[openstack-dev] [Openstack] authentication failure for glance client in the latest devstack dev environment

Lu, Lianhao lianhao.lu at intel.com
Fri Nov 9 10:44:32 UTC 2012


My system is Ubuntu 12.04 64bit.

My "nova list" also failed with a HTTP 401 status error, with the following output on nova-api:

2012-11-09 18:30:09 ERROR keystone.common.cms [-] Verify error: Verification failure
139967656924832:error:04091077:rsa routines:INT_RSA_VERIFY:wrong signature length:rsa_sign.c:175:
139967656924832:error:2E09A09E:CMS routines:CMS_SignerInfo_verify_content:verification failure:cms_sd.c:900:
139967656924832:error:2E09D06D:CMS routines:CMS_verify:content verify error:cms_smime.c:425:

2012-11-09 18:30:09 WARNING keystone.middleware.auth_token [-] Authorization failed for token ......
2012-11-09 18:30:09 INFO keystone.middleware.auth_token [-] Invalid user token - rejecting request
2012-11-09 18:30:09 INFO nova.osapi_compute.wsgi.server [-] 10.239.36.61 "GET /v2/447239d7ddfd4ae89393c9ecf538d703/servers/det
ail HTTP/1.1" status: 401 len: 461 time: 0.0153220

However, the "keystone" command-line client works fine.

Best Regards,
Lianhao

> -----Original Message-----
> From: openstack-bounces+lianhao.lu=intel.com at lists.launchpad.net [mailto:openstack-bounces+lianhao.lu=intel.com at lists.launchpad.net]
> On Behalf Of Lu, Lianhao
> Sent: Friday, November 09, 2012 4:31 PM
> To: openstack at lists.launchpad.net; openstack-dev at lists.openstack.org
> Subject: [Openstack] authentication failure for glance client in the latest devstack dev environment
> 
> Hi fellows,
> 
> Today I just updated my devstack to setup a new openstack dev environment with "RECLONE" set to "yes" in localrc. The stack.sh failed at
> the very end in "glance image-create" with the error of "Invalid OpenStack Identify credential".
> 
> I then tried to run "glance image-list" in the command line after "source openrc admin", it also failed with the same error.
> 
> When the error happens, glance-api server reported the following errors on the screen:
> 
> 2012-11-09 16:20:31 16950 ERROR keystone.middleware.auth_token [-] HTTP connection exception: [Errno 1] _ssl.c:504:
> error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
> 2012-11-09 16:20:31 16950 WARNING keystone.middleware.auth_token [-] Authorization failed for token
> MIIL7wYJKoZIhvcNAQcCoIIL4DCCC9wCAQExCTAHBgUrDgMCGjCCCkUGCSqGSIb3DQEHAaCCCjYEggoyeyJhY2Nlc3MiOiB7InRva2VuIjogeyJp
> c3N1ZWRfYXQiOiAiMDg6MjA6MzEuNjM3.(......omit here)
> A8uKBr1VlQoeF2Y-ND+DhZV+vjrM8i6FcGfeFq6Vra-1ktoQjkfh88XmG2tCcwrlGo0nVM4OrRaIs8F9Iwc4EIXHA+Aw73MzqUIRVSE8ahiFg9nNM
> =
> 2012-11-09 16:20:31 16950 INFO keystone.middleware.auth_token [-] Invalid user token - deferring reject downstream
> 
> 
> And the keystone reported the following:
> 
> (eventlet.wsgi.server): 2012-11-09 16:28:21,276 DEBUG wsgi write 127.0.0.1 - - [09/Nov/2012 16:28:21] "POST /v2.0/tokens HTTP/1.1" 200
> 6780 0.095150
> 
> localhost - - [09/Nov/2012 16:28:21] code 400, message Bad request syntax
> ("\x16\x03\x01\x00\xcd\x01\x00\x00\xc9\x03\x02P\x9c\xbe\xa5#\xc8D\xf8\xe9\xe9\x97\xc5w\x19LX\xfc\xb8\x04v\xb1w'\x04A\xa7}\xa8\x
> 0c")
> localhost - - [09/Nov/2012 16:28:21] "��P���#�D����wLX�v�w'A�}�" 400 -
> 
> 
> Does anyone know what's going wrong here?
> 
> Yours,
> -Lianhao
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp


More information about the OpenStack-dev mailing list