<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    Yes indeed, even though that patch was for tasks we've yet to get
    to, still exactly the same error.<br>
    <br>
    Been bashing my head against this wall for days now, I've resorted
    to reading source - and begging for help here :-D<br>
    <br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 24/05/15 01:18, Matt Kassawara
      wrote:<br>
    </div>
    <blockquote
cite="mid:CABA+jQqxPkAaE=kdk8pYaQHhakS9B_XVgpObuf3=35d58a4H7g@mail.gmail.com"
      type="cite">You made the wsgi vhost changes from the patch that
      hasn't merged?<br>
      <div class="gmail_quote">On Sat, May 23, 2015 at 08:41 Michael
        Lindner <<a moz-do-not-send="true"
          href="mailto:michael@tropyx.com">michael@tropyx.com</a>>
        wrote:<br>
        <blockquote class="gmail_quote" style="margin:0 0 0
          .8ex;border-left:1px #ccc solid;padding-left:1ex">
          <div>Completely disabled.<br>
            It really looks like it can't read the password (and correct
            hostname) from keystone.conf.....</div>
          <div><br>
            <br>
            <br>
            -----Original Message-----<br>
            From: Matt Kassawara <<a moz-do-not-send="true"
              href="mailto:mkassawara@gmail.com" target="_blank">mkassawara@gmail.com</a>><br>
            To: Michael Lindner <<a moz-do-not-send="true"
              href="mailto:michael@tropyx.com" target="_blank">michael@tropyx.com</a>><br>
          </div>
          <div>Sent: Sun, 24 May 2015 12:31 AM<br>
            Subject: Re: [Openstack] keystone service endpoint creation
            failing on RHEL7<br>
            <br>
          </div>
          Any selinux issues?<br>
          <div class="gmail_quote">On Sat, May 23, 2015 at 07:57 Michael
            Lindner <<a moz-do-not-send="true"
              href="mailto:michael@tropyx.com" target="_blank">michael@tropyx.com</a>>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div>Yep. And stuff is coming up in the custom apache log
                files showing they're working.<br>
                I'm stumped lol.<br>
                <br>
                <br>
                Michael Lindner<br>
                IT Systems Consultant<br>
                <br>
                Sent from a Linux and Java based Android!</div>
              <div><br>
                <br>
                <br>
                -----Original Message-----<br>
                From: Matt Kassawara <<a moz-do-not-send="true"
                  href="mailto:mkassawara@gmail.com" target="_blank">mkassawara@gmail.com</a>><br>
                To: Michael Lindner <<a moz-do-not-send="true"
                  href="mailto:michael@tropyx.com" target="_blank">michael@tropyx.com</a>><br>
                Cc: "<a moz-do-not-send="true"
                  href="mailto:openstack@lists.openstack.org"
                  target="_blank">openstack@lists.openstack.org</a>"
                <<a moz-do-not-send="true"
                  href="mailto:openstack@lists.openstack.org"
                  target="_blank">openstack@lists.openstack.org</a>><br>
                Sent: Sat, 23 May 2015 11:11 PM<br>
                Subject: Re: [Openstack] keystone service endpoint
                creation failing on RHEL7<br>
                <br>
              </div>
              <div dir="ltr">Did you restart Apache after adding the
                group to the WSGI virtual host config file?</div>
              <div class="gmail_extra"><br>
                <div class="gmail_quote">On Sat, May 23, 2015 at 1:25
                  AM, Michael Lindner <span dir="ltr"><<a
                      moz-do-not-send="true"
                      href="mailto:michael@tropyx.com" target="_blank">michael@tropyx.com</a>></span>
                  wrote:<br>
                  <blockquote class="gmail_quote" style="margin:0 0 0
                    .8ex;border-left:1px #ccc solid;padding-left:1ex">
                    <div bgcolor="#FFFFFF" text="#000000"> <br>
                      Hi List,<br>
                      <br>
                      That wasn't it, unfortunately.  I made those
                      changes but to no avail.<br>
                      <br>
                      We're hitting this problem before that stage in
                      the install guide anyway, in the "Create the
                      service entity and API endpoint" section.<br>
                      <br>
                      <p
style="font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-size:10pt;line-height:normal;font-family:Verdana,Geneva,sans-serif;color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><strong>To
                          create the service entity and API endpoint</strong></p>
                      <ol
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:Verdana,Geneva,sans-serif;color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
                        type="1">
                        <li
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:Verdana,Geneva,sans-serif">
                          <p
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:Verdana,Geneva,sans-serif">The

                            Identity service manages a catalog of
                            services in your OpenStack environment.
                            Services use this catalog to determine the
                            other services available in your
                            environment.</p>
                          <p
style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:10pt;line-height:normal;font-family:Verdana,Geneva,sans-serif">Create
                            the service entity for the Identity service:</p>
                          <pre style="color:rgb(35,48,45);display:block;font-family:Monaco,'Courier New','DejaVu Sans Mono','Bitstream Vera Sans Mono',monospace;font-stretch:normal;font-style:normal;font-variant:normal;font-weight:normal;line-height:normal;overflow-x:scroll;width:1194px;border-bottom-color:rgb(222,222,222)!important;border-bottom-style:solid!important;border-bottom-width:1px!important;border-top-color:rgb(222,222,222)!important;border-top-style:solid!important;border-top-width:1px!important;font-size:12px!important;margin:1em 0px!important;padding:0.5em!important">$ openstack service create \
  --name keystone --description "OpenStack Identity" identity</pre>
                        </li>
                      </ol>
                      <br>
                      The SQL in keystone.conf works perfectly, copying
                      it to the shell logs straight in to the keystone
                      database as user keystone.<br>
                      <br>
                      It does look like WSGI - from keystone.log:<br>
                      <br>
                      2015-05-23 16:03:44.909 1739 TRACE
                      keystone.common.wsgi OperationalError:
                      (OperationalError) (1045, "Access denied for user
                      'keystone'@'localhost' (using password: YES)")
                      None None<br>
                      <br>
                      In keystone.conf the hostname is set to
                      "controller", not localhost. (and changing it
                      makes no diff)<br>
                      <br>
                      Thanks,<br>
                      <br>
                      Mike.
                      <div>
                        <div><br>
                          <br>
                          <br>
                          <div>On 23/05/15 13:59, Matt Kassawara wrote:<br>
                          </div>
                          <blockquote type="cite">
                            <div dir="ltr">Robson,
                              <div><br>
                              </div>
                              <div>In this particular case, I believe
                                the WSGI bits can't read the keystone
                                configuration file and assume default
                                values.</div>
                            </div>
                            <div class="gmail_extra"><br>
                              <div class="gmail_quote">On Fri, May 22,
                                2015 at 11:15 PM, Robson Ramos Barreto <span
                                  dir="ltr"><<a
                                    moz-do-not-send="true"
                                    href="mailto:robson.rbarreto@gmail.com"
                                    target="_blank">robson.rbarreto@gmail.com</a>></span>
                                wrote:<br>
                                <blockquote class="gmail_quote"
                                  style="margin:0 0 0
                                  .8ex;border-left:1px #ccc
                                  solid;padding-left:1ex">
                                  <div dir="auto">
                                    <div>Hi Michael,</div>
                                    <div><br>
                                    </div>
                                    <div>Did you check the grant to
                                      keystone user on database and are
                                      you using the same password/host
                                      on the keystone config file and
                                      database ?</div>
                                    <div><br>
                                    </div>
                                    <div>Regards<br>
                                      <br>
                                      Sent from my iPhone</div>
                                    <div>
                                      <div>
                                        <div><br>
                                          On 22/05/2015, at 22:43, <a
                                            moz-do-not-send="true"
                                            href="mailto:michael@tropyx.com"
                                            target="_blank">michael@tropyx.com</a>
                                          wrote:<br>
                                          <br>
                                        </div>
                                        <blockquote type="cite">
                                          <div>
                                            <p> </p>
                                            <p>Hi List,</p>
                                            <p><br>
                                              We're trying to install
                                              Kilo on RHEL7, when we get
                                              to creating service
                                              endpoints, this command:</p>
                                            <p>openstack service create
                                              \<br>
                                                --name keystone
                                              --description "OpenStack
                                              Identity" identity</p>
                                            <p> </p>
                                            <p>Consistently returns this
                                              error:</p>
                                            <p> </p>
                                            <p>ERROR: openstack An
                                              unexpected error prevented
                                              the server from fulfilling
                                              your request. (HTTP 500)</p>
                                            <p> </p>
                                            <p>Looking into keystone.log
                                              we see that the final
                                              error reads:</p>
                                            <p> </p>
                                            <p>(OperationalError) (1045,
                                              "Access denied for user
                                              'keystone'@'localhost'
                                              (using password: YES)")
                                              None None</p>
                                            <p> </p>
                                            <p>Three of our team have
                                              tried reinstalling as per
                                              the instructions, we've
                                              triple checked our config
                                              and database settings but
                                              are still lost.</p>
                                            <p>Apologies if this
                                              question is terribly
                                              backward, but we've
                                              exhausted all other ideas.</p>
                                            <p> </p>
                                            <p>Thanks,</p>
                                            <p> </p>
                                            <p>MikeL.</p>
                                            <p> </p>
                                            <div> </div>
                                          </div>
                                        </blockquote>
                                      </div>
                                    </div>
                                    <blockquote type="cite">
                                      <div><span>_______________________________________________</span><span><br>
                                          <span>Mailing list: <a
                                              moz-do-not-send="true"
                                              href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                              target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span><br>
                                          <span>Post to     : <a
                                              moz-do-not-send="true"
                                              href="mailto:openstack@lists.openstack.org"
                                              target="_blank">openstack@lists.openstack.org</a></span><br>
                                          <span>Unsubscribe : <a
                                              moz-do-not-send="true"
                                              href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                              target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span><br>
                                        </span></div>
                                    </blockquote>
                                  </div>
                                  <br>
_______________________________________________<br>
                                  Mailing list: <a
                                    moz-do-not-send="true"
                                    href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                    target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                                  Post to     : <a
                                    moz-do-not-send="true"
                                    href="mailto:openstack@lists.openstack.org"
                                    target="_blank">openstack@lists.openstack.org</a><br>
                                  Unsubscribe : <a
                                    moz-do-not-send="true"
                                    href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                    target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                                  <br>
                                </blockquote>
                              </div>
                              <br>
                            </div>
                          </blockquote>
                          <br>
                        </div>
                      </div>
                    </div>
                    <br>
                    _______________________________________________<br>
                    Mailing list: <a moz-do-not-send="true"
                      href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                      target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                    Post to     : <a moz-do-not-send="true"
                      href="mailto:openstack@lists.openstack.org"
                      target="_blank">openstack@lists.openstack.org</a><br>
                    Unsubscribe : <a moz-do-not-send="true"
                      href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                      target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                    <br>
                  </blockquote>
                </div>
                <br>
              </div>
            </blockquote>
          </div>
        </blockquote>
      </div>
    </blockquote>
    <br>
  </body>
</html>