<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt">Hi Dave,<br><br>Finally I found a solution for the problem that I was asking help for.<br>I opted for keystone authentication based on sql for openstack services and based on ldap for normal users. For tenants and roles I used sql with this configuration in /etc/keystone/keystone.conf.<br><br>[assignment]<br>driver = keystone.assignment.backends.sql.Assignment<br><br><div><span>I used a hybrid authentication created by Ionut Artarisi and that can be found here: https://github.com/SUSE-Cloud/keystone-hybrid-backend.</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px;
 font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>Thanks a lot,</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;"><span>Gabriel<br></span></div><div style="display: block;" class="yahoo_quoted"> <br> <br> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 10pt;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> On Thursday, February 20, 2014 10:38 AM, Staicu Gabriel <gabriel_staicu@yahoo.com> wrote:<br> </font> </div>  <div class="y_msg_container"><div id="yiv3362419693"><div><div
 style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt;"><div><span>Hi Dave,</span></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><span>Thanks a lot for you interest in helping me. I will try to answer your questions as good as I can:</span></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">I am using havana release of the openstack. I am starting
 from default keystone authentication:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">This is my /etc/keystone/keystone.conf:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">[DEFAULT]<br clear="none">log_file = keystone.log<br clear="none">log_dir =
 /var/log/keystone<br clear="none">[sql]<br clear="none">connection =
 mysql://keystoneuser:keystonepass@153.65.235.39/keystone<br clear="none">[identity]<br clear="none">driver = keystone.identity.backends.sql.Identity<br clear="none">[credential]<br clear="none">driver = keystone.credential.backends.sql.Credential<br clear="none">[trust]<br clear="none">driver = keystone.trust.backends.sql.Trust<br clear="none">[os_inherit]<br clear="none">[catalog]<br clear="none">driver = keystone.catalog.backends.sql.Catalog<br clear="none">[endpoint_filter]<br clear="none">[token]<br clear="none">driver = keystone.token.backends.sql.Token<br clear="none">[cache]<br clear="none">[policy]<br clear="none">driver = keystone.policy.backends.sql.Policy<br clear="none">[ec2]<br clear="none">driver = keystone.contrib.ec2.backends.kvs.Ec2<br clear="none">[assignment]<br clear="none">[oauth1]<br clear="none">[ssl]<br clear="none">[signing]<br clear="none">[ldap]<br clear="none">[auth]<br clear="none"></div><div style="color:rgb(0, 0,
 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">Then I am doing:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">service keystone start</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">source openstackrc</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande,
 sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">The content of openstackrc:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">export OS_TENANT_NAME=admin<br clear="none">export OS_USERNAME=admin<br clear="none">export OS_PASSWORD=admin<br clear="none">export SERVICE_TOKEN=ADMIN<br clear="none">export OS_AUTH_URL="http://10.65.235.39:5000/v2.0/"<br clear="none">export SERVICE_ENDPOINT="http://10.65.235.39:35357/v2.0"<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande,
 sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">keystone user-list</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">root@ubuntu1204:~# keystone user-list<br clear="none">WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br clear="none">+----------------------------------+------------+---------+-------------------+<br clear="none">|                id                |   
 name    | enabled |       email       |<br clear="none">+----------------------------------+------------+---------+-------------------+<br clear="none">| 813a815b593f495c9a449f9c5c44625d |   admin    |   True  | admin@example.com |<br clear="none">| 7df8919856ec4072927d2523bceed5eb | ceilometer |   True  | admin@example.com |<br clear="none">| b6aae4b745484e3da6892b68a7e322f9 |  
 cinder   |   True  | admin@example.com |<br clear="none">| d08d5f5e515a4601b417a637cf690999 |    demo    |   True  |  demo@example.com |<br clear="none">| a3a5444d42b9462e8fcac9e3a10f2e60 |   glance   |   True  | admin@example.com |<br clear="none">| 1c1ab74a4a934273836f41999e2ac9fc |    heat    |   True  | admin@example.com |<br clear="none">| 823d9d20cbd8412887c3f6052eca720d |  neutron   |   True  | admin@example.com |<br clear="none">| e58d30815fac48209bf56441e1d5bb76 |    nova    |   True  | admin@example.com |<br clear="none">+----------------------------------+------------+---------+-------------------+<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue,
 Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"> keystone endpoint-list<br clear="none">WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br clear="none">+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+<br
 clear="none">|                id               
 |   region  |                 publicurl                  |                internalurl                 |                  adminurl                  |            service_id           
 |<br clear="none">+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+<br clear="none">| 05784027da8b4acb8489d0486faf9f61 |  myregion |  http://153.65.235.39:8773/services/cloud  |  http://153.65.235.39:8773/services/cloud  |  http://153.65.235.39:8773/services/admin  | 5bc96b5587aa4f12919f3a155b5713b0 |<br clear="none">| 10a762a17a58478d8285c1ca6ed8344a |  myregion | http://153.65.235.39:8004/v1/$(tenant_id)s | http://153.65.235.39:8004/v1/$(tenant_id)s | http://153.65.235.39:8004/v1/$(tenant_id)s | 3308b160d21f4dac84b866063852a47a |<br clear="none">| 23aff8a4b486423592ad877eb0eb29d2 |  myregion |       http://153.65.235.39:5000/v2.0       |      
 http://153.65.235.39:5000/v2.0       |      http://153.65.235.39:35357/v2.0       | c5196b9c3d5446bdb63ee3b8f40d67f7 |<br clear="none">| 8e0ecafcf86e42c28f6431e9cd6b330b |  myregion | http://153.65.235.39:8774/v2/$(tenant_id)s | http://153.65.235.39:8774/v2/$(tenant_id)s | http://153.65.235.39:8774/v2/$(tenant_id)s | 4d7a03c577304e3381a3d08ba74a70dc |<br clear="none">| aaa01a27723d4d4abfe65496d03e811e |  myregion | http://153.65.235.39:8776/v1/$(tenant_id)s | http://153.65.235.39:8776/v1/$(tenant_id)s | http://153.65.235.39:8776/v1/$(tenant_id)s | aed8babcd157477b827c7a2ce89a641c |<br clear="none">| aebb4602fae143ef86d62de0c0bc5ba8 | regionOne |     http://153.65.235.39/keystone/main    
 |                                            |    http://153.65.235.39/keystone/admin     | c5196b9c3d5446bdb63ee3b8f40d67f7 |<br clear="none">| c5169966464140c69fe8c244659ad932 |  myregion |         http://153.65.235.39:9696/         |         http://153.65.235.39:9696/         |         http://153.65.235.39:9696/         | a7a32598413a435687e9919c6add1647 |<br clear="none">| d5b7a1f9f7bf417295f7b1e9e34f0a26 |  myregion |       
 http://153.65.235.39:8000/v1        |        http://153.65.235.39:8000/v1        |        http://153.65.235.39:8000/v1        | 43f4318c522646c2bdd44d6e9e09edfe |<br clear="none">| ecc1cd7cbad8461281181a879286c2bf |  myregion |        http://153.65.235.39:9292/v2        |        http://153.65.235.39:9292/v2        |        http://153.65.235.39:9292/v2        | 6bd3e90b00a743cfa4a94050f87319aa |<br clear="none">| fe815ceefd0544f2abd16c484cab1b27 |  myregion |        
 http://153.65.235.39:8777         
 |         http://153.65.235.39:8777          |         http://153.65.235.39:8777          | 4aa31f280a1e40888d45119c02149a01 |<br clear="none">+----------------------------------+-----------+--------------------------------------------+--------------------------------------------+--------------------------------------------+----------------------------------+<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">keystone
 service-list</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"> keystone service-list<br clear="none">WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br clear="none">+----------------------------------+------------+----------------+----------------------------------+<br clear="none">|                id                |    name    |      type      |           description           
 |<br clear="none">+----------------------------------+------------+----------------+----------------------------------+<br clear="none">| 4aa31f280a1e40888d45119c02149a01 | ceilometer |    metering    |    openstack metering service    |<br clear="none">| aed8babcd157477b827c7a2ce89a641c |   cinder   |     volume     |     openstack volume service     |<br clear="none">| 5bc96b5587aa4f12919f3a155b5713b0 |    ec2     |      ec2       |           ec2 service            |<br clear="none">| 6bd3e90b00a743cfa4a94050f87319aa |   glance   |    
 image      |     openstack image
 service      |<br clear="none">| 3308b160d21f4dac84b866063852a47a |    heat    | orchestration  | openstack orchestration service  |<br clear="none">| 43f4318c522646c2bdd44d6e9e09edfe |  heat-cfn  | cloudformation | openstack cloudformation service |<br clear="none">| c5196b9c3d5446bdb63ee3b8f40d67f7 |  keystone  |    identity    |    openstack identity service    |<br clear="none">| a7a32598413a435687e9919c6add1647 |  neutron   |    network     |   openstack networking service   |<br clear="none">| 4d7a03c577304e3381a3d08ba74a70dc |    nova    |    compute     |    openstack compute service    
 |<br clear="none">+----------------------------------+------------+----------------+----------------------------------+<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">So this means that normal configuration works ok.</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">Now I will try to configure http authentication and the steps that I am using are the following:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue,
 Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">1) service keystone stop</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">2) create the file /etc/apache2/conf.d/wsgi-keystone.conf with the following content:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">Listen 5000<br clear="none"><VirtualHost *:5000><br clear="none">WSGIScriptAlias /keystone/main /var/www/cgi-bin/keystone/main<br clear="none"></VirtualHost></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande,
 sans-serif;background-color:transparent;font-style:normal;">Listen 35357<br clear="none"><VirtualHost
 *:35357><br clear="none">WSGIScriptAlias /keystone/admin /var/www/cgi-bin/keystone/admin<br clear="none"></VirtualHost><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">3) Both /var/www/cgi-bin/keystone/main and /var/www/cgi-bin/keystone/admin have the following content:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"># Copyright 2013 OpenStack Foundation<br clear="none">#<br clear="none">#    Licensed under the Apache
 License, Version 2.0 (the "License"); you may<br clear="none">#    not
 use this file except in compliance with the License. You may obtain<br clear="none">#    a copy of the License at<br clear="none">#<br clear="none">#         http://www.apache.org/licenses/LICENSE-2.0<br clear="none">#<br clear="none">#    Unless required by applicable law or agreed to in writing, software<br clear="none">#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT<br clear="none">#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the<br clear="none">#    License for the specific language governing permissions and limitations<br clear="none">#    under the License.<br clear="none"><br clear="none">import logging<br clear="none">import os<br clear="none"><br clear="none">from paste import deploy<br clear="none"><br clear="none">from keystone.openstack.common import
 gettextutils<br clear="none"><br clear="none"># NOTE(blk-u):<br clear="none"># gettextutils.install() must run to set _ before importing any modules that<br clear="none"># contain static translated strings.<br clear="none">gettextutils.install('keystone',
 lazy=True)<br clear="none"><br clear="none">from keystone.common import dependency<br clear="none">from keystone.common import environment<br clear="none">from keystone.common import sql<br clear="none">from keystone import config<br clear="none">from keystone.openstack.common import log<br clear="none">from keystone import service<br clear="none"><br clear="none"><br clear="none">CONF = config.CONF<br clear="none"><br clear="none">config.configure()<br clear="none">sql.initialize()<br clear="none">config.set_default_for_default_log_levels()<br clear="none"><br clear="none">CONF(project='keystone')<br clear="none">config.setup_logging()<br clear="none"><br clear="none">environment.use_stdlib()<br clear="none">name = os.path.basename(__file__)<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br
 clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">if CONF.debug:<br clear="none">   
 CONF.log_opt_values(log.getLogger(CONF.prog), logging.DEBUG)<br clear="none"><br clear="none"><br clear="none">drivers = service.load_backends()<br clear="none"><br clear="none"># NOTE(ldbragst): 'application' is required in this context by WSGI spec.<br clear="none"># The following is a reference to Python Paste Deploy documentation<br clear="none"># http://pythonpaste.org/deploy/<br clear="none">application = deploy.loadapp('config:%s' % config.find_paste_config(),<br clear="none">                            
 name=name)<br clear="none"><br clear="none">dependency.resolve_future_dependencies()<br clear="none">                                                               <br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">4) service apache2 restart</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">root@ubuntu1204:~# netstat -ntlp|grep 5000<br
 clear="none">tcp       
 0      0 0.0.0.0:5000            0.0.0.0:*               LISTEN      23078/apache2<br clear="none">root@ubuntu1204:~# netstat -ntlp|grep 35357<br clear="none">tcp        0      0 0.0.0.0:35357           0.0.0.0:*               LISTEN      23078/apache2<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue,
 Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">5) source openstackrchttp with the following content:</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">export OS_TENANT_NAME=admin<br clear="none">export OS_USERNAME=admin<br clear="none">export OS_PASSWORD=admin<br clear="none">export SERVICE_TOKEN=ADMIN<br clear="none">export OS_AUTH_URL="http://10.65.235.39:5000/keystone/main"<br clear="none">export SERVICE_ENDPOINT="http://10.65.235.39:35357/keystone/admin"<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue,
 Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">6) keystone
 user-list</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).<br clear="none">Unable to communicate with identity service: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><br clear="none"><html><head><br clear="none"><title>500 Internal Server Error</title><br clear="none"></head><body><br clear="none"><h1>Internal Server Error</h1><br clear="none"><p>The server encountered an internal error or<br clear="none">misconfiguration and was unable to complete<br clear="none">your request.</p><br clear="none"><p>Please contact the server administrator,<br clear="none"> [no address given] and inform them of the time the error
 occurred,<br clear="none">and anything you might have done that may have<br clear="none">caused the error.</p><br clear="none"><p>More information about this error
 may be available<br clear="none">in the server error log.</p><br clear="none"><hr><br clear="none"><address>Apache/2.2.22 (Ubuntu) Server at 10.65.235.39 Port 35357</address><br clear="none"></body></html><br clear="none">. (HTTP 500)<br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">What is lacking? What else should be done? If we will find a
 solution we can write a very clear document with steps to configure keystone with http
 authentication on ubuntu with openstack havana.</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">Thanks a lot,</div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;">Gabriel<br clear="none"></div><div style="color:rgb(0, 0,
 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande,
 sans-serif;background-color:transparent;font-style:normal;"><br clear="none"></div><div style="color:rgb(0, 0, 0);font-size:13.3333px;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;background-color:transparent;font-style:normal;"><br clear="none"><span></span></div><div class="yiv3362419693yqt9505231096" id="yiv3362419693yqt04541"><div class="yiv3362419693yahoo_quoted" style="display:block;"> <br clear="none"> <br clear="none"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt;"> <div dir="ltr"> <font face="Arial" size="2"> On Wednesday, February 19, 2014 6:54 PM, Dave Walker <email@daviey.com> wrote:<br clear="none"> </font> </div>  <div class="yiv3362419693y_msg_container">Hi Staicu,<br clear="none"><br clear="none">Which
 release of Openstack are you using?<br clear="none">  - The distro shouldn't really matter in this instance.<br clear="none">What Auth method are you attempting to do through Apache?<br clear="none">   - Simple Auth, Kerberos?<br clear="none">What are you using in
 your dispatcher file (wsgi / fcgi plumbing)?<br clear="none">What behaviour are you seeing?<br clear="none">  - Is REMOTE_USER environ being set?<br clear="none"><div class="yiv3362419693yqt1547162158" id="yiv3362419693yqtfd71596"><br clear="none">On 19 February 2014 16:51, Staicu Gabriel <<a rel="nofollow" shape="rect" ymailto="mailto:gabriel_staicu@yahoo.com" target="_blank" href="mailto:gabriel_staicu@yahoo.com">gabriel_staicu@yahoo.com</a>> wrote:<br clear="none">> Hi,<br clear="none">><br clear="none">> Is there someone who did the keystone to delegate authentication to apache<br clear="none">> on ubuntu/havana.<br clear="none">> I have read these documents but nothing is clear:<br clear="none">> <a rel="nofollow" shape="rect" target="_blank"
 href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/4/html/Installation_and_Configuration_Guide/Configuring_the_Identity_Service_to_Run_in_HTTPD.html">https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/4/html/Installation_and_Configuration_Guide/Configuring_the_Identity_Service_to_Run_in_HTTPD.html</a><br clear="none">> <a rel="nofollow" shape="rect" target="_blank" href="https://wiki.openstack.org/wiki/Talk:Keystone_in_HTTPD_on_RHEL6">https://wiki.openstack.org/wiki/Talk:Keystone_in_HTTPD_on_RHEL6</a><br clear="none">> <a rel="nofollow" shape="rect" target="_blank" href="http://docs.openstack.org/developer/keystone/apache-httpd.html">http://docs.openstack.org/developer/keystone/apache-httpd.html</a><br clear="none">><br clear="none">> It seams like everyone is telling half of the truth....:)<br clear="none">><br clear="none">> Is there any
 other place where I could understand how you could do it on<br clear="none">> ubuntu?<br clear="none">><br clear="none">> Thanks a lot,<br clear="none">> Gabriel</div><br clear="none">><br clear="none">> _______________________________________________<br clear="none">> Mailing list: <a rel="nofollow" shape="rect" target="_blank" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br clear="none">> Post to     : <a rel="nofollow" shape="rect" ymailto="mailto:openstack@lists.openstack.org" target="_blank" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br clear="none">> Unsubscribe : <a rel="nofollow" shape="rect" target="_blank" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><div class="yiv3362419693yqt1547162158"
 id="yiv3362419693yqtfd77514"><br clear="none">><br clear="none"></div><br clear="none"><br clear="none"></div>  </div> </div>  </div></div> </div></div></div><br><br></div>  </div> </div>  </div> </div></body></html>