<div dir="ltr"><div><div><div><div><div><div><div>Hi Karan<br><br></div>This is clear case of authorization. So keystone is not able to authorize with credential and token you are giving. Token supplied is wrong. Hence you are hitting the issue.<br>
<br></div><div>I was suspecting the tenant definition as you defined it as 'services'. I thought it is defined as 'service'(no s at the end). That is not the case now.<br></div><div><br></div>Try the following.<br>
<br></div>1. Set OS_USERNAME= cinder, OS_TENANT = services and ENDPOINT_URL now.<br></div>2. Run the keystone token-get . THis should display the current token of user<br></div>3. Run the above command --debug option.<br>
</div>4. Can you set keystone to debug as well /etc/keystone/keystone.conf --debug = True<br></div><div>5. Send me teh cinder.log and keystone.log and debug out.<br><br></div>-Dheerendra</div><div class="gmail_extra"><br>
<br><div class="gmail_quote">On Sun, Nov 24, 2013 at 8:00 PM, Karan Singh <span dir="ltr"><<a href="mailto:ksingh@csc.fi" target="_blank">ksingh@csc.fi</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-size:10pt;font-family:times new roman,new york,times,serif"><div>Hello Dheerendra</div><div><br></div><div>Thanks for your reply , please find keystone tenant and role-list output. Please suggest.</div>
<div><br></div><div><br></div><div><p style="margin:0px">[root@rdo ~]#<br>[root@rdo ~]# keystone tenant-list<br>+----------------------------------+----------+---------+<br>| id | name | enabled |<br>+----------------------------------+----------+---------+<br>
| 0dafe42cfde242ddbb67b681f59bdb00 | admin | True |<br>| f5e21418087f43f7afb2352576136f0a | alt_demo | True |<br>| 94a2c960f68d45cdb763fe5b05147206 | demo | True |<br>| af2f42d510fa405aa8d4e75c1a669ab8 | services | True |<br>
+----------------------------------+----------+---------+<br>[root@rdo ~]#<br>[root@rdo ~]# keystone role-list<br>+----------------------------------+---------------+<br>| id | name |<br>+----------------------------------+---------------+<br>
| cd5b0d2475374bb6bbf65ccc9b349145 | Member |<br>| 63ad68eee2a94cd0b477ee67bf7df36a | ResellerAdmin |<br>| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |<br>| 6042354830ef4e3b9678fe18c40a8ed7 | admin |<br>+----------------------------------+---------------+<br>
[root@rdo ~]#</p><p style="margin:0px"><br></p><p style="margin:0px"><br></p></div><div><br></div><div><span name="x"></span>Many Thanks<br>Karan Singh<br><span name="x"></span><br></div><div><br></div><hr><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal">
<b>From: </b>"Dheerendra" <<a href="mailto:dheerendra.madhusudhana@gmail.com" target="_blank">dheerendra.madhusudhana@gmail.com</a>><br><b>To: </b>"karan.singh" <<a href="mailto:karan.singh@csc.fi" target="_blank">karan.singh@csc.fi</a>><br>
<b>Cc: </b><a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br><b>Sent: </b>Sunday, 24 November, 2013 4:20:45 PM<br><b>Subject: </b>Re: [Openstack] Error with Cinder **Need Urgent help** HIGH PRIORITY<div>
<div class="h5"><br><div><br></div><div dir="ltr"><div>Can you past 'keystone tenant-list' and 'keystone role-list' ? <br><div><br></div></div>-Dheerendra<br></div><div class="gmail_extra"><br><div><br></div>
<div class="gmail_quote">On Sun, Nov 24, 2013 at 5:35 AM, Karan Singh <span dir="ltr"><<a href="mailto:karan.singh@csc.fi" target="_blank">karan.singh@csc.fi</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>Please help I am in urgent need<br><div><br></div><br>-------- Original message --------<br>From: Karan Singh <<a href="mailto:ksingh@csc.fi" target="_blank">ksingh@csc.fi</a>> <br> Date: 23/11/2013 18:24 (GMT+02:00) <br>
To: <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a> <br>Subject: Error with Cinder **Need Urgent help** HIGH PRIORITY <br> <br><div><br></div><div style="font-size:10pt;font-family:times new roman,new york,times,serif">
<div><span style="font-size:10pt">Hello Openstack Community Members.</span></div><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal"><div style="font-size:10pt;font-family:times new roman,new york,times,serif">
<div><br></div><div>I need your quick support on my issue related to Cinder. </div><div><br></div><div><br></div><div><strong>1 . Error Logs from cinder/api.log</strong></div><div><br></div><div><p style="margin:0px">2013-11-23 18:08:02.037 29478 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1<br>
2013-11-23 18:08:02.100 29478 WARNING keystoneclient.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Unauthorized'}}<br>
2013-11-23 18:08:02.101 29478 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token d675640b9346a631549c85c156159fb9<br>2013-11-23 18:08:02.102 29478 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request<br>
2013-11-23 18:08:02.362 29478 INFO urllib3.connectionpool [-] Starting new HTTP connection (1): 127.0.0.1<br>2013-11-23 18:08:02.434 29478 WARNING keystoneclient.middleware.auth_token [-] Unexpected response from keystone service: {u'error': {u'message': u'The request you have made requires authentication.', u'code': 401, u'title': u'Unauthorized'}}<br>
2013-11-23 18:08:02.435 29478 WARNING keystoneclient.middleware.auth_token [-] Authorization failed for token 03aee2508b2c4132a9c23b382c6ba284<br>2013-11-23 18:08:02.435 29478 INFO keystoneclient.middleware.auth_token [-] Invalid user token - rejecting request</p>
<p style="margin:0px"><br></p><p style="margin:0px"><br></p><p style="margin:0px"><strong>2 . Errors from cinder list command output </strong></p><p style="margin:0px">[root@rdo cinder]# cinder list</p><p style="margin:0px">
ERROR: Unauthorized (HTTP 401)<br>[root@rdo cinder]#</p></div><div><br></div><div><br></div><div><strong>3. Output from cinder/api-paste.ini</strong></div><div><br></div><div><p style="margin:0px">[filter:keystonecontext]<br>
paste.filter_factory = cinder.api.middleware.auth:CinderKeystoneContext.factory</p><p style="margin:0px">[filter:authtoken]<br>paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory<br>service_protocol = http<br>
service_host = 127.0.0.1<br>service_port = 5000<br>signing_dir = /var/lib/cinder</p><p style="margin:0px">auth_host = 127.0.0.1<br>auth_port = 35357<br>auth_protocol = http<br>admin_tenant_name = services<br>admin_user = cinder<br>
admin_password = root<br>auth_uri = <a href="http://127.0.0.1:5000/" target="_blank">http://127.0.0.1:5000/</a></p><p style="margin:0px"><br></p><p style="margin:0px"><br></p><p style="margin:0px"><strong>4. Output from cinder/cinder.conf</strong></p>
<p style="margin:0px"><br></p><p style="margin:0px">rootwrap_config=/etc/cinder/rootwrap.conf<br>sql_connection = mysql://cinder:root@localhost/cinder<br>api_paste_config = /etc/cinder/api-paste.ini</p><p style="margin:0px">
iscsi_helper=tgtadm<br>volume_name_template = volume-%s<br>volume_group = cinder-volumes<br>verbose = True<br>auth_strategy = keystone<br>#osapi_volume_listen_port=5900<br>[keystone_authtoken]<br>admin_tenant_name = services<br>
admin_user = cinder<br>admin_password = root<br>auth_host = 127.0.0.1<br>auth_port = 35357<br>auth_protocol = http<br>signing_dirname = /tmp/keystone-signing-cinder</p></div><div><br></div><div><br></div><div>5. All the components from Horizon web interface works fine except , VOLUME ( cinder component ) , as soon as i click on volume it throws errors <strong>Error: Unauthorised: Unable to retrieve volume list. Error: Unauthorised: Unable to retrieve volume types</strong></div>
<div><br></div><div>6. Keystone has cinder user</div><div><br></div><div><p style="margin:0px">[root@rdo cinder]# keystone user-list<br>+----------------------------------+------------+---------+----------------------+<br>
| id | name | enabled | email |<br>+----------------------------------+------------+---------+----------------------+<br>| 99f8019ba2694d78a680a5de46aa1afd | admin | True | <a href="mailto:test@test.com" target="_blank">test@test.com</a> |<br>
| ee6de67df5bf4498bd477e2a973f393f | alt_demo | True | |<br>| f632591a717c4f9b91c4ebfdc8eb86ef | ceilometer | True | ceilometer@localhost |<br>| be199f4da0e84abb9f0ca069f0a4b408 | cinder | True | <a href="mailto:cinder@localhost.com" target="_blank">cinder@localhost.com</a> |<br>
| 79071cdc981d4f5787a8d1abebac7eec | demo | True | |<br>| 8d8d4107a72d4cdd838f3cc8f643a0f2 | glance | True | glance@localhost |<br>| 901d979b861d45ada359252da45082f6 | neutron | True | neutron@localhost |<br>| 0e371ae93dce4ea392224354929c8257 | nova | True | nova@localhost |<br>
| 069624d0554a432bb1f57629bde6ebc8 | swift | True | swift@localhost |<br>+----------------------------------+------------+---------+----------------------+<br>[root@rdo cinder]#</p><p style="margin:0px"><br></p><p style="margin:0px">
7. I am able to connect to mysql db with user cinder and password ( root )</p><p style="margin:0px"><br></p><p style="margin:0px">[root@rdo cinder]# mysql -u cinder -p<br>Enter password:<br>Welcome to the MySQL monitor. Commands end with ; or \g.<br>
Your MySQL connection id is 1230<br>Server version: 5.1.69 Source distribution</p><p style="margin:0px">Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.</p><p style="margin:0px">Oracle is a registered trademark of Oracle Corporation and/or its<br>
affiliates. Other names may be trademarks of their respective<br>owners.</p><p style="margin:0px">Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.</p><p style="margin:0px">
mysql></p><p style="margin:0px"><br></p><p style="margin:0px">I have set up openstack using RDO , i tried all possible ways but cinder ( volumes ) are not working , except everything works well , please advise a solution ASAP , i am on a very tight deadline.</p>
<p style="margin:0px"><br></p><p style="margin:0px">Waiting for your quick responses.</p></div><div><br></div><div><span></span>Karan Singh<br>CSC - IT Center for Science Ltd.<br> P.O. Box 405, FI-02101 Espoo, FINLAND<br>
<a href="http://www.csc.fi/" target="_blank">http://www.csc.fi/</a> | +358 (0) 503 812758<span></span><br></div><div><br></div></div></div><div><br></div></div></div><br>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> <br></blockquote></div><br></div></div></div></div>
<div><br></div></div></div></blockquote></div><br></div>