<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">If keystone is in HA, have a look here:
<a href="https://ask.openstack.org/en/question/90640/keystone-authentication-failure-in-a-ha-setup/?answer=90674#post-id-90674">
https://ask.openstack.org/en/question/90640/keystone-authentication-failure-in-a-ha-setup/?answer=90674#post-id-90674</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-Kaustubh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Dhvanan Shah [mailto:dhvanan@gmail.com]
<br>
<b>Sent:</b> Wednesday, April 27, 2016 3:52 AM<br>
<b>To:</b> openstack@lists.openstack.org<br>
<b>Subject:</b> [Openstack] Keystone Authorization failed : Forbidden (HTTP 403)<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Hi,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">I have a 2 node OpenStack cluster setup running on CentOS. Due to some reason now I'm unable to perform any actions as it is not able to authorize me, it shows an error message saying "Authorization Failed:
Forbidden (HTTP 403)" for Keystone when I run the command openstack-status and for nova-managed services it says "No handlers could be found for logger "keystoneclient.auth.identity.generic.base"<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">ERROR (Forbidden): Forbidden (HTTP 403)".<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">The keystone logs at /var/log/keystone show no problem that might have occured.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">The nova api logs show this : <o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.279 4314 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET <a href="http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62" target="_blank">http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62</a> -H
"User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}9d202e0a726633f660321097015cd9d67ac4df19" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:195<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] RESP: _http_log_response /usr/lib/python2.7/site-packages/keystoneclient/session.py:224<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] Request returned failure status: 404 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Could not find token: 34e4b79b157a4526bc8ebb80b82cbf62", "code": 404, "title": "Not Found"}}<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<div>
<div>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black"><a href="http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62" target="_blank"><span style="font-size:9.5pt;font-family:"Arial",sans-serif">http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62</span></a><o:p></o:p></span></pre>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black">This link corresponding to the above token shows this error message - <o:p></o:p></span></pre>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black">{"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}<o:p></o:p></span></pre>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black"><o:p> </o:p></span></pre>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black">So there is a problem in authentication from the keystone.I haven't changed the admin password. <o:p></o:p></span></pre>
<pre style="white-space:pre-wrap;word-wrap:break-word"><span style="color:black">Also by chance if my admin password is changed then how can I set it again? All my attempts show an error message of Forbidden (403).<o:p></o:p></span></pre>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt">Any help would be appreciated.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.5pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal">Thanks, <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">Dhvanan Shah<o:p></o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>