<div dir="ltr">It looks like cinderclient is authenticating successfully with keystone, and something unexpected is happening at the cinder endpoint.<div><br></div><div style>I'd suggest trying to replay cinderclient's request using something like curl to perhaps provide more insight into what's actually going on.</div>
<div style><br></div><div style># curl <a href="http://10.2.232.6:8776/v1/c625d5b2b9e24f72acb2d298682ab002/volumes/detail">http://10.2.232.6:8776/v1/c625d5b2b9e24f72acb2d298682ab002/volumes/detail</a> -H 'x-auth-token:515e478eca244282a1617e43a8881c0b' --verbose<br>
</div><div style><br></div><div style>You may need a fresh x-auth-token, but the one above is from your copy/paste and may still be valid (if not, use $ keystone token-get)</div></div><div class="gmail_extra"><br clear="all">
<div><div><br></div>-Dolph</div>
<br><br><div class="gmail_quote">On Wed, May 8, 2013 at 5:52 PM, Erick Turnquist <span dir="ltr"><<a href="mailto:jhujhiti@adjectivism.org" target="_blank">jhujhiti@adjectivism.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5">List,<br>
<br>
I'm a new OpenStack user who has become exceptionally frustrated trying<br>
to get Cinder running. I initially installed nova-volume, which appeared<br>
to work, and then followed the instructions on<br>
<a href="https://wiki.openstack.org/wiki/MigrateToCinder" target="_blank">https://wiki.openstack.org/wiki/MigrateToCinder</a> to migrate. Here is<br>
where I am stuck: seemingly every call I make against Cinder's API<br>
results in an HTTP 400. Here's an example call:<br>
<br>
# cinder --debug list<br>
connect: (192.168.128.6, 5000) ************<br>
send: 'POST /v2.0/tokens HTTP/1.1\r\nHost:<br>
<a href="http://192.168.128.6:5000" target="_blank">192.168.128.6:5000</a>\r\nContent-Length: 100\r\ncontent-type:<br>
application/json\r\naccept-encoding: gzip, deflate\r\naccept:<br>
application/json\r\nuser-agent: python-cinderclient\r\n\r\n'<br>
send: '{"auth": {"tenantName": "admin", "passwordCredentials":<br>
{"username": "admin", "password": "admin"}}}'<br>
reply: 'HTTP/1.1 200 OK\r\n'<br>
header: Vary: X-Auth-Token<br>
header: Content-Type: application/json<br>
header: Content-Length: 2687<br>
header: Date: Wed, 08 May 2013 22:42:27 GMT<br>
connect: (10.2.232.6, 8776) ************<br>
send: u'GET /v1/c625d5b2b9e24f72acb2d298682ab002/volumes/detail<br>
HTTP/1.1\r\nHost: <a href="http://10.2.232.6:8776" target="_blank">10.2.232.6:8776</a>\r\nx-auth-project-id:<br>
admin\r\nx-auth-token:<br>
515e478eca244282a1617e43a8881c0b\r\naccept-encoding: gzip,<br>
deflate\r\naccept: application/json\r\nuser-agent:<br>
python-cinderclient\r\n\r\n'<br>
reply: 'HTTP/1.1 400 Bad Request\r\n'<br>
header: Content-Length: 65<br>
header: Content-Type: application/json; charset=UTF-8<br>
header: X-Compute-Request-Id: req-7e360dc5-8f54-477f-833c-e0ab0d20aef6<br>
header: Date: Wed, 08 May 2013 22:42:27 GMT<br>
DEBUG (shell:473) Malformed request url (HTTP 400) (Request-ID:<br>
req-7e360dc5-8f54-477f-833c-e0ab0d20aef6)<br>
Traceback (most recent call last):<br>
File "/usr/lib/python2.6/site-packages/cinderclient/shell.py", line<br>
470, in main<br>
OpenStackCinderShell().main(sys.argv[1:])<br>
File "/usr/lib/python2.6/site-packages/cinderclient/shell.py", line<br>
421, in main<br>
args.func(self.cs, args)<br>
File "/usr/lib/python2.6/site-packages/cinderclient/v1/shell.py", line<br>
139, in do_list<br>
volumes = cs.volumes.list(search_opts=search_opts)<br>
File "/usr/lib/python2.6/site-packages/cinderclient/v1/volumes.py",<br>
line 171, in list<br>
"volumes")<br>
File "/usr/lib/python2.6/site-packages/cinderclient/base.py", line 63,<br>
in _list<br>
resp, body = self.api.client.get(url)<br>
File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line<br>
138, in get<br>
return self._cs_request(url, 'GET', **kwargs)<br>
File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line<br>
126, in _cs_request<br>
**kwargs)<br>
File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line<br>
109, in request<br>
raise exceptions.from_response(resp, body)<br>
BadRequest: Malformed request url (HTTP 400) (Request-ID:<br>
req-7e360dc5-8f54-477f-833c-e0ab0d20aef6)<br>
ERROR: Malformed request url (HTTP 400) (Request-ID:<br>
req-7e360dc5-8f54-477f-833c-e0ab0d20aef6)<br>
<br>
Nothing at all shows up in the Cinder API logs when I make this call,<br>
even with the --debug option to cinder-api. After many hours Googling<br>
the problem, it would seem that the it's either a malformed endpoint URL<br>
or missing auth_strategy, but neither of these are the case:<br>
<br>
# keystone endpoint-list<br>
+----------------------------------+-----------+----------------------------------------------+-------------------------------------------------+--------------------------------------------+----------------------------------+<br>
| id | region |<br>
publicurl | internalurl<br>
| adminurl |<br>
service_id |<br>
+----------------------------------+-----------+----------------------------------------------+-------------------------------------------------+--------------------------------------------+----------------------------------+<br>
| 6c2d093802744c0398bbd62dc5fbc070 | RegionOne |<br>
<a href="http://10.2.232.6:8773/services/Cloud" target="_blank">http://10.2.232.6:8773/services/Cloud</a> |<br>
<a href="http://192.168.128.6:8773/services/Cloud" target="_blank">http://192.168.128.6:8773/services/Cloud</a> |<br>
<a href="http://192.168.128.6:8773/services/Admin" target="_blank">http://192.168.128.6:8773/services/Admin</a> |<br>
d4ab7baaaab8490385bfb5457311b88c |<br>
| 8900b9d947d24ec280b67abb8c67b4d1 | RegionOne |<br>
<a href="http://10.2.232.6:8774/v2/%(tenant_id)s" target="_blank">http://10.2.232.6:8774/v2/%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8774/v2/%(tenant_id)s" target="_blank">http://192.168.128.6:8774/v2/%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8774/v2/%(tenant_id)s" target="_blank">http://192.168.128.6:8774/v2/%(tenant_id)s</a> |<br>
bb2a06fefa224e5c898eaeed41295c71 |<br>
| 8a7ae87b296f45259060485e37de74f9 | RegionOne |<br>
<a href="http://10.2.232.6:8776/v1/%(tenant_id)s" target="_blank">http://10.2.232.6:8776/v1/%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8776/v1/%(tenant_id)s" target="_blank">http://192.168.128.6:8776/v1/%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8776/v1/%(tenant_id)s" target="_blank">http://192.168.128.6:8776/v1/%(tenant_id)s</a> |<br>
f6e7b002545449cb9270a39219f3bced |<br>
| 93b4c45c1c904b4c8d590e6a68d934db | RegionOne |<br>
<a href="http://10.2.232.6:8080/v1/AUTH_%(tenant_id)s" target="_blank">http://10.2.232.6:8080/v1/AUTH_%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8080/v1/AUTH_%(tenant_id)s" target="_blank">http://192.168.128.6:8080/v1/AUTH_%(tenant_id)s</a> |<br>
<a href="http://192.168.128.6:8080/" target="_blank">http://192.168.128.6:8080/</a> | 9f35f633bed8403d82f0b5d7d3a34f64 |<br>
| ac260159c97f4bd8a832cdfe13635f71 | RegionOne |<br>
<a href="http://10.2.232.6:8080" target="_blank">http://10.2.232.6:8080</a> | <a href="http://192.168.128.6:8080" target="_blank">http://192.168.128.6:8080</a><br>
| <a href="http://192.168.128.6:8080" target="_blank">http://192.168.128.6:8080</a> |<br>
7372bc8175c048abb1195708e335725b |<br>
| e561e10200054fdb96d93002f99bf6cc | RegionOne |<br>
<a href="http://10.2.232.6:9292" target="_blank">http://10.2.232.6:9292</a> | <a href="http://192.168.128.6:9292" target="_blank">http://192.168.128.6:9292</a><br>
| <a href="http://192.168.128.6:9292" target="_blank">http://192.168.128.6:9292</a> |<br>
511256bf55a6418d9962f7143f64dc58 |<br>
| e7c0e52fa8954766ac9c0f35088133cc | RegionOne |<br>
<a href="http://10.2.232.6:5000/v2.0" target="_blank">http://10.2.232.6:5000/v2.0</a> |<br>
<a href="http://192.168.128.6:5000/v2.0" target="_blank">http://192.168.128.6:5000/v2.0</a> |<br>
<a href="http://192.168.128.6:35357/v2.0" target="_blank">http://192.168.128.6:35357/v2.0</a> | 8d0b48ec73e14d8e96655030b1202c47 |<br>
+----------------------------------+-----------+----------------------------------------------+-------------------------------------------------+--------------------------------------------+----------------------------------+<br>
# keystone service-list<br>
+----------------------------------+----------+--------------+--------------------------------+<br>
| id | name | type |<br>
description |<br>
+----------------------------------+----------+--------------+--------------------------------+<br>
| 511256bf55a6418d9962f7143f64dc58 | glance | image |<br>
Openstack Image Service |<br>
| 7372bc8175c048abb1195708e335725b | swift_s3 | s3 |<br>
Openstack S3 Service |<br>
| 8d0b48ec73e14d8e96655030b1202c47 | keystone | identity |<br>
OpenStack Identity Service |<br>
| 9f35f633bed8403d82f0b5d7d3a34f64 | swift | object-store | Openstack<br>
Object-Store Service |<br>
| bb2a06fefa224e5c898eaeed41295c71 | nova | compute |<br>
Openstack Compute Service |<br>
| d4ab7baaaab8490385bfb5457311b88c | nova_ec2 | ec2 |<br>
EC2 Service |<br>
| f6e7b002545449cb9270a39219f3bced | volume | volume |<br>
Volume Service |<br>
+----------------------------------+----------+--------------+--------------------------------+<br>
# grep auth_strategy /etc/cinder/cinder.conf<br>
auth_strategy = keystone<br>
<br>
What else should I be looking at here?<br>
<br>
Thanks<br>
<br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
</div></div></blockquote></div><br></div>