[Openstack] cloudpipe failed to launch with "NotAuthorized"

Tianchen Jiang kenneth.jiang at gmail.com
Wed Jan 11 14:01:22 UTC 2012


I dug in a bit and found out that:

- nova-manage.VpnCommands.run doesn't have a parameter for credentials
when calling pipelib.py.launch_vpn_instance(project_id, user_id), and
therefore,

- cloudpipe/pipelib.py doesn't set auth strategy, which defaults to
"noauth", in RequestContext

- glance/client.py.get_image_meta thus failed.

Do we want to make cloudpipe to work with keystone before it finds a
place in Quantum?

Thanks,
kenneth



On Tue, Jan 10, 2012 at 9:45 AM, Vishvananda Ishaya
<vishvananda at gmail.com> wrote:
> Looks like either:
> a) your image is not pubic in glance
> or:
> b) cloudpipe code needs to be updated to use uuids somewhere
>
> Vish
>
> On Jan 10, 2012, at 5:26 AM, Tianchen Jiang wrote:
>
>> When I tried to launch cloudpipe using "nova-manage vpn run 1 1", I
>> got an error in nova-manage.log:
>>
>>
>> 2012-01-10 05:05:21,755 CRITICAL nova
>> [fa7bd047-43df-4ccb-b4bf-9dee6938f6ef 1 1]
>> (nova): TRACE: Traceback (most recent call last):
>> (nova): TRACE:   File "/usr/bin/nova-manage", line 2142, in <module>
>> (nova): TRACE:     main()
>> (nova): TRACE:   File "/usr/bin/nova-manage", line 2130, in main
>> (nova): TRACE:     fn(*fn_args, **fn_kwargs)
>> (nova): TRACE:   File "/usr/bin/nova-manage", line 192, in run
>> (nova): TRACE:     self.pipe.launch_vpn_instance(project_id, user_id)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/cloudpipe/pipelib.py", line
>> 109, in launch_vpn_instance
>> (nova): TRACE:     security_group=[group_name])
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1377,
>> in run_instances
>> (nova): TRACE:     image = self._get_image(context, kwargs['image_id'])
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/api/ec2/cloud.py", line 1494,
>> in _get_image
>> (nova): TRACE:     image = self.image_service.show(context, internal_id)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/image/s3.py", line 81, in show
>> (nova): TRACE:     return self.service.show(context, image_id)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 220, in
>> show
>> (nova): TRACE:     image_meta =
>> self._get_client(context).get_image_meta(image_id)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/glance/client.py", line 94, in
>> get_image_meta
>> (nova): TRACE:     res = self.do_request("HEAD", "/images/%s" % image_id)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 145,
>> in do_request
>> (nova): TRACE:     method, action, body=body, headers=headers, params=params)
>> (nova): TRACE:   File
>> "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 222,
>> in _do_request
>> (nova): TRACE:     raise exception.NotAuthorized(res.read())
>> (nova): TRACE: NotAuthorized
>> (nova): TRACE:
>>
>> All other nova-manage or nova commands are working fine. I added 3
>> lines in nova.conf specifically for cloudpipe:
>>
>> --vpn_image_id=32
>> --use_project_ca
>> --cnt_vpn_clients=5
>>
>> Did I miss any other configuration items?
>>
>> Thanks,
>> Kenneth
>>
>> _______________________________________________
>> Mailing list: https://launchpad.net/~openstack
>> Post to     : openstack at lists.launchpad.net
>> Unsubscribe : https://launchpad.net/~openstack
>> More help   : https://help.launchpad.net/ListHelp
>




More information about the Openstack mailing list