<div dir="ltr">Hav you tried checking the credentials that glance uses for validating tokens with keystone?<div><br></div><div>They are defined in glance's conf files in the section:</div><div><br></div><div><div>[keystone_authtoken]</div>
<div>signing_dir = /var/cache/glance/api</div><div>auth_uri = <a href="http://127.0.0.1:5000/">http://127.0.0.1:5000/</a></div><div>auth_host = 127.0.0.1</div><div>auth_port = 35357</div><div>auth_protocol = http</div><div>
admin_tenant_name = service</div><div>admin_user = glance</div><div>admin_password = password</div></div><div><br></div><div>Salvatore</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On 18 July 2013 22:16, Matt Davis <span dir="ltr"><<a href="mailto:mattd5574@gmail.com" target="_blank">mattd5574@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>Hello all,<br><br></div>I'm working on a deployment script to install and configure my OpenStack services and I'm getting a strange result with glance. It's surely a bug with my script messing up a config file line, but I can't interpret the glance and keystone logs to track the issue down. Here's the use case:<br>
<br></div>1) Install keystone following the directions in the Grizzly installation guide for Ubuntu 12.04.<br></div>2) Install glance following the directions in the Grizzly installation guide for Ubuntu 12.04.<br></div>
<div>3) Run glance image-list to see if I can get an empty list. <br>
<br></div><div>My result:<br><br>=====<br>glance --os-username=admin --os-password=secrete --os-tenant-name demo --os-auth-url=<a href="http://localhost:5000/v2.0" target="_blank">http://localhost:5000/v2.0</a> image-list<br>
<br>Request returned failure status.<br>
Invalid OpenStack Identity credentials.<br>=====<br><br></div><div>The glance API log is as follows:<br><br>=====<br>2013-07-18 11:18:24.301 6306 DEBUG glance.api.middleware.version_negotiation [-] Determining version of request: GET //v1/images/detail Accept: process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:46<br>
2013-07-18 11:18:24.302 6306 DEBUG glance.api.middleware.version_negotiation [-] Using url versioning process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:59<br>2013-07-18 11:18:24.302 6306 DEBUG glance.api.middleware.version_negotiation [-] Matched version: v1 process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:71<br>
2013-07-18 11:18:24.302 6306 DEBUG glance.api.middleware.version_negotiation [-] new uri /v1/images/detail process_request /usr/lib/python2.7/dist-packages/glance/api/middleware/version_negotiation.py:72<br>=====<br><br>
</div>
<div>No entries are added to the glance registry log. If I tweak the password to make the credentials invalid, I get this:<br><br>=====<br>glance --os-username=admin --os-password=wrong_pw --os-tenant-name demo --os-auth-url=<a href="http://localhost:5000/v2.0" target="_blank">http://localhost:5000/v2.0</a> image-list<br>
Unable to communicate with identity service: {"error": {"message": "Invalid user / password", "code": 401, "title": "Not Authorized"}}. (HTTP 401)<br>=====<br><br>
</div><div>
So keystone is definitely looking up my credentials and responding differently when they match.<br></div><br></div>Any ideas as to where should I be looking for the issue?<br>
<br>Thanks for your time!<span class="HOEnZb"><font color="#888888"><br><br></font></span></div><span class="HOEnZb"><font color="#888888">-Matt<br></font></span></div>
<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div>