[openstack-dev] Compute endpoint auth problem.

Vishvananda Ishaya vishvananda at gmail.com
Thu Mar 21 16:49:59 UTC 2013


Try nova --debug --os-region-name RegionTwo image-list and see where it is connecting. I guess you have another typo.

Btw, in the future the dev list is not the right place for these questions.

Should be done on openstack at lists.launchpad.net

Vish
On Mar 21, 2013, at 9:34 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:

> Thanks for the heads up Ishaya. I was messing with the tenant_id. I have changed to use the '$(tenant_id)s' and now seems to be correct!
> 
> 
> root at regions:~# nova --os-region-name RegionTwo image-list
> ERROR: ConnectionRefused: '[Errno 111] Connection refused'
> 
> I know it's a generic error, but do you have any clue?
> 
> Thanks again,
> Gabriel.
> 
> 
> -----Original Message-----
> From: Vishvananda Ishaya [mailto:vishvananda at gmail.com] 
> Sent: quinta-feira, 21 de março de 2013 12:55
> To: OpenStack Development Mailing List
> Subject: Re: [openstack-dev] Compute endpoint auth problem.
> 
> Your endpoint is wrong in region two.
> 
> It looks like you hardcoded admin as the tenant_id in region two which is never correct. Tenant_id
> in keystone is usually a long uuid string without dashes.
> 
> You likely need to replace the '8774' with $(compute_port)s and the 'admin' with '$(tenant_id)s'
> 
> Vish
> 
> On Mar 21, 2013, at 6:45 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:
> 
>> Hello folks,
>> 
>> I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
>> 
>> I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
>> 
>> $ keystone endpoint-list
>> 
>> Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
>> region		| RegionOne
>> publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> 
>> Id 		| 6a3e1123d2924048acec4bd06009413e 
>> region 		| RegionTwo 
>> publicURL 	| http://172.16.103.231:8774/v2/admin          
>> internalURL 	| http://172.16.103.231:8774/v2/admin           
>> adminURL 	| http://172.16.103.231:8774/v2/admin           
>> service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> So in this case the RegionOne endpoint works as seen below:
>> 
>> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne image-list
>> +--------------------------------------+---------------------------------+--------+--------+
>> | ID                                   | Name                            | Status | Server |
>> +--------------------------------------+---------------------------------+--------+--------+
>> | 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
>> | 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
>> | 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
>> +--------------------------------------+---------------------------------+--------+--------+
>> 
>> But using the RegionTwo gives me a http 401:
>> 
>> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo image-list
>> ERROR: n/a (HTTP 401)
>> 
>> 
>> I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
>> 
>> Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
>> 
>> Thanks,
>> Gabriel.
>> 
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




More information about the OpenStack-dev mailing list