<div dir="ltr">Davide,<div>I have other services like cinder and tacker configured (tacker is not working as it needs heat). Memcached server is working still authentication error is there.</div><div>I followed <a href="http://docs.openstack.org/mitaka/install-guide-ubuntu/heat-install.html">http://docs.openstack.org/mitaka/install-guide-ubuntu/heat-install.html</a> In keystone v2 we cant create domains as mentioned in this document. Is there any suitable document for keystone v2 that I can follow? Please let me know how can I check if keystone store the token properly?</div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div>
<br><div class="gmail_quote">On Thu, Feb 2, 2017 at 9:29 PM, Davide Panarese <span dir="ltr"><<a href="mailto:dpanarese@enter.eu" target="_blank">dpanarese@enter.eu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word">Hi,<div>do you have other services or only heat configured?! </div><div>Did you check if keystone store token properly? I had the same problem when my memcache token backend didn’t work.</div><div><br></div><div>If not, it seems all correct. Did you follow openstack install official guide?</div><div><br></div><div>Davide</div><div><br><div><blockquote type="cite"><span class="gmail-"><div>On 02 Feb 2017, at 10:19, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467Apple-interchange-newline"></span><div><div dir="ltr"><span class="gmail-">Dear Davide,<div>Below are the steps I have followed to configure heat in kilo. Please let me know if I am missing something here.</div><div><br></div><div>mysql -u root -p</div><div><br></div><div>CREATE DATABASE heat;</div><div><br></div><div>GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'localhost' \</div><div> IDENTIFIED BY 'heat';</div><div>GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'%' \</div><div> IDENTIFIED BY 'heat';</div><div><br></div><div>export OS_TENANT_NAME='openstack'</div><div>export OS_USERNAME='admin'</div><div>export OS_PASSWORD='Chang3M3'</div><div>export OS_AUTH_URL='<a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.<wbr>cncloud.com:5000/v2.0</a>'</div><div>export OS_AUTH_STRATEGY='keystone'</div><div>export OS_REGION_NAME='RegionOne'</div><div><br></div><div><br></div><div>keystone user-create --name heat --pass heat</div><div>keystone user-role-add --user heat --role admin --tenant services</div><div>keystone service-create --name heat --description "Orchestration" --type orchestration</div><div>keystone service-create --name heat-cfn --description "Orchestration" --type cloudformation</div></span><div>keystone endpoint-create --service heat --publicurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8004/v1/%<wbr>(tenant_id)s</a>" --adminurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8004/v1/%<wbr>(tenant_id)s</a>" --internalurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8004/v1/%<wbr>(tenant_id)s</a>"</div><div>keystone endpoint-create --service heat-cfn --publicurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8000/v1/%<wbr>(tenant_id)s</a>" --adminurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8000/v1/%<wbr>(tenant_id)s</a>" --internalurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8000/v1/%<wbr>(tenant_id)s</a>"</div><span class="gmail-"><div>keystone role-create --name heat_stack_owner</div><div>keystone user-role-add --user admin --tenant openstack --role heat_stack_owner</div><div>keystone role-create --name heat_stack_user</div><div><br></div><div>heat-keystone-setup-domain \</div><div>–stack-user-domain-name heat_user_domain \</div><div>–stack-domain-admin heat_domain_admin \</div><div>–stack-domain-admin-password $HeatPass | tee heat-keystone-setup-domain.out</div><div><br></div><div>heact.conf:</div><div>[DEFAULT]</div><div>debug = true</div><div>verbose = true</div><div>rpc_backend = zmq</div></span><div>heat_metadata_server_url = <a href="http://54.174.88.227:8000/" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8000</a></div><div>heat_waitcondition_server_url = <a href="http://54.174.88.227:8000/v1/waitcondition" target="_blank"><font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8000/v1/<wbr>waitcondition</a></div><div><div class="gmail-h5"><div>stack_domain_admin = heat_domain_admin</div><div>stack_domain_admin_password = Chang3M3</div><div>stack_user_domain_name = heat_user_domain</div><div>stack_user_domain_id=<wbr>f798141e117a417996a736ba8f57f3<wbr>68</div><div>rpc_zmq_host = 54.174.88.227</div><div>[database]</div><div>connection = mysql://<a href="http://heat:heat@54.174.88.227/heat" target="_blank">heat:heat@54.174.88.<wbr>227/heat</a></div><div>[keystone_authtoken]</div><div>auth_uri = <a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.cncloud.com:<wbr>5000/v2.0</a></div><div>identity_url = <a href="https://identity.cncloud.com:35357/" target="_blank">https://identity.cncloud.com:<wbr>35357</a></div><div>#memcached_servers = controller:11211</div><div>project_name = services</div><div>auth_type = password</div><div>admin_tenant_name = services</div><div>admin_user = heat</div><div>admin_password = heat</div><div>[ec2authtoken]</div><div>auth_uri = <a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.cncloud.com:<wbr>5000/v2.0</a></div><div><br></div><div>heat-manage db_sync</div><div><br></div><div>service heat-api restart</div><div>service heat-api-cfn restart</div><div>service heat-engine restart</div><div><br></div><div><div>export OS_TENANT_NAME='services'</div><div>export OS_USERNAME='heat'</div><div>export OS_PASSWORD='heat'</div><div>export OS_AUTH_URL='<a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.<wbr>cncloud.com:5000/v2.0</a>'</div><div>export OS_AUTH_STRATEGY='keystone'</div><div>export OS_REGION_NAME='RegionOne'</div></div><div><br></div><div>heat stack-list</div><div><br></div><div>ERROR : Authentication Required.</div><div><br></div><div> </div></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail-m_-4218477447125151467gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div>
<br><div class="gmail_quote"><div><div class="gmail-h5">On Wed, Feb 1, 2017 at 4:07 PM, NareshA kumar <span dir="ltr"><<a href="mailto:nka@criterionnetworks.com" target="_blank">nka@criterionnetworks.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-h5"><span><div dir="ltr"><span style="font-size:12.8px">Davide,</span><div style="font-size:12.8px">Yes I am using the heat credentials as you have mentioned. But still I am getting Authentication required error.</div></div></span></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div><div><div class="gmail-m_-4218477447125151467h5">
<br><div class="gmail_quote"><div><div class="gmail-h5">On Wed, Feb 1, 2017 at 4:01 PM, NareshA kumar <span dir="ltr"><<a href="mailto:nka@criterionnetworks.com" target="_blank">nka@criterionnetworks.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-h5"><div dir="ltr">Davide,<div>Yes I am using the heat credentials as you have mentioned. But still I am getting Authentication required error.</div><div><br></div><div>I am attaching heat-api.log here for your reference. I am guessing that I would have missed something while creating heat domains.</div></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196h5">
<br><div class="gmail_quote"><div><div class="gmail-h5">On Wed, Feb 1, 2017 at 3:14 PM, Davide Panarese <span dir="ltr"><<a href="mailto:dpanarese@enter.eu" target="_blank">dpanarese@enter.eu</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word"><div><div class="gmail-h5"><div>If you use heat creadential for token request it works?</div><div><br></div><div>export OS_AUTH_URL=<a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.c<wbr>ncloud.com:5000/v2.0</a></div><div>export OS_REGION_NAME=RegionOne</div><div>export OS_USERNAME=heat</div><div>export OS_TENANT_NAME=services</div><div>export OS_PASSWORD=heat</div><div><br></div><div>keystone token-get </div><div><br></div></div></div><div>Davide<br><blockquote type="cite"><div><div class="gmail-h5"><span><div>On 01 Feb 2017, at 10:10, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585Apple-interchange-newline"></span></div></div><div><div dir="ltr"><div><div class="gmail-h5"><span>I have associated heat user to services tenant and gave it a admin role.<div><br></div><div><div>keystone user-role-list --user heat --tenant services</div><div>+-----------------------------<wbr>-----+-------+----------------<wbr>------------------+-----------<wbr>-----------------------+</div><div>| id | name | user_id | tenant_id |</div><div>+-----------------------------<wbr>-----+-------+----------------<wbr>------------------+-----------<wbr>-----------------------+</div><div>| 2b995253c23e4c1db8cd374346a4ec<wbr>d4 | admin | 645eb7e9f04f4a2b8df65272a23c13<wbr>94 | 024890084b7642e9b8535b52a86584<wbr>ea |</div><div>+-----------------------------<wbr>-----+-------+----------------<wbr>------------------+-----------<wbr>-----------------------+</div></div><div><br></div><div>heat --debug stack-list</div><div><br></div></span></div></div><div><div><div class="gmail-h5"><span><div>DEBUG (session) REQ: curl -g -i -X GET <a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.cncloud.com:5<wbr>000/v2.0</a> -H "Accept: application/json" -H "User-Agent: python-keystoneclient"</div><div>DEBUG (session) RESP: [200] x-openstack-request-id: req-2515497e-671b-475e-b48c-0c<wbr>b6f2ccfe2f content-length: 347 via: 1.1 <a href="http://identity.cncloud.com:5000/" target="_blank">identity.cncloud.com:5000</a> access-control-expose-headers: Accept, Content-Type, X-Auth-Token, X-Subject-Token vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) connection: close access-control-allow-methods: GET POST OPTIONS PUT DELETE PATCH date: Wed, 01 Feb 2017 09:07:01 GMT access-control-allow-origin: * access-control-allow-headers: Accept, Content-Type, X-Auth-Token, X-Subject-Token content-type: application/json x-distribution: Ubuntu </div><div>RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.ide<wbr>ntity-v2.0+json"}], "id": "v2.0", "links": [{"href": "<a href="https://identity.cncloud.com:5000/v2.0/" target="_blank">https://identity.cncloud.com:<wbr>5000/v2.0/</a>", "rel": "self"}, {"href": "<a href="http://docs.openstack.org/" target="_blank">http://docs.openstack.org/</a>", "type": "text/html", "rel": "describedby"}]}}</div><div><br></div><div>DEBUG (v2) Making authentication request to <a href="https://identity.cncloud.com:5000/v2.0/tokens" target="_blank">https://identity.cncloud.com:5<wbr>000/v2.0/tokens</a></div></span></div></div><div>DEBUG (session) REQ: curl -g -i -X GET <a href="http://54.174.88.227:8004/v1/0c28d40bdcf0472d8dfb214a5c0286c4/stacks" target="_blank"><font color="red"><b>MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8004" </b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious:</b></font> http://54.174.88.227:8004/v1/0<wbr>c28d40bdcf0472d8dfb214a5c0286c<wbr>4/stacks</a>? -H "Accept: application/json" -H "User-Agent: python-heatclient" -H "X-Region-Name: RegionOne" -H "X-Auth-Token: {SHA1}9cc75daaff59cdb14a75bfb7<wbr>4ca6d77ebb8d8ac6" -H "Content-Type: application/json" -H "X-Auth-Url: <a href="https://identity.cncloud.com:5000/v2.0" target="_blank">https://identity.cncloud.com:5<wbr>000/v2.0</a>"</div><div><div class="gmail-h5"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852h5"><div>DEBUG (session) RESP:</div><div>DEBUG (v2) Making authentication request to <a href="https://identity.cncloud.com:5000/v2.0/tokens" target="_blank">https://identity.cncloud.com:5<wbr>000/v2.0/tokens</a></div><div>DEBUG (session) RESP:</div><div>Traceback (most recent call last):</div><div> File "/usr/bin/heat", line 10, in <module></div><div> sys.exit(main())</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/shell.py", line 706, in main</div><div> HeatShell().main(args)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/shell.py", line 656, in main</div><div> args.func(client, args)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/v1/shell.py", line 581, in do_stack_list</div><div> utils.print_list(stacks, fields, sortby_index=3)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/openstack/commo<wbr>n/cliutils.py", line 169, in print_list</div><div> for o in objs:</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/v1/stacks.py", line 100, in paginate</div><div> stacks = self._list(url, 'stacks')</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/openstack/commo<wbr>n/apiclient/base.py", line 117, in _list</div><div> body = self.client.get(url).json()</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/common/http.py"<wbr>, line 292, in get</div><div> return self.client_request("GET", url, **kwargs)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/common/http.py"<wbr>, line 285, in client_request</div><div> resp, body = self.json_request(method, url, **kwargs)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/common/http.py"<wbr>, line 266, in json_request</div><div> resp = self._http_request(url, method, **kwargs)</div><div> File "/usr/lib/python2.7/dist-packa<wbr>ges/heatclient/common/http.py"<wbr>, line 361, in _http_request</div><div> raise exc.from_response(resp)</div><div>heatclient.exc.HTTPUnauthorize<wbr>d: ERROR: Authentication required</div></div></div></div></div></div><div><br></div></div><div><div class="gmail-h5"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852h5"><div class="gmail_extra"><br clear="all"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div>
<br><div class="gmail_quote">On Wed, Feb 1, 2017 at 2:16 PM, Davide Panarese <span dir="ltr"><<a href="mailto:dpanarese@enter.eu" target="_blank">dpanarese@enter.eu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word">Could you debug heat api call with heat —debug stack-list?<div>Did you associate heat user to service tenant and give it admin role?</div><div><br></div><div>Davide</div><div><div><blockquote type="cite"><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585h5"><div>On 31 Jan 2017, at 19:54, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585m_5765547782561637881Apple-interchange-newline"></div></div><div><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585h5"><div dir="ltr"><div style="font-size:12.8px">Hi,</div><div style="font-size:12.8px">I am installing heat in kilo with keystone v2 APIs. As per document I have configured the endpoints and heat.conf. "heat stack-list" gives me Authentication required error. In heat-api.log I am seeing "Authorization failed for token" message. </div><div style="font-size:12.8px">Can anyone help me solve this issue?</div><div style="font-size:12.8px"><br></div><div><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585m_5765547782561637881gmail_signature"><div dir="ltr"><div>Regards,<br></div>NareshA.<br></div></div></div>
</div>
<br></div></div><span class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585HOEnZb"><font color="#888888">--
<br><font color="#999999" face="Arial, Helvetica, sans-serif" size="1"> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.
<br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=32A47402B1.A84A6" target="_blank">Clicca qui per segnalarlo come spam.</a></font>
<font color="#999999" face="Arial, Helvetica, sans-serif" size="1"><br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=32A47402B1.A84A6" target="_blank">Clicca qui per metterlo in blacklist</a></font>
______________________________<wbr>_________________</font></span><span><br>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br>Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br></span></div></blockquote></div><br></div></div></blockquote></div><br></div>
<br>--
<br><font color="#999999" face="Arial, Helvetica, sans-serif" size="1"> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.
<br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=557444011D.A905A" target="_blank">Clicca qui per segnalarlo come spam.</a></font>
<font color="#999999" face="Arial, Helvetica, sans-serif" size="1"><br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=557444011D.A905A" target="_blank">Clicca qui per metterlo in blacklist</a></font>
______________________________<wbr>_________________<br>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br>Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br></div></div></div></div></div></blockquote></div><br></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div></div></div>
</blockquote></div><br></div><div><div class="gmail-h5">
<br>--
<br><font color="#999999" face="Arial, Helvetica, sans-serif" size="1"> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.
<br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=B4EDD402E7.ADD0F" target="_blank">Clicca qui per segnalarlo come spam.</a></font>
<font color="#999999" face="Arial, Helvetica, sans-serif" size="1"><br><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=B4EDD402E7.ADD0F" target="_blank">Clicca qui per metterlo in blacklist</a></font>
______________________________<wbr>_________________<br>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>Post to : <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br></div></div></div></blockquote></div><br></div></div></blockquote></div><br></div></div>