[Openstack-operators] Glance authorizing problem.

Magicloud Magiclouds magicloud.magiclouds at gmail.com
Sun Apr 1 08:00:01 UTC 2012


Hi,
  Just following
http://docs.openstack.org/trunk/openstack-compute/install/content/index.html
to start my journal. And now I am stuck at step "Verifying the Image
Service Installation".

  First of all, $ keystone-manage create_user --tenant-id
a5865417a9e144f68c4777925cc56033 --name glance --password glance
worked.

  Then $ curl -d '{"auth": {"tenantName": "service",
"passwordCredentials":{"username": "glance", "password": "glance"}}}'
-H "Content-type: application/json"
http://10.9.1.127:35357/v2.0/tokens | python -mjson.tool
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   514  100   411  100   103   7208   1806 --:--:-- --:--:-- --:--:--  7339
{
    "access": {
        "token": {
            "expires": "2012-04-02T15:43:56",
            "id": "d69fd23e-fe23-45e1-9dd7-dc581fec593d",
            "tenant": {
                "id": "a5865417a9e144f68c4777925cc56033",
                "name": "service"
            },
            "tenants": [
                {
                    "id": "a5865417a9e144f68c4777925cc56033",
                    "name": "service"
                }
            ]
        },
        "user": {
            "id": "77cbea8dae384185a3dc90c80507c5a3",
            "name": "glance",
            "roles": [
                {
                    "id": "1",
                    "name": "Admin",
                    "tenantId": "a5865417a9e144f68c4777925cc56033"
                }
            ]
        }
    }
}

  And $ keystone-manage list_tenants
+----------------------------------+---------------+---------+
|                ID                |      Name     | Enabled |
+----------------------------------+---------------+---------+
| 092135b9f71d4070aaa1202205271936 | openstackDemo | True    |
| a5865417a9e144f68c4777925cc56033 | service       | True    |
+----------------------------------+---------------+---------+

  In the ini-s, I set:
[filter:authtoken]
...
admin_tenant_name = service
admin_user = glance
admin_password = glance

  Now $ glance add name="tty-linux-kernel" disk_format=aki
container_format=aki <ttylinux-uec-amd64-12.1_2.6.35-22_1-vmlinuz
Failed to add image. Got error:
You are not authorized to complete this action.
Details: 401 Unauthorized

This server could not verify that you are authorized to access the
document you requested. Either you supplied the wrong credentials
(e.g., bad password), or your browser does not understand how to
supply the credentials required.

 Authentication required
Note: Your image metadata may still be in the registry, but the
image's status will likely be 'killed'.

  What should I do?
-- 
竹密岂妨流水过
山高哪阻野云飞

And for G+, please use magiclouds#gmail.com.



More information about the Openstack-operators mailing list