[openstack-dev] Compute endpoint auth problem.

Wainer, Gabriel (Brazil R&D-ECL) gabriel.wainer at hp.com
Thu Mar 21 18:45:52 UTC 2013


Never mind that.  The service were down and I haven't noticed. I will use the other list for that kind of stuff.

Thanks,

Gabriel.

-----Original Message-----
From: Vishvananda Ishaya [mailto:vishvananda at gmail.com] 
Sent: quinta-feira, 21 de março de 2013 13:50
To: OpenStack Development Mailing List
Cc: OpenStack general mailing list
Subject: Re: [openstack-dev] Compute endpoint auth problem.

Try nova --debug --os-region-name RegionTwo image-list and see where it is connecting. I guess you have another typo.

Btw, in the future the dev list is not the right place for these questions.

Should be done on openstack at lists.launchpad.net

Vish
On Mar 21, 2013, at 9:34 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:

> Thanks for the heads up Ishaya. I was messing with the tenant_id. I have changed to use the '$(tenant_id)s' and now seems to be correct!
> 
> 
> root at regions:~# nova --os-region-name RegionTwo image-list
> ERROR: ConnectionRefused: '[Errno 111] Connection refused'
> 
> I know it's a generic error, but do you have any clue?
> 
> Thanks again,
> Gabriel.
> 
> 
> -----Original Message-----
> From: Vishvananda Ishaya [mailto:vishvananda at gmail.com]
> Sent: quinta-feira, 21 de março de 2013 12:55
> To: OpenStack Development Mailing List
> Subject: Re: [openstack-dev] Compute endpoint auth problem.
> 
> Your endpoint is wrong in region two.
> 
> It looks like you hardcoded admin as the tenant_id in region two which 
> is never correct. Tenant_id in keystone is usually a long uuid string without dashes.
> 
> You likely need to replace the '8774' with $(compute_port)s and the 'admin' with '$(tenant_id)s'
> 
> Vish
> 
> On Mar 21, 2013, at 6:45 AM, "Wainer, Gabriel (Brazil R&D-ECL)" <gabriel.wainer at hp.com> wrote:
> 
>> Hello folks,
>> 
>> I'm playing with multiple endpoints for the same service, and I want to call nova for different compute endpoints but I'm having a hard time figuring out the credentials needed to make it work.
>> 
>> I have two devstacks running and  I'm using  one keystone having both compute endpoints in the catalog. Below are the catalog entries for them. I suppressed other entries to improve readability:
>> 
>> $ keystone endpoint-list
>> 
>> Id 		| 5824302b5b844e5a8e90b236c96fc3f4 
>> region		| RegionOne
>> publicURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> internalURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> adminURL	| http://172.16.101.239:$(compute_port)s/v2/$(tenant_id)s 
>> service_id	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> 
>> Id 		| 6a3e1123d2924048acec4bd06009413e 
>> region 		| RegionTwo 
>> publicURL 	| http://172.16.103.231:8774/v2/admin          
>> internalURL 	| http://172.16.103.231:8774/v2/admin           
>> adminURL 	| http://172.16.103.231:8774/v2/admin           
>> service_id 	| 8ae8f03c2e1f452cb22e6a7acf70480f |
>> 
>> So in this case the RegionOne endpoint works as seen below:
>> 
>> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionOne 
>> image-list
>> +--------------------------------------+---------------------------------+--------+--------+
>> | ID                                   | Name                            | Status | Server |
>> +--------------------------------------+---------------------------------+--------+--------+
>> | 17a7ea2a-fc47-4d06-8879-3fd7b707e4e2 | cirros-0.3.0-x86_64-uec         | ACTIVE |        |
>> | 4fe2aae8-1b72-41b2-87c5-493834b427d4 | cirros-0.3.0-x86_64-uec-kernel  | ACTIVE |        |
>> | 22415a33-c20c-4f67-b0a3-5e56ee984e06 | cirros-0.3.0-x86_64-uec-ramdisk | ACTIVE |        |
>> +--------------------------------------+---------------------------------+--------+--------+
>> 
>> But using the RegionTwo gives me a http 401:
>> 
>> stack at regions:/opt/stack/devstack$ nova --os-region-name RegionTwo 
>> image-list
>> ERROR: n/a (HTTP 401)
>> 
>> 
>> I noticed that the working endpoint is the one from the devstack install which I am using the keystone.
>> 
>> Any ideas? I think it is related to nova's api-paste.ini [filter:authtoken] config.
>> 
>> Thanks,
>> Gabriel.
>> 
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list