[skyline] Username or password is incorrect
Folks, Try to install skyline UI to replace horizon using doc: https://docs.openstack.org/skyline-apiserver/latest/install/docker-install-u... Everything went well and I got a login page on http://x.x.x.x:9999 also it pulled Region/Domains. When I am trying to login with my account, I get an error: Username or Password is incorrect. I am using sqlite DB for skyline as per documents. No errors in logs command $ docker logs skyline When I use Chrome Developer Tools then it was indicating an error in these URLs. http://openstack.example.com:9999/api/openstack/skyline/api/v1/profile http://openstack.example.com:9999/api/openstack/skyline/api/v1/policies 401 Unauthorized ( {"detail":"no such table: revoked_token"} ) Find attached screenshot
Hi, For sqlite DB for skyline, I think you can followed by this step[1]. [1] https://opendev.org/openstack/skyline-apiserver#deployment-with-sqlite <https://opendev.org/openstack/skyline-apiserver#deployment-with-sqlite> Thanks Boxiang
2023年8月8日 上午7:21,Satish Patel <satish.txt@gmail.com> 写道:
Folks,
Try to install skyline UI to replace horizon using doc: https://docs.openstack.org/skyline-apiserver/latest/install/docker-install-u... <https://docs.openstack.org/skyline-apiserver/latest/install/docker-install-ubuntu.html>
Everything went well and I got a login page on http://x.x.x.x:9999 <http://x.x.x.x:9999/> also it pulled Region/Domains. When I am trying to login with my account, I get an error: Username or Password is incorrect.
I am using sqlite DB for skyline as per documents.
No errors in logs command $ docker logs skyline
When I use Chrome Developer Tools then it was indicating an error in these URLs.
http://openstack.example.com:9999/api/openstack/skyline/api/v1/profile <http://openstack.example.com:9999/api/openstack/skyline/api/v1/profile> http://openstack.example.com:9999/api/openstack/skyline/api/v1/policies <http://openstack.example.com:9999/api/openstack/skyline/api/v1/policies>
401 Unauthorized ( {"detail":"no such table: revoked_token"} )
For this error message, I think you did not do bootstrap for skyline when you use sqlite db.
Find attached screenshot
<Screenshot 2023-08-07 at 7.21.21 PM.png>
Thanks for reply, I have switched from sqlite to mysql and made great progress. At least I can in UI and things working fine except normal users can't see things because of some access issue. This is my skyline.yaml file ################# default: access_token_expire: 3600 access_token_renew: 1800 cors_allow_origins: [] #database_url: sqlite:////tmp/skyline.db database_url: mysql://skyline:skyline123@localhost:3306/skyline debug: true log_dir: /var/log/skyline log_file: skyline.log prometheus_basic_auth_password: '' prometheus_basic_auth_user: '' prometheus_enable_basic_auth: false prometheus_endpoint: http://localhost:9091 secret_key: aCtmgbcUqYUy_HNVg5BDXCaeJgJQzHJXwqbXr0Nmb2o session_name: session ssl_enabled: false openstack: base_domains: - heat_user_domain default_region: RegionOne enforce_new_defaults: true extension_mapping: floating-ip-port-forwarding: neutron_port_forwarding fwaas_v2: neutron_firewall qos: neutron_qos vpnaas: neutron_vpn interface_type: public keystone_url: http://192.168.18.100:5000/v3 nginx_prefix: /api/openstack reclaim_instance_interval: 604800 service_mapping: baremetal: ironic compute: nova container: zun container-infra: magnum database: trove identity: keystone image: glance key-manager: barbican load-balancer: octavia network: neutron object-store: swift orchestration: heat placement: placement sharev2: manilav2 volumev3: cinder sso_enabled: false sso_protocols: - openid sso_region: RegionOne system_admin_roles: - admin - system_admin system_project: service system_project_domain: Default system_reader_roles: - system_reader system_user_domain: Default system_user_name: skyline system_user_password: 'skyline123' setting: base_settings: - flavor_families - gpu_models - usb_models flavor_families: - architecture: x86_architecture categories: - name: general_purpose properties: [] - name: compute_optimized properties: [] - name: memory_optimized properties: [] - name: high_clock_speed properties: [] - architecture: heterogeneous_computing categories: - name: compute_optimized_type_with_gpu properties: [] - name: visualization_compute_optimized_type_with_gpu properties: [] gpu_models: - nvidia_t4 usb_models: - usb_c ############ My problem is if I login as admin then everything works!! But for normal account (end-user) I am able to login in UI but when I click any instance or anything it throwing access error and in logs its showing me following: 2023-08-08 04:49:04.869 | DEBUG | keystoneauth1.session:request:946 - GET call to identity for http://192.168.18.100:5000/v3/users/e8b10077f9f84e03bf115aa10ae13852/project... used request id req-8988e75a-97c4-4b2a-8a37-23572453d31d 2023-08-08 04:49:04.912 | DEBUG | urllib3.connectionpool:_make_request:456 - http://192.168.18.100:5000 "POST /v3/auth/tokens HTTP/1.1" 401 109 2023-08-08 04:49:04.913 | DEBUG | keystoneauth1.session:request:976 - Request returned failure status: 401 2023-08-08 04:49:04.914 | DEBUG | skyline_apiserver.api.v1.policy:list_policies:103 - Keystone token is invalid. No privilege to access system scope. It is clear that skyline doesn't pass proper token or authorization when using a normal user account but it does work with admin account. What could be wrong here? On Tue, Aug 8, 2023 at 10:58 PM 朱博祥 <bxzhu_5355@163.com> wrote:
Hi,
For sqlite DB for skyline, I think you can followed by this step[1].
[1] https://opendev.org/openstack/skyline-apiserver#deployment-with-sqlite
Thanks Boxiang
2023年8月8日 上午7:21,Satish Patel <satish.txt@gmail.com> 写道:
Folks,
Try to install skyline UI to replace horizon using doc: https://docs.openstack.org/skyline-apiserver/latest/install/docker-install-u...
Everything went well and I got a login page on http://x.x.x.x:9999 also it pulled Region/Domains. When I am trying to login with my account, I get an error: Username or Password is incorrect.
I am using sqlite DB for skyline as per documents.
No errors in logs command $ docker logs skyline
When I use Chrome Developer Tools then it was indicating an error in these URLs.
http://openstack.example.com:9999/api/openstack/skyline/api/v1/profile http://openstack.example.com:9999/api/openstack/skyline/api/v1/policies
401 Unauthorized ( {"detail":"no such table: revoked_token"} )
For this error message, I think you did not do bootstrap for skyline when you use sqlite db.
Find attached screenshot
<Screenshot 2023-08-07 at 7.21.21 PM.png>
participants (2)
-
Satish Patel
-
朱博祥