[Openstack-operators] Glance authorizing problem.
Magicloud Magiclouds
magicloud.magiclouds at gmail.com
Sun Apr 1 08:00:01 UTC 2012
Hi,
Just following
http://docs.openstack.org/trunk/openstack-compute/install/content/index.html
to start my journal. And now I am stuck at step "Verifying the Image
Service Installation".
First of all, $ keystone-manage create_user --tenant-id
a5865417a9e144f68c4777925cc56033 --name glance --password glance
worked.
Then $ curl -d '{"auth": {"tenantName": "service",
"passwordCredentials":{"username": "glance", "password": "glance"}}}'
-H "Content-type: application/json"
http://10.9.1.127:35357/v2.0/tokens | python -mjson.tool
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 514 100 411 100 103 7208 1806 --:--:-- --:--:-- --:--:-- 7339
{
"access": {
"token": {
"expires": "2012-04-02T15:43:56",
"id": "d69fd23e-fe23-45e1-9dd7-dc581fec593d",
"tenant": {
"id": "a5865417a9e144f68c4777925cc56033",
"name": "service"
},
"tenants": [
{
"id": "a5865417a9e144f68c4777925cc56033",
"name": "service"
}
]
},
"user": {
"id": "77cbea8dae384185a3dc90c80507c5a3",
"name": "glance",
"roles": [
{
"id": "1",
"name": "Admin",
"tenantId": "a5865417a9e144f68c4777925cc56033"
}
]
}
}
}
And $ keystone-manage list_tenants
+----------------------------------+---------------+---------+
| ID | Name | Enabled |
+----------------------------------+---------------+---------+
| 092135b9f71d4070aaa1202205271936 | openstackDemo | True |
| a5865417a9e144f68c4777925cc56033 | service | True |
+----------------------------------+---------------+---------+
In the ini-s, I set:
[filter:authtoken]
...
admin_tenant_name = service
admin_user = glance
admin_password = glance
Now $ glance add name="tty-linux-kernel" disk_format=aki
container_format=aki <ttylinux-uec-amd64-12.1_2.6.35-22_1-vmlinuz
Failed to add image. Got error:
You are not authorized to complete this action.
Details: 401 Unauthorized
This server could not verify that you are authorized to access the
document you requested. Either you supplied the wrong credentials
(e.g., bad password), or your browser does not understand how to
supply the credentials required.
Authentication required
Note: Your image metadata may still be in the registry, but the
image's status will likely be 'killed'.
What should I do?
--
竹密岂妨流水过
山高哪阻野云飞
And for G+, please use magiclouds#gmail.com.
More information about the Openstack-operators
mailing list