<div dir="ltr">It works!!!<div>I didn't read the comments above this parameter carefully.</div><div>Thank you very much, Neil.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/8/22 Neil Tong <span dir="ltr"><<a href="mailto:Neil.Tong@evault.com" target="_blank">Neil.Tong@evault.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Try changing the following line<br>
<br>
Original: swift_store_auth_address = <a href="http://192.168.0.1:5000/v2.0/" target="_blank">192.168.0.1:5000/v2.0/</a><br>
New: swift_store_auth_address = <a href="http://192.168.0.1:5000/v2.0/" target="_blank">http://192.168.0.1:5000/v2.0/</a><br>
<br>
If you look at the comments preceding that line it looks like it no method is defined it defaults to https.<br>
<div class="im"><br>
Neil<br>
________________________________________<br>
From: Piotr Kopec [<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a>]<br>
</div>Sent: Thursday, August 22, 2013 7:39 AM<br>
<div class="im">To: Neil Tong<br>
Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Subject: Re: [Openstack] Glance API shows authentication errno 1 during uploading image to swift's container<br>
<br>
</div><div><div class="h5">Thanks for response.<br>
<br>
[root@openstack182 swift]# cat /etc/glance/glance-api.conf<br>
[DEFAULT]<br>
# Show more verbose log output (sets INFO log level output)<br>
verbose = True<br>
<br>
# Show debugging output in logs (sets DEBUG log level output)<br>
debug = False<br>
<br>
# Which backend scheme should Glance use by default is not specified<br>
# in a request to add a new image to Glance? Known schemes are determined<br>
# by the known_stores option below.<br>
# Default: 'file'<br>
default_store = swift<br>
<br>
# List of which store classes and store class locations are<br>
# currently known to glance at startup.<br>
#known_stores = glance.store.filesystem.Store,<br>
# glance.store.http.Store,<br>
# glance.store.rbd.Store,<br>
# glance.store.s3.Store,<br>
# glance.store.swift.Store,<br>
<br>
# Maximum image size (in bytes) that may be uploaded through the<br>
# Glance API server. Defaults to 1 TB.<br>
# WARNING: this value should only be increased after careful consideration<br>
# and must be set to a value under 8 EB (9223372036854775808).<br>
#image_size_cap = 1099511627776<br>
<br>
# Address to bind the API server<br>
bind_host = 0.0.0.0<br>
<br>
# Port the bind the API server to<br>
bind_port = 9292<br>
<br>
# Log to this file. Make sure you do not set the same log<br>
# file for both the API and registry servers!<br>
log_file = /var/log/glance/api.log<br>
<br>
# Backlog requests when creating socket<br>
backlog = 4096<br>
<br>
# TCP_KEEPIDLE value in seconds when creating socket.<br>
# Not supported on OS X.<br>
#tcp_keepidle = 600<br>
<br>
# SQLAlchemy connection string for the reference implementation<br>
# registry server. Any valid SQLAlchemy connection string is fine.<br>
# See: <a href="http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine" target="_blank">http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine</a><br>
</div></div>sql_connection = mysql://<a href="http://glance:openstack@192.168.0.1/glance" target="_blank">glance:openstack@192.168.0.1/glance</a><<a href="http://192.168.0.1/glance" target="_blank">http://192.168.0.1/glance</a>><br>
<div><div class="h5"><br>
# Period in seconds after which SQLAlchemy should reestablish its connection<br>
# to the database.<br>
#<br>
# MySQL uses a default `wait_timeout` of 8 hours, after which it will drop<br>
# idle connections. This can result in 'MySQL Gone Away' exceptions. If you<br>
# notice this, you can lower this value to ensure that SQLAlchemy reconnects<br>
# before MySQL can drop the connection.<br>
sql_idle_timeout = 3600<br>
<br>
# Number of Glance API worker processes to start.<br>
# On machines with more than one CPU increasing this value<br>
# may improve performance (especially if using SSL with<br>
# compression turned on). It is typically recommended to set<br>
# this value to the number of CPUs present on your machine.<br>
workers = 1<br>
<br>
# Role used to identify an authenticated user as administrator<br>
#admin_role = admin<br>
<br>
# Allow unauthenticated users to access the API with read-only<br>
# privileges. This only applies when using ContextMiddleware.<br>
#allow_anonymous_access = False<br>
<br>
# Allow access to version 1 of glance api<br>
#enable_v1_api = True<br>
<br>
# Allow access to version 2 of glance api<br>
#enable_v2_api = True<br>
<br>
# Return the URL that references where the data is stored on<br>
# the backend storage system. For example, if using the<br>
# file system store a URL of 'file:///path/to/image' will<br>
# be returned to the user in the 'direct_url' meta-data field.<br>
# The default value is false.<br>
#show_image_direct_url = False<br>
<br>
# ================= Syslog Options ============================<br>
<br>
# Send logs to syslog (/dev/log) instead of to file specified<br>
# by `log_file`<br>
use_syslog = False<br>
<br>
# Facility to use. If unset defaults to LOG_USER.<br>
#syslog_log_facility = LOG_LOCAL0<br>
<br>
# ================= SSL Options ===============================<br>
<br>
# Certificate file to use when starting API server securely<br>
#cert_file = /path/to/certfile<br>
<br>
# Private key file to use when starting API server securely<br>
#key_file = /path/to/keyfile<br>
<br>
# CA certificate file to use to verify connecting clients<br>
#ca_file = /path/to/cafile<br>
<br>
# ================= Security Options ==========================<br>
<br>
# AES key for encrypting store 'location' metadata, including<br>
# -- if used -- Swift or S3 credentials<br>
# Should be set to a random string of length 16, 24 or 32 bytes<br>
#metadata_encryption_key = <16, 24 or 32 char registry metadata key><br>
<br>
# ============ Registry Options ===============================<br>
<br>
# Address to find the registry server<br>
registry_host = 192.168.0.1<br>
<br>
# Port the registry server is listening on<br>
registry_port = 9191<br>
<br>
# What protocol to use when connecting to the registry server?<br>
# Set to https for secure HTTP communication<br>
registry_client_protocol = http<br>
<br>
# The path to the key file to use in SSL connections to the<br>
# registry server, if any. Alternately, you may set the<br>
# GLANCE_CLIENT_KEY_FILE environ variable to a filepath of the key file<br>
#registry_client_key_file = /path/to/key/file<br>
<br>
# The path to the cert file to use in SSL connections to the<br>
# registry server, if any. Alternately, you may set the<br>
# GLANCE_CLIENT_CERT_FILE environ variable to a filepath of the cert file<br>
#registry_client_cert_file = /path/to/cert/file<br>
<br>
# The path to the certifying authority cert file to use in SSL connections<br>
# to the registry server, if any. Alternately, you may set the<br>
# GLANCE_CLIENT_CA_FILE environ variable to a filepath of the CA cert file<br>
#registry_client_ca_file = /path/to/ca/file<br>
<br>
# When using SSL in connections to the registry server, do not require<br>
# validation via a certifying authority. This is the registry's equivalent of<br>
# specifying --insecure on the command line using glanceclient for the API<br>
# Default: False<br>
#registry_client_insecure = False<br>
<br>
# The period of time, in seconds, that the API server will wait for a registry<br>
# request to complete. A value of '0' implies no timeout.<br>
# Default: 600<br>
#registry_client_timeout = 600<br>
<br>
# Whether to automatically create the database tables.<br>
# Default: False<br>
#db_auto_create = False<br>
<br>
# ============ Notification System Options =====================<br>
<br>
# Notifications can be sent when images are create, updated or deleted.<br>
# There are three methods of sending notifications, logging (via the<br>
# log_file directive), rabbit (via a rabbitmq queue), qpid (via a Qpid<br>
# message queue), or noop (no notifications sent, the default)<br>
notifier_strategy = noop<br>
<br>
# Configuration options if sending notifications via rabbitmq (these are<br>
# the defaults)<br>
rabbit_host = localhost<br>
rabbit_port = 5672<br>
rabbit_use_ssl = false<br>
rabbit_userid = guest<br>
rabbit_password = guest<br>
rabbit_virtual_host = /<br>
rabbit_notification_exchange = glance<br>
rabbit_notification_topic = notifications<br>
rabbit_durable_queues = False<br>
<br>
# Configuration options if sending notifications via Qpid (these are<br>
# the defaults)<br>
qpid_notification_exchange = glance<br>
qpid_notification_topic = notifications<br>
qpid_host = 192.168.0.1<br>
qpid_port = 5672<br>
qpid_username =<br>
qpid_password =<br>
qpid_sasl_mechanisms =<br>
qpid_reconnect_timeout = 0<br>
qpid_reconnect_limit = 0<br>
qpid_reconnect_interval_min = 0<br>
qpid_reconnect_interval_max = 0<br>
qpid_reconnect_interval = 0<br>
qpid_heartbeat = 5<br>
# Set to 'ssl' to enable SSL<br>
qpid_protocol = tcp<br>
qpid_tcp_nodelay = True<br>
<br>
# ============ Filesystem Store Options ========================<br>
<br>
# Directory that the Filesystem backend store<br>
# writes image data to<br>
filesystem_store_datadir = /var/lib/glance/images/<br>
<br>
# ============ Swift Store Options =============================<br>
<br>
# Version of the authentication service to use<br>
# Valid versions are '2' for keystone and '1' for swauth and rackspace<br>
swift_store_auth_version = 2<br>
<br>
# Address where the Swift authentication service lives<br>
# Valid schemes are 'http://' and 'https://'<br>
# If no scheme specified, default to 'https://'<br>
</div></div># For swauth, use something like '<a href="http://127.0.0.1:8080/v1.0/" target="_blank">127.0.0.1:8080/v1.0/</a><<a href="http://127.0.0.1:8080/v1.0/" target="_blank">http://127.0.0.1:8080/v1.0/</a>>'<br>
<div><div class="h5">swift_store_auth_address = <a href="http://192.168.0.1:5000/v2.0/" target="_blank">192.168.0.1:5000/v2.0/</a><br>
<br>
# User to authenticate against the Swift authentication service<br>
# If you use Swift authentication service, set it to 'account':'user'<br>
# where 'account' is a Swift storage account and 'user'<br>
# is a user in that account<br>
swift_store_user = service:swift<br>
<br>
# Auth key for the user authenticating against the<br>
# Swift authentication service<br>
swift_store_key = openstack<br>
<br>
# Container within the account that the account should use<br>
# for storing images in Swift<br>
swift_store_container = glance<br>
<br>
# Do we create the container if it does not exist?<br>
swift_store_create_container_on_put = True<br>
<br>
# What size, in MB, should Glance start chunking image files<br>
# and do a large object manifest in Swift? By default, this is<br>
# the maximum object size in Swift, which is 5GB<br>
swift_store_large_object_size = 5120<br>
<br>
# When doing a large object manifest, what size, in MB, should<br>
# Glance write chunks to Swift? This amount of data is written<br>
# to a temporary disk buffer during the process of chunking<br>
# the image file, and the default is 200MB<br>
swift_store_large_object_chunk_size = 200<br>
<br>
# Whether to use ServiceNET to communicate with the Swift storage servers.<br>
# (If you aren't RACKSPACE, leave this False!)<br>
#<br>
# To use ServiceNET for authentication, prefix hostname of<br>
# `swift_store_auth_address` with 'snet-'.<br>
# Ex. <a href="https://example.com/v1.0/" target="_blank">https://example.com/v1.0/</a> -> <a href="https://snet-example.com/v1.0/" target="_blank">https://snet-example.com/v1.0/</a><br>
swift_enable_snet = False<br>
<br>
# If set to True enables multi-tenant storage mode which causes Glance images<br>
# to be stored in tenant specific Swift accounts.<br>
#swift_store_multi_tenant = False<br>
<br>
# A list of swift ACL strings that will be applied as both read and<br>
# write ACLs to the containers created by Glance in multi-tenant<br>
# mode. This grants the specified tenants/users read and write access<br>
# to all newly created image objects. The standard swift ACL string<br>
# formats are allowed, including:<br>
# <tenant_id>:<username><br>
# <tenant_name>:<username><br>
# *:<username><br>
# Multiple ACLs can be combined using a comma separated list, for<br>
# example: swift_store_admin_tenants = service:glance,*:admin<br>
#swift_store_admin_tenants =<br>
<br>
# The region of the swift endpoint to be used for single tenant. This setting<br>
# is only necessary if the tenant has multiple swift endpoints.<br>
#swift_store_region =<br>
<br>
# ============ S3 Store Options =============================<br>
<br>
# Address where the S3 authentication service lives<br>
# Valid schemes are 'http://' and 'https://'<br>
# If no scheme specified, default to 'http://'<br>
s3_store_host = <a href="http://127.0.0.1:8080/v1.0/" target="_blank">127.0.0.1:8080/v1.0/</a><br>
<br>
# User to authenticate against the S3 authentication service<br>
s3_store_access_key = <20-char AWS access key><br>
<br>
# Auth key for the user authenticating against the<br>
# S3 authentication service<br>
s3_store_secret_key = <40-char AWS secret key><br>
<br>
# Container within the account that the account should use<br>
# for storing images in S3. Note that S3 has a flat namespace,<br>
# so you need a unique bucket name for your glance images. An<br>
# easy way to do this is append your AWS access key to "glance".<br>
# S3 buckets in AWS *must* be lowercased, so remember to lowercase<br>
# your AWS access key if you use it in your bucket name below!<br>
s3_store_bucket = <lowercased 20-char aws access key>glance<br>
<br>
# Do we create the bucket if it does not exist?<br>
s3_store_create_bucket_on_put = False<br>
<br>
# When sending images to S3, the data will first be written to a<br>
# temporary buffer on disk. By default the platform's temporary directory<br>
# will be used. If required, an alternative directory can be specified here.<br>
#s3_store_object_buffer_dir = /path/to/dir<br>
<br>
# When forming a bucket url, boto will either set the bucket name as the<br>
# subdomain or as the first token of the path. Amazon's S3 service will<br>
# accept it as the subdomain, but Swift's S3 middleware requires it be<br>
# in the path. Set this to 'path' or 'subdomain' - defaults to 'subdomain'.<br>
#s3_store_bucket_url_format = subdomain<br>
<br>
# ============ RBD Store Options =============================<br>
<br>
# Ceph configuration file path<br>
# If using cephx authentication, this file should<br>
# include a reference to the right keyring<br>
# in a client.<USER> section<br>
rbd_store_ceph_conf = /etc/ceph/ceph.conf<br>
<br>
# RADOS user to authenticate as (only applicable if using cephx)<br>
rbd_store_user = glance<br>
<br>
# RADOS pool in which images are stored<br>
rbd_store_pool = images<br>
<br>
# Images will be chunked into objects of this size (in megabytes).<br>
# For best performance, this should be a power of two<br>
rbd_store_chunk_size = 8<br>
<br>
# ============ Delayed Delete Options =============================<br>
<br>
# Turn on/off delayed delete<br>
delayed_delete = False<br>
<br>
# Delayed delete time in seconds<br>
scrub_time = 43200<br>
<br>
# Directory that the scrubber will use to remind itself of what to delete<br>
# Make sure this is also set in glance-scrubber.conf<br>
scrubber_datadir = /var/lib/glance/scrubber<br>
<br>
# =============== Image Cache Options =============================<br>
<br>
# Base directory that the Image Cache uses<br>
image_cache_dir = /var/lib/glance/image-cache/<br>
<br>
[keystone_authtoken]<br>
auth_host = 192.168.0.1<br>
auth_port = 35357<br>
auth_protocol = http<br>
admin_tenant_name = service<br>
admin_user = glance<br>
admin_password = openstack<br>
<br>
[paste_deploy]<br>
flavor = keystone<br>
# Name of the paste configuration file that defines the available pipelines<br>
config_file = /etc/glance/glance-api-paste.ini<br>
<br>
# Partial name of a pipeline in your paste configuration file with the<br>
# service name removed. For example, if your paste section name is<br>
# [pipeline:glance-api-keystone], you would configure the flavor below<br>
# as 'keystone'.<br>
#flavor=<br>
<br>
[root@openstack182 swift]# cat /etc/glance/glance-registry.conf<br>
[DEFAULT]<br>
# Show more verbose log output (sets INFO log level output)<br>
verbose = True<br>
<br>
# Show debugging output in logs (sets DEBUG log level output)<br>
debug = False<br>
<br>
# Address to bind the registry server<br>
bind_host = 0.0.0.0<br>
<br>
# Port the bind the registry server to<br>
bind_port = 9191<br>
<br>
# Log to this file. Make sure you do not set the same log<br>
# file for both the API and registry servers!<br>
log_file = /var/log/glance/registry.log<br>
<br>
# Backlog requests when creating socket<br>
backlog = 4096<br>
<br>
# TCP_KEEPIDLE value in seconds when creating socket.<br>
# Not supported on OS X.<br>
#tcp_keepidle = 600<br>
<br>
# SQLAlchemy connection string for the reference implementation<br>
# registry server. Any valid SQLAlchemy connection string is fine.<br>
# See: <a href="http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine" target="_blank">http://www.sqlalchemy.org/docs/05/reference/sqlalchemy/connections.html#sqlalchemy.create_engine</a><br>
</div></div>sql_connection = mysql://<a href="http://glance:openstack@192.168.0.1/glance" target="_blank">glance:openstack@192.168.0.1/glance</a><<a href="http://192.168.0.1/glance" target="_blank">http://192.168.0.1/glance</a>><br>
<div><div class="h5"><br>
# Period in seconds after which SQLAlchemy should reestablish its connection<br>
# to the database.<br>
#<br>
# MySQL uses a default `wait_timeout` of 8 hours, after which it will drop<br>
# idle connections. This can result in 'MySQL Gone Away' exceptions. If you<br>
# notice this, you can lower this value to ensure that SQLAlchemy reconnects<br>
# before MySQL can drop the connection.<br>
sql_idle_timeout = 3600<br>
<br>
# Limit the api to return `param_limit_max` items in a call to a container. If<br>
# a larger `limit` query param is provided, it will be reduced to this value.<br>
api_limit_max = 1000<br>
<br>
# If a `limit` query param is not provided in an api request, it will<br>
# default to `limit_param_default`<br>
limit_param_default = 25<br>
<br>
# Role used to identify an authenticated user as administrator<br>
#admin_role = admin<br>
<br>
# Whether to automatically create the database tables.<br>
# Default: False<br>
#db_auto_create = False<br>
<br>
# ================= Syslog Options ============================<br>
<br>
# Send logs to syslog (/dev/log) instead of to file specified<br>
# by `log_file`<br>
use_syslog = False<br>
<br>
# Facility to use. If unset defaults to LOG_USER.<br>
#syslog_log_facility = LOG_LOCAL1<br>
<br>
# ================= SSL Options ===============================<br>
<br>
# Certificate file to use when starting registry server securely<br>
#cert_file = /path/to/certfile<br>
<br>
# Private key file to use when starting registry server securely<br>
#key_file = /path/to/keyfile<br>
<br>
# CA certificate file to use to verify connecting clients<br>
#ca_file = /path/to/cafile<br>
<br>
[keystone_authtoken]<br>
auth_host = 192.168.0.1<br>
auth_port = 35357<br>
auth_protocol = http<br>
admin_tenant_name = service<br>
admin_user = glance<br>
admin_password = openstack<br>
<br>
[paste_deploy]<br>
flavor = keystone<br>
# Name of the paste configuration file that defines the available pipelines<br>
config_file = /etc/glance/glance-registry-paste.ini<br>
<br>
# Partial name of a pipeline in your paste configuration file with the<br>
# service name removed. For example, if your paste section name is<br>
# [pipeline:glance-registry-keystone], you would configure the flavor below<br>
# as 'keystone'.<br>
#flavor=<br>
<br>
Regards<br>
Piotr<br>
<br>
<br>
</div></div>2013/8/22 Neil Tong <<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a><mailto:<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a>>><br>
<div class="im">Can you give us your glance config?<br>
<br>
This is the error that makes me suspect some sort of incorrect SSL config<br>
<br>
ClientException: Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:490: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol<br>
<br>
Neil<br>
________________________________________<br>
</div>From: Piotr Kopec [<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a><mailto:<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a>>]<br>
<div class="im">Sent: Thursday, August 22, 2013 7:26 AM<br>
To: Neil Tong<br>
</div>Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><mailto:<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>
<div class="im">Subject: Re: [Openstack] Glance API shows authentication errno 1 during uploading image to swift's container<br>
<br>
No. I think all my services are using just http protocol and just password for authentication.<br>
Part of /etc/keystone/keystone.conf below:<br>
```[ssl]<br>
enable = False<br>
#certfile = /etc/keystone/ssl/certs/keystone.pem<br>
#keyfile = /etc/keystone/ssl/private/keystonekey.pem<br>
#ca_certs = /etc/keystone/ssl/certs/ca.pem<br>
#cert_required = True<br>
<br>
[signing]<br>
#token_format = PKI<br>
#certfile = /etc/keystone/ssl/certs/signing_cert.pem<br>
#keyfile = /etc/keystone/ssl/private/signing_key.pem<br>
#ca_certs = /etc/keystone/ssl/certs/ca.pem<br>
#key_size = 1024<br>
#valid_days = 3650<br>
#ca_password = None```<br>
<br>
<br>
</div>2013/8/22 Neil Tong <<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a><mailto:<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a>><mailto:<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a><mailto:<a href="mailto:Neil.Tong@evault.com">Neil.Tong@evault.com</a>>>><br>
<div class="im HOEnZb"><br>
Looks like an SSL problem, so you have Keystone setup to use SSL?<br>
<br>
</div><div class="HOEnZb"><div class="h5">Piotr Kopec <<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a><mailto:<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a>><mailto:<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a><mailto:<a href="mailto:pkopec17@gmail.com">pkopec17@gmail.com</a>>>> wrote:<br>
<br>
<br>
<br>
Hello folks,<br>
<br>
I have met problem during configuration of Swift as a backend storage service for Glance. I have configured Glance according to Red Hat Instalation Guide. Now when I am trying to upload image using glance image-create command following message occures:<br>
<br>
<br>
<br>
<br>
[root@openstack182 ~]# glance image-create --name="Cirros 0.3.1" --disk-format=qcow2 --container-format bare < /tmp/images/cirros-0.3.1-x86_64-disk.img<br>
Request returned failure status.<br>
500 Internal Server Error<br>
The server has either erred or is incapable of performing the requested operation.<br>
(HTTP 500)<br>
<br>
So the problem is with Swift server. Although Swift is able to create containers and upload files to them usingswift upload command:<br>
<br>
<br>
<br>
<br>
[root@openstack182 ~]# swift upload c4 data3.file<br>
data3.file<br>
[root@openstack182 ~]# swift list<br>
c1<br>
c2<br>
c3<br>
c4<br>
[root@openstack182 ~]# swift list c4<br>
data3.file<br>
<br>
Glance also works well if the default_store parameter is set to file.<br>
<br>
After attempting to upload image to swift's container Glance API logs shows there is some problem with authentication:<br>
<br>
<br>
<br>
<br>
[root@openstack182 ~]# glance image-create --name="Cirros 0.3.1" --disk-format=qcow2 --container-format bare < /tmp/images/cirros-0.3.1-x86_64-disk.img<br>
Request returned failure status.<br>
500 Internal Server Error<br>
The server has either erred or is incapable of performing the requested operation.<br>
(HTTP 500)<br>
[root@openstack182 ~]# date<br>
czw, 22 sie 2013, 14:39:00 CEST<br>
[root@openstack182 ~]# tail -n 50 /var/log/glance/api.log<br>
2013-08-22 14:38:49.316 ERROR glance.api.v1.images [f32b8f75-054d-4be0-a048-dd797016d043 f554f1bf0c964ab3843214c0dfabf7a6 c154fa85885b4589aeb3b76f3a8d8beb] Failed to upload image<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images Traceback (most recent call last):<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/api/v1/images.py", line 444, in _upload<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images image_meta['size'])<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/store/swift.py", line 321, in add<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images self._create_container_if_missing(location.container, connection)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/store/swift.py", line 490, in _create_container_if_missing<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images connection.head_container(container)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1070, in head_container<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images return self._retry(None, head_container, container)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1022, in _retry<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images self.url, self.token = self.get_auth()<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1010, in get_auth<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images insecure=self.insecure)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 329, in get_auth<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images insecure=insecure)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 266, in get_keystoneclient_2_0<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images raise ClientException('Authorization Failure. %s' % err)<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images ClientException: Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:490: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol<br>
2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images<br>
<br>
Some keystone command output:<br>
<br>
<br>
<br>
<br>
[root@openstack182 ~]# keystone user-list<br>
+----------------------------------+---------+---------+-------+<br>
| id | name | enabled | email |<br>
+----------------------------------+---------+---------+-------+<br>
| f554f1bf0c964ab3843214c0dfabf7a6 | admin | True | |<br>
| ce494e0d76e44f1e9a4e4bccc5d6d3b2 | cinder | True | |<br>
| efa48ad1e0cb4142a7043cdc97ff605e | ec2 | True | |<br>
| 39d7c739fc31408c97cae9112a6da056 | glance | True | |<br>
| 147bf1212187401e8a21ee18a6e174b1 | nova | True | |<br>
| ac2a95560972434a84583df494b721ba | quantum | True | |<br>
| 97b1c6a788bc476ba620152c769b20b5 | swift | True | |<br>
+----------------------------------+---------+---------+-------+<br>
[root@openstack182 ~]# keystone tenant-list<br>
+----------------------------------+---------+---------+<br>
| id | name | enabled |<br>
+----------------------------------+---------+---------+<br>
| c154fa85885b4589aeb3b76f3a8d8beb | demo | True |<br>
| ae243f7ba98441aea224d712cdd97ed0 | service | True |<br>
+----------------------------------+---------+---------+<br>
<br>
[root@openstack182 ~]# keystone service-list<br>
+----------------------------------+----------+--------------+------------------------------+<br>
| id | name | type | description |<br>
+----------------------------------+----------+--------------+------------------------------+<br>
| 8d5ec35259d2442e999a709f49e6355d | cinder | volume | Cinder Volume Service |<br>
| e93f78475fd8476895ff7a74fac8842b | ec2 | ec2 | EC2 Compatibility Layer |<br>
| 422c6b4ccb8f4765ab55c51d9fd5d11a | glance | image | Image Service |<br>
| 64dd013cbab24a48a8d3b25423d8c555 | keystone | identity | Identity Service |<br>
| c807829b23444d90a065a0597c691424 | nova | compute | Compute Service |<br>
| 97179db088674c35b31b51abf9605bc7 | quantum | network | OpenStack Networking service |<br>
| 72a8718bb35143cfaac726cc7a41e60e | swift | object-store | Object Storage Service |<br>
+----------------------------------+----------+--------------+------------------------------+<br>
<br>
Could anyone help me with this issue, please?<br>
<br>
All answers are appreciated.<br>
<br>
Regards.<br>
<br>
Piotr<br>
</div></div></blockquote></div><br></div>