<div dir="ltr">Hello there, <div>as for the subject I am stuck trying to create/start a cirros imange.</div><div><br></div><div>At first I didn't notice but I can now say that while creating the image keystone logs the following warning:</div><div><br></div><div>/var/log/keystone/keystone.log</div><div><br></div><div>

<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><div><div>2018-03-05 21:02:45.961 2120 INFO keystone.common.wsgi [<font color="#ff0000">req-5c4c9e26-dbe2-429f-b414-f6262b451392</font><span> </span>- - - - -] POST <a href="http://controller1:35357/v3/auth/tokens">http://controller1:35357/v3/auth/tokens</a><br></div><div>2018-03-05 21:02:46.740 2120 WARNING keystone.common.wsgi [req-5c4c9e26-dbe2-429f-b414-f6262b451392 - - - - -] Authorization failed. The request you have mad</div></div></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">at the same time nova throws the following error:</div><div><br></div><div><div>/var/log/nova/nova-compute.log</div><div><div>45ec8a6ff - - -] [instance: 7a789397-8fbd-47a7-a5f6-8b274f77ca72] Creating image</div><div>2018-03-05 21:26:34.716 1225 ERROR nova.compute.manager [req-b9f9e984-6f5f-4869-9290-63ca145d19e1 e35fc188170d4144a9cd4d30f9eab65c bad15e4bc5714298b275e2f45e</div><div>c8a6ff - - -] Instance failed network setup after 1 attempt(s)</div><div>2018-03-05 21:26:34.716 1225 ERROR nova.compute.manager Traceback (most recent call last):</div></div><div>.......</div><div><br></div><div>2018-03-05 21:26:34.716 1225 ERROR nova.compute.manager Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-5c4c9e26-dbe2-429f-b414-f6262b451392)</div><div>2018-03-05 21:26:34.736 1225 ERROR nova.compute.manager [instance: 7a789397-8fbd-47a7-a5f6-8b274f77ca72] Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: <font color="#ff0000">req-5c4c9e26-dbe2-429f-b414-f6262b451392</font>)</div></div><div><br></div><div>So basically the compute node sends 

<span style="color:rgb(255,0,0);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">req-5c4c9e26-dbe2-429f-b414-f6262b451392 </span><span style="font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><font color="#000000">that hasn't gotten a reply since keystone on the controller node denies it (reqs match).</font></span></div><div><br></div><div><div>To this point I've checked auth_uri and nova user password in /etc/nova/nova.conf for both controller and compute nodes. Moreover I've checked nova openstack user password with the command 'openstack user password set' (with appropriate env). Crendentials are ok all across the board.<br></div></div></div><div><br></div><div>Here's the [keystone_authtoken] section for both controller and compute nodes</div><div><br></div><div><div>[keystone_authtoken]</div><div><br></div><div>auth_uri = <a href="http://controller1:5000">http://controller1:5000</a></div><div>auth_url = <a href="http://controller1:35357">http://controller1:35357</a></div><div>memcached_servers = controller1:11211</div><div>auth_type = password</div><div>project_domain_name = Default</div><div>user_domain_name = Default</div><div>project_name = service</div><div>username = nova</div><div>password = xxxxxxxx</div></div><div><br></div><div><br></div><div><div>auth_uri = <a href="http://controller1:5000">http://controller1:5000</a></div><div>auth_url = <a href="http://controller1:35357">http://controller1:35357</a></div><div>memcached_servers = controller1:11211</div><div>auth_type = password</div><div>project_domain_name = Default</div><div>user_domain_name = Default</div><div>project_name = service</div><div>username = nova</div><div>password = xxxxxxxx</div></div><div><br></div><div>Thanks in advance for any light you could shed on this.</div><div><br></div><div>Regards</div><div>Andrea</div></div>