<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">If you’re using v2 authentication Domains are not enabled. Did you try to use v3 authentication?! I’m using keystone v3 (i follow mitaka install too)<div class=""><br class=""></div><div class="">Let me know.</div><div class=""><br class=""></div><div class="">Davide<br class=""><div><blockquote type="cite" class=""><div class="">On 02 Feb 2017, at 20:15, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" class="">nka@criterionnetworks.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Davide,<div class="">I have other services like cinder and tacker configured (tacker is not working as it needs heat). Memcached server is working still authentication error is there.</div><div class="">I followed <a href="http://docs.openstack.org/mitaka/install-guide-ubuntu/heat-install.html" class="">http://docs.openstack.org/mitaka/install-guide-ubuntu/heat-install.html</a><span class="Apple-converted-space"> </span>In keystone v2 we cant create domains as mentioned in this document. Is there any suitable document for keystone v2 that I can follow? Please let me know how can I check if keystone store the token properly?</div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div><br class=""><div class="gmail_quote">On Thu, Feb 2, 2017 at 9:29 PM, Davide Panarese<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:dpanarese@enter.eu" target="_blank" class="">dpanarese@enter.eu</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word;" class="">Hi,<div class="">do you have other services or only heat configured?! </div><div class="">Did you check if keystone store token properly? I had the same problem when my memcache token backend didn’t work.</div><div class=""><br class=""></div><div class="">If not, it seems all correct. Did you follow openstack install official guide?</div><div class=""><br class=""></div><div class="">Davide</div><div class=""><br class=""><div class=""><blockquote type="cite" class=""><span class="gmail-"><div class="">On 02 Feb 2017, at 10:19, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank" class="">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467Apple-interchange-newline"></span><div class=""><div dir="ltr" class=""><span class="gmail-">Dear Davide,<div class="">Below are the steps I have followed to configure heat in kilo. Please let me know if I am missing something here.</div><div class=""><br class=""></div><div class="">mysql -u root -p</div><div class=""><br class=""></div><div class="">CREATE DATABASE heat;</div><div class=""><br class=""></div><div class="">GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'localhost' \</div><div class=""> <span class="Apple-converted-space"> </span>IDENTIFIED BY 'heat';</div><div class="">GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'%' \</div><div class=""> <span class="Apple-converted-space"> </span>IDENTIFIED BY 'heat';</div><div class=""><br class=""></div><div class="">export OS_TENANT_NAME='openstack'</div><div class="">export OS_USERNAME='admin'</div><div class="">export OS_PASSWORD='Chang3M3'</div><div class="">export OS_AUTH_URL='<a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.<wbr class="">cncloud.com:5000/v2.0</a>'</div><div class="">export OS_AUTH_STRATEGY='keystone'</div><div class="">export OS_REGION_NAME='RegionOne'</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">keystone user-create --name heat --pass heat</div><div class="">keystone user-role-add --user heat --role admin --tenant services</div><div class="">keystone service-create --name heat --description "Orchestration" --type orchestration</div><div class="">keystone service-create --name heat-cfn --description "Orchestration" --type cloudformation</div></span><div class="">keystone endpoint-create --service heat --publicurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8004"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8004/v1/%<wbr class="">(tenant_id)s</a>" --adminurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8004"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font>http://54.174.88.227:8004/v1/%<wbr class="">(tenant_id)s</a>" --internalurl "<a href="http://54.174.88.227:8004/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8004"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8004/v1/%<wbr class="">(tenant_id)s</a>"</div><div class="">keystone endpoint-create --service heat-cfn --publicurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8000"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8000/v1/%<wbr class="">(tenant_id)s</a>" --adminurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8000"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8000/v1/%<wbr class="">(tenant_id)s</a>" --internalurl "<a href="http://54.174.88.227:8000/v1/%(tenant_id)s" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8000"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8000/v1/%<wbr class="">(tenant_id)s</a>"</div><span class="gmail-"><div class="">keystone role-create --name heat_stack_owner</div><div class="">keystone user-role-add --user admin --tenant openstack --role heat_stack_owner</div><div class="">keystone role-create --name heat_stack_user</div><div class=""><br class=""></div><div class="">heat-keystone-setup-domain \</div><div class="">–stack-user-domain-name heat_user_domain \</div><div class="">–stack-domain-admin heat_domain_admin \</div><div class="">–stack-domain-admin-password $HeatPass | tee heat-keystone-setup-domain.out</div><div class=""><br class=""></div><div class="">heact.conf:</div><div class="">[DEFAULT]</div><div class="">debug = true</div><div class="">verbose = true</div><div class="">rpc_backend = zmq</div></span><div class="">heat_metadata_server_url =<span class="Apple-converted-space"> </span><a href="http://54.174.88.227:8000/" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8000"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8000</a></div><div class="">heat_waitcondition_server_url =<span class="Apple-converted-space"> </span><a href="http://54.174.88.227:8000/v1/waitcondition" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8000"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8000/v1/<wbr class="">waitcondition</a></div><div class=""><div class="gmail-h5"><div class="">stack_domain_admin = heat_domain_admin</div><div class="">stack_domain_admin_password = Chang3M3</div><div class="">stack_user_domain_name = heat_user_domain</div><div class="">stack_user_domain_id=<wbr class="">f798141e117a417996a736ba8f57f3<wbr class="">68</div><div class="">rpc_zmq_host = 54.174.88.227</div><div class="">[database]</div><div class="">connection = mysql://<a href="http://heat:heat@54.174.88.227/heat" target="_blank" class="">heat:heat@54.174.88.<wbr class="">227/heat</a></div><div class="">[keystone_authtoken]</div><div class="">auth_uri =<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.cncloud.com:<wbr class="">5000/v2.0</a></div><div class="">identity_url =<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:35357/" target="_blank" class="">https://identity.cncloud.com:<wbr class="">35357</a></div><div class="">#memcached_servers = controller:11211</div><div class="">project_name = services</div><div class="">auth_type = password</div><div class="">admin_tenant_name = services</div><div class="">admin_user = heat</div><div class="">admin_password = heat</div><div class="">[ec2authtoken]</div><div class="">auth_uri = <a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.cncloud.com:<wbr class="">5000/v2.0</a></div><div class=""><br class=""></div><div class="">heat-manage db_sync</div><div class=""><br class=""></div><div class="">service heat-api restart</div><div class="">service heat-api-cfn restart</div><div class="">service heat-engine restart</div><div class=""><br class=""></div><div class=""><div class="">export OS_TENANT_NAME='services'</div><div class="">export OS_USERNAME='heat'</div><div class="">export OS_PASSWORD='heat'</div><div class="">export OS_AUTH_URL='<a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.<wbr class="">cncloud.com:5000/v2.0</a>'</div><div class="">export OS_AUTH_STRATEGY='keystone'</div><div class="">export OS_REGION_NAME='RegionOne'</div></div><div class=""><br class=""></div><div class="">heat stack-list</div><div class=""><br class=""></div><div class="">ERROR : Authentication Required.</div><div class=""><br class=""></div><div class=""> </div></div></div></div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail-m_-4218477447125151467gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div><br class=""><div class="gmail_quote"><div class=""><div class="gmail-h5">On Wed, Feb 1, 2017 at 4:07 PM, NareshA kumar<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:nka@criterionnetworks.com" target="_blank" class="">nka@criterionnetworks.com</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""></div></div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div class=""><div class="gmail-h5"><span class=""><div dir="ltr" class=""><span style="font-size: 12.8px;" class="">Davide,</span><div style="font-size: 12.8px;" class="">Yes I am using the heat credentials as you have mentioned. But still I am getting Authentication required error.</div></div></span></div></div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div><div class=""><div class="gmail-m_-4218477447125151467h5"><br class=""><div class="gmail_quote"><div class=""><div class="gmail-h5">On Wed, Feb 1, 2017 at 4:01 PM, NareshA kumar<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:nka@criterionnetworks.com" target="_blank" class="">nka@criterionnetworks.com</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""></div></div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div class=""><div class="gmail-h5"><div dir="ltr" class="">Davide,<div class="">Yes I am using the heat credentials as you have mentioned. But still I am getting Authentication required error.</div><div class=""><br class=""></div><div class="">I am attaching heat-api.log here for your reference. I am guessing that I would have missed something while creating heat domains.</div></div></div></div><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196h5"><br class=""><div class="gmail_quote"><div class=""><div class="gmail-h5">On Wed, Feb 1, 2017 at 3:14 PM, Davide Panarese<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:dpanarese@enter.eu" target="_blank" class="">dpanarese@enter.eu</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""></div></div><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word;" class=""><div class=""><div class="gmail-h5"><div class="">If you use heat creadential for token request it works?</div><div class=""><br class=""></div><div class="">export OS_AUTH_URL=<a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.c<wbr class="">ncloud.com:5000/v2.0</a></div><div class="">export OS_REGION_NAME=RegionOne</div><div class="">export OS_USERNAME=heat</div><div class="">export OS_TENANT_NAME=services</div><div class="">export OS_PASSWORD=heat</div><div class=""><br class=""></div><div class="">keystone token-get </div><div class=""><br class=""></div></div></div><div class="">Davide<br class=""><blockquote type="cite" class=""><div class=""><div class="gmail-h5"><span class=""><div class="">On 01 Feb 2017, at 10:10, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank" class="">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585Apple-interchange-newline"></span></div></div><div class=""><div dir="ltr" class=""><div class=""><div class="gmail-h5"><span class="">I have associated heat user to services tenant and gave it a admin role.<div class=""><br class=""></div><div class=""><div class="">keystone user-role-list --user heat --tenant services</div><div class="">+-----------------------------<wbr class="">-----+-------+----------------<wbr class="">------------------+-----------<wbr class="">-----------------------+</div><div class="">| id | name | user_id | tenant_id |</div><div class="">+-----------------------------<wbr class="">-----+-------+----------------<wbr class="">------------------+-----------<wbr class="">-----------------------+</div><div class="">| 2b995253c23e4c1db8cd374346a4ec<wbr class="">d4 | admin | 645eb7e9f04f4a2b8df65272a23c13<wbr class="">94 | 024890084b7642e9b8535b52a86584<wbr class="">ea |</div><div class="">+-----------------------------<wbr class="">-----+-------+----------------<wbr class="">------------------+-----------<wbr class="">-----------------------+</div></div><div class=""><br class=""></div><div class="">heat --debug stack-list</div><div class=""><br class=""></div></span></div></div><div class=""><div class=""><div class="gmail-h5"><span class=""><div class="">DEBUG (session) REQ: curl -g -i -X GET<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.cncloud.com:5<wbr class="">000/v2.0</a><span class="Apple-converted-space"> </span>-H "Accept: application/json" -H "User-Agent: python-keystoneclient"</div><div class="">DEBUG (session) RESP: [200] x-openstack-request-id: req-2515497e-671b-475e-b48c-0c<wbr class="">b6f2ccfe2f content-length: 347 via: 1.1<span class="Apple-converted-space"> </span><a href="http://identity.cncloud.com:5000/" target="_blank" class="">identity.cncloud.com:5000</a><span class="Apple-converted-space"> </span>access-control-expose-headers: Accept, Content-Type, X-Auth-Token, X-Subject-Token vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) connection: close access-control-allow-methods: GET POST OPTIONS PUT DELETE PATCH date: Wed, 01 Feb 2017 09:07:01 GMT access-control-allow-origin: * access-control-allow-headers: Accept, Content-Type, X-Auth-Token, X-Subject-Token content-type: application/json x-distribution: Ubuntu </div><div class="">RESP BODY: {"version": {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.ide<wbr class="">ntity-v2.0+json"}], "id": "v2.0", "links": [{"href": "<a href="https://identity.cncloud.com:5000/v2.0/" target="_blank" class="">https://identity.cncloud.com:<wbr class="">5000/v2.0/</a>", "rel": "self"}, {"href": "<a href="http://docs.openstack.org/" target="_blank" class="">http://docs.openstack.org/</a>", "type": "text/html", "rel": "describedby"}]}}</div><div class=""><br class=""></div><div class="">DEBUG (v2) Making authentication request to<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:5000/v2.0/tokens" target="_blank" class="">https://identity.cncloud.com:5<wbr class="">000/v2.0/tokens</a></div></span></div></div><div class="">DEBUG (session) REQ: curl -g -i -X GET<span class="Apple-converted-space"> </span><a href="http://54.174.88.227:8004/v1/0c28d40bdcf0472d8dfb214a5c0286c4/stacks" target="_blank" class=""><font color="red" class=""><b class="">MailScanner ha rilevato un possibile tentativo di frode proveniente da "54.174.88.227:8004"<span class="Apple-converted-space"> </span></b></font><font color="red" class=""><b class="">MailScanner warning: numerical links are often malicious:</b></font><span class="Apple-converted-space"> </span>http://54.174.88.227:8004/v1/0<wbr class="">c28d40bdcf0472d8dfb214a5c0286c<wbr class="">4/stacks</a>? -H "Accept: application/json" -H "User-Agent: python-heatclient" -H "X-Region-Name: RegionOne" -H "X-Auth-Token: {SHA1}9cc75daaff59cdb14a75bfb7<wbr class="">4ca6d77ebb8d8ac6" -H "Content-Type: application/json" -H "X-Auth-Url:<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:5000/v2.0" target="_blank" class="">https://identity.cncloud.com:5<wbr class="">000/v2.0</a>"</div><div class=""><div class="gmail-h5"><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852h5"><div class="">DEBUG (session) RESP:</div><div class="">DEBUG (v2) Making authentication request to<span class="Apple-converted-space"> </span><a href="https://identity.cncloud.com:5000/v2.0/tokens" target="_blank" class="">https://identity.cncloud.com:5<wbr class="">000/v2.0/tokens</a></div><div class="">DEBUG (session) RESP:</div><div class="">Traceback (most recent call last):</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/bin/heat", line 10, in <module></div><div class=""> <span class="Apple-converted-space"> </span>sys.exit(main())</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/shell.py", line 706, in main</div><div class=""> <span class="Apple-converted-space"> </span>HeatShell().main(args)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/shell.py", line 656, in main</div><div class=""> <span class="Apple-converted-space"> </span>args.func(client, args)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/v1/shell.py", line 581, in do_stack_list</div><div class=""> <span class="Apple-converted-space"> </span>utils.print_list(stacks, fields, sortby_index=3)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/openstack/commo<wbr class="">n/cliutils.py", line 169, in print_list</div><div class=""> <span class="Apple-converted-space"> </span>for o in objs:</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/v1/stacks.py", line 100, in paginate</div><div class=""> <span class="Apple-converted-space"> </span>stacks = self._list(url, 'stacks')</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/openstack/commo<wbr class="">n/apiclient/base.py", line 117, in _list</div><div class=""> <span class="Apple-converted-space"> </span>body = self.client.get(url).json()</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/common/http.py"<wbr class="">, line 292, in get</div><div class=""> <span class="Apple-converted-space"> </span>return self.client_request("GET", url, **kwargs)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/common/http.py"<wbr class="">, line 285, in client_request</div><div class=""> <span class="Apple-converted-space"> </span>resp, body = self.json_request(method, url, **kwargs)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/common/http.py"<wbr class="">, line 266, in json_request</div><div class=""> <span class="Apple-converted-space"> </span>resp = self._http_request(url, method, **kwargs)</div><div class=""> <span class="Apple-converted-space"> </span>File "/usr/lib/python2.7/dist-packa<wbr class="">ges/heatclient/common/http.py"<wbr class="">, line 361, in _http_request</div><div class=""> <span class="Apple-converted-space"> </span>raise exc.from_response(resp)</div><div class="">heatclient.exc.HTTPUnauthorize<wbr class="">d: ERROR: Authentication required</div></div></div></div></div></div><div class=""><br class=""></div></div><div class=""><div class="gmail-h5"><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852h5"><div class="gmail_extra"><br clear="all" class=""><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div><br class=""><div class="gmail_quote">On Wed, Feb 1, 2017 at 2:16 PM, Davide Panarese<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:dpanarese@enter.eu" target="_blank" class="">dpanarese@enter.eu</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word;" class="">Could you debug heat api call with heat —debug stack-list?<div class="">Did you associate heat user to service tenant and give it admin role?</div><div class=""><br class=""></div><div class="">Davide</div><div class=""><div class=""><blockquote type="cite" class=""><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585h5"><div class="">On 31 Jan 2017, at 19:54, NareshA kumar <<a href="mailto:nka@criterionnetworks.com" target="_blank" class="">nka@criterionnetworks.com</a>> wrote:</div><br class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585m_5765547782561637881Apple-interchange-newline"></div></div><div class=""><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585h5"><div dir="ltr" class=""><div style="font-size: 12.8px;" class="">Hi,</div><div style="font-size: 12.8px;" class="">I am installing heat in kilo with keystone v2 APIs. As per document I have configured the endpoints and heat.conf. "heat stack-list" gives me Authentication required error. In heat-api.log I am seeing "Authorization failed for token" message. </div><div style="font-size: 12.8px;" class="">Can anyone help me solve this issue?</div><div style="font-size: 12.8px;" class=""><br class=""></div><div class=""><div class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585m_5765547782561637881gmail_signature"><div dir="ltr" class=""><div class="">Regards,<br class=""></div>NareshA.<br class=""></div></div></div></div><br class=""></div></div><span class="gmail-m_-4218477447125151467m_-4179281368635806196m_-2080276478268442852m_5396508831408631585HOEnZb"><font color="#888888" class="">--<span class="Apple-converted-space"> </span><br class=""><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<span class="Apple-converted-space"> </span><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=32A47402B1.A84A6" target="_blank" class="">Clicca qui per segnalarlo come spam.</a></font><span class="Apple-converted-space"> </span><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class=""><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=32A47402B1.A84A6" target="_blank" class="">Clicca qui per metterlo in blacklist</a></font><span class="Apple-converted-space"> </span>______________________________<wbr class="">_________________</font></span><span class=""><br class="">Mailing list:<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/cgi<wbr class="">-bin/mailman/listinfo/openstac<wbr class="">k</a><br class="">Post to :<span class="Apple-converted-space"> </span><a href="mailto:openstack@lists.openstack.org" target="_blank" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe :<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/cgi<wbr class="">-bin/mailman/listinfo/openstac<wbr class="">k</a><br class=""></span></div></blockquote></div><br class=""></div></div></blockquote></div><br class=""></div><br class="">--<span class="Apple-converted-space"> </span><br class=""><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<span class="Apple-converted-space"> </span><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=557444011D.A905A" target="_blank" class="">Clicca qui per segnalarlo come spam.</a></font><span class="Apple-converted-space"> </span><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class=""><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=557444011D.A905A" target="_blank" class="">Clicca qui per metterlo in blacklist</a></font><span class="Apple-converted-space"> </span>______________________________<wbr class="">_________________<br class="">Mailing list:<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/cgi<wbr class="">-bin/mailman/listinfo/openstac<wbr class="">k</a><br class="">Post to :<span class="Apple-converted-space"> </span><a href="mailto:openstack@lists.openstack.org" target="_blank" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe :<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/cgi<wbr class="">-bin/mailman/listinfo/openstac<wbr class="">k</a><br class=""></div></div></div></div></div></blockquote></div><br class=""></div></blockquote></div><br class=""></div></div></div></blockquote></div><br class=""></div></div></div></blockquote></div><br class=""></div><div class=""><div class="gmail-h5"><br class="">--<span class="Apple-converted-space"> </span><br class=""><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<span class="Apple-converted-space"> </span><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=B4EDD402E7.ADD0F" target="_blank" class="">Clicca qui per segnalarlo come spam.</a></font><span class="Apple-converted-space"> </span><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" class=""><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=B4EDD402E7.ADD0F" target="_blank" class="">Clicca qui per metterlo in blacklist</a></font><span class="Apple-converted-space"> </span>______________________________<wbr class="">_________________<br class="">Mailing list:<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/<wbr class="">cgi-bin/mailman/listinfo/<wbr class="">openstack</a><br class="">Post to :<span class="Apple-converted-space"> </span><a href="mailto:openstack@lists.openstack.org" target="_blank" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe :<span class="Apple-converted-space"> </span><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank" class="">http://lists.openstack.org/<wbr class="">cgi-bin/mailman/listinfo/<wbr class="">openstack</a><br class=""></div></div></div></blockquote></div><br class=""></div></div></blockquote></div><br class=""></div></div><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.<span class="Apple-converted-space"> </span><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=9F70240221.A5908" class="">Clicca qui per segnalarlo come spam.</a></font><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""><span class="Apple-converted-space"> </span></span><font color="#999999" face="Arial, Helvetica, sans-serif" size="1" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""><a href="http://mx01.enter.it/cgi-bin/learn-msg.cgi?blacklist=1&id=9F70240221.A5908" class="">Clicca qui per metterlo in blacklist</a></font></div></blockquote></div><br class=""></div></body></html>