="http://docs.openstack.org/trunk/openstack-compute/install/apt/content/verifying-identity-install.html" target="_blank">
http://docs.openstack.org/trunk/openstack-compute/install/apt/content/verifying-identity-install.html</a> ), I am getting the following error:</div><div><br></div><div><div># keystone --os-username=admin --os-password=admin --os-auth-url=<a href="http://10.176.20.158:35357/v2.0" target="_blank">http://10.176.20.158:35357/v2.0</a> token-get</div><div>'Client' object has no attribute 'service_catalog'</div></div><div><br></div><div>I don't see any additional info in keystone.log. Can someone please help me.</div><div><br></div><div>Thank you,</div><div>Ahmed.</div><div><br></div></div><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br><br></blockquote></div><br></div></div></div></blockquote></div></div></span></div></blockquote></div><br></div></div></div></blockquote></span></div></div></div></div></span></div></blockquote></div><br></div></div></blockquote></span></body></html>