<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Usually you need to use port 5000 iptables may block that port. <br><br>Inviato da iPhone</div><div><br>Il giorno 22 giu 2016, alle ore 18:38, Chunhai Feng <<a href="mailto:fch0528@gmail.com">fch0528@gmail.com</a>> ha scritto:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div id="contentDescription" style="line-height:1.5;text-align:justify;text-justify:inter-ideograph">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div id="contentDescription" style="line-height:1.5;text-align:justify;text-justify:inter-ideograph">
<div dir="ltr"><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">Hi all,</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">I am facing a keystone authentication failure problem for several days.</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">For the same command (Let's say, keystone --debug --os-username=admin --os-password=nova --os-auth-url=<a href="http://10.155.136.40:35357/v2.0">http://10.155.136.40:35357/v2.0</a> token-get), if I run it locally on the controller node, it can get the token. However, if I execute it on another server which has installed python-keystoneclient, it shows errors as below:</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">DEBUG:keystoneclient.session:REQ: curl -i -X POST <a href="http://10.155.136.40:35357/v2.0/tokens" style="color:rgb(27,121,189);text-decoration:none">http://10.155.136.40:35357/v2.0/tokens</a> -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient" -d '{"auth": {"passwordCredentials": {"username": "admin", "password": "nova"}}}' INFO:urllib3.connectionpool:Starting new HTTP connection (1): 10.155.136.40 Authorization Failed: Unable to establish connection to<a href="http://10.155.136.40:35357/v2.0/tokens" style="color:rgb(27,121,189);text-decoration:none">http://10.155.136.40:35357/v2.0/tokens</a></p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">I can login the dashboard successfully, and the keystone service is enabled. But I do not understand<strong>"identity (native backend)"</strong>, does it matter? Otherwise, everything works fine locally on the controller node. Current server can ping the controller successfully, and there is no firewall service on.</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">Thank you for all your help.</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">Best Regards,</p><p style="margin:0px 0px 14px;padding:0px 5px 5px 0px;border:none;font-size:14px;line-height:1.4;font-family:"Helvetica Neue",Arial,Helvetica,sans-serif;color:rgb(75,75,75)">Chunhai</p></div>
</div>
</div>
!DSPAM:1,576b3ec4177778734420095!
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span><br><span>Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a></span><br><span>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a></span><br><span></span><br><span></span><br><span>!DSPAM:1,576b3ec4177778734420095!</span><br></div></blockquote></body></html>