Open Stack

2016-04-27 12:43 GMT+02:00 Dhvanan Shah <dhvanan at gmail.com>:
> keystone --debug user-list gives this:
>
> /usr/lib/python2.7/site-packages/keystoneclient/shell.py:65:
> DeprecationWarning: The keystone CLI is deprecated in favor of
> python-openstackclient. For a Python library, continue using
> python-keystoneclient.
>   'python-keystoneclient.', DeprecationWarning)
> DEBUG:keystoneclient.auth.identity.v2:Making authentication request to
> http://10.16.37.221:5000/v2.0/tokens
> INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection
> (1): proxy.serc.iisc.ernet.in

After taking another look, this line looks suspicous, where does this
proxy get configured? It seems like it might be blocking access to
your keystone service. What is the output if you do a "curl
http://10.16.37.221:5000/v2.0"?

> DEBUG:requests.packages.urllib3.connectionpool:"POST
> http://10.16.37.221:5000/v2.0/tokens HTTP/1.1" 403 3370
> DEBUG:keystoneclient.session:Request returned failure status: 403
> Authorization Failed: Forbidden (HTTP 403)
>
> nova --debug user list gives this:
>
> DEBUG (session:195) REQ: curl -g -i -X GET http://10.16.37.221:5000/v2.0 -H
> "Accept: application/json" -H "User-Agent: python-keystoneclient"
> INFO (connectionpool:203) Starting new HTTP connection (1):
> proxy.serc.iisc.ernet.in
> DEBUG (connectionpool:383) "GET http://10.16.37.221:5000/v2.0 HTTP/1.1" 403
> 3275
> DEBUG (session:224) RESP:
> DEBUG (session:396) Request returned failure status: 403
> WARNING (base:133) Discovering versions from the identity service failed
> when creating the password plugin. Attempting to determine version from URL.
> DEBUG (v2:76) Making authentication request to
> http://10.16.37.221:5000/v2.0/tokens
> DEBUG (connectionpool:383) "POST http://10.16.37.221:5000/v2.0/tokens
> HTTP/1.1" 403 3370
> DEBUG (session:396) Request returned failure status: 403
> DEBUG (shell:914) Forbidden (HTTP 403)
> Forbidden: Forbidden (HTTP 403)
> ERROR (Forbidden): Forbidden (HTTP 403)