[openstack-dev] Keystone Authorization Failed: Forbidden (HTTP 403)

Dhvanan Shah dhvanan at gmail.com
Wed Apr 27 08:30:18 UTC 2016


UPDATE:
I am able to log into Horizon and perform all actions without any issue but
on my terminal, I am not able to do the same. The password that I thought
was wrong is not the issue as I logged in with the same password.
My keystone_adminrc file looks like this:

unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
export OS_USERNAME=admin
export OS_PASSWORD=****************
export OS_AUTH_URL=http://10.16.37.221:35357/v2.0
export PS1='[\u@\h \W(keystone_admin)]\$ '

export OS_TENANT_NAME=admin
export OS_REGION_NAME=RegionOne


Please suggest what I could do!

On Wed, Apr 27, 2016 at 1:41 PM, Dhvanan Shah <dhvanan at gmail.com> wrote:

> All the services are running properly, it is just that the any action
> performed says I am not authenticated or Forbidden (403) which means that
> there is an authorization problem. In my keystone_adminrc file I have
> exported all the environment variables and also set the admin password. Can
> it be the case that this admin password is wrong because of which it is not
> authenticating the admin right. If so how can I change the admin password?
>
> On Wed, Apr 27, 2016 at 12:05 PM, Dhvanan Shah <dhvanan at gmail.com> wrote:
>
>> http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62
>>
>> This link corresponding to the above token shows this error message -
>>
>> {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
>>
>>
>> So there is a problem in authentication from the keystone.I haven't changed the admin password.
>>
>>
>> On Wed, Apr 27, 2016 at 12:01 PM, Dhvanan Shah <dhvanan at gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I have a 2 node OpenStack cluster setup running on CentOS. Due to some
>>> reason now I'm unable to perform any actions as it is not able to authorize
>>> me, it shows an error message saying "Authorization Failed: Forbidden (HTTP
>>> 403)" for Keystone when I run the command openstack-status and for
>>> nova-managed services it says "No handlers could be found for logger
>>> "keystoneclient.auth.identity.generic.base"
>>> ERROR (Forbidden): Forbidden (HTTP 403)".
>>>
>>> The keystone logs at /var/log/keystone show no problem that might have
>>> occured.
>>> The nova api logs show this :
>>> 2016-04-27 04:18:31.279 4314 DEBUG keystoneclient.session [-] REQ: curl
>>> -g -i -X GET
>>> http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62
>>> -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H
>>> "X-Auth-Token: {SHA1}9d202e0a726633f660321097015cd9d67ac4df19"
>>> _http_log_request
>>> /usr/lib/python2.7/site-packages/keystoneclient/session.py:195
>>> 2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] RESP:
>>> _http_log_response
>>> /usr/lib/python2.7/site-packages/keystoneclient/session.py:224
>>> 2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] Request
>>> returned failure status: 404 request
>>> /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
>>> 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-]
>>> Authorization failed for token
>>> 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-]
>>> Identity response: {"error": {"message": "Could not find token:
>>> 34e4b79b157a4526bc8ebb80b82cbf62", "code": 404, "title": "Not Found"}}
>>> 2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-]
>>> Authorization failed for token
>>>
>>>
>>> Could someone please help me out as to how I could debug this issue.
>>>
>>> Thanks,
>>> Dhvanan Shah
>>>
>>
>>
>>
>> --
>> Dhvanan Shah
>>
>
>
>
> --
> Dhvanan Shah
>



-- 
Dhvanan Shah
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160427/9000a3e3/attachment.html>


More information about the OpenStack-dev mailing list