[Openstack] Glance API shows authentication errno 1 during uploading image to swift's container
Piotr Kopec
pkopec17 at gmail.com
Thu Aug 22 14:26:40 UTC 2013
No. I think all my services are using just http protocol and just password
for authentication.
Part of /etc/keystone/keystone.conf below:
```[ssl]
enable = False
#certfile = /etc/keystone/ssl/certs/keystone.pem
#keyfile = /etc/keystone/ssl/private/keystonekey.pem
#ca_certs = /etc/keystone/ssl/certs/ca.pem
#cert_required = True
[signing]
#token_format = PKI
#certfile = /etc/keystone/ssl/certs/signing_cert.pem
#keyfile = /etc/keystone/ssl/private/signing_key.pem
#ca_certs = /etc/keystone/ssl/certs/ca.pem
#key_size = 1024
#valid_days = 3650
#ca_password = None```
2013/8/22 Neil Tong <Neil.Tong at evault.com>
> Looks like an SSL problem, so you have Keystone setup to use SSL?
>
> Piotr Kopec <pkopec17 at gmail.com> wrote:
>
>
> Hello folks,
>
> I have met problem during configuration of Swift as a backend storage
> service for Glance. I have configured Glance according to Red Hat
> Instalation Guide. Now when I am trying to upload image using glance
> image-create command following message occures:
>
>
> [root at openstack182 ~]# glance image-create --name="Cirros 0.3.1" --disk-format=qcow2 --container-format bare < /tmp/images/cirros-0.3.1-x86_64-disk.img Request returned failure status.500 Internal Server ErrorThe server has either erred or is incapable of performing the requested operation.
> (HTTP 500)
>
> So the problem is with Swift server. Although Swift is able to create
> containers and upload files to them usingswift upload command:
>
>
> [root at openstack182 ~]# swift upload c4 data3.file
> data3.file[root at openstack182 ~]# swift list
> c1
> c2
> c3
> c4[root at openstack182 ~]# swift list c4
> data3.file
>
> Glance also works well if the default_store parameter is set to file.
>
> After attempting to upload image to swift's container Glance API logs
> shows there is some problem with authentication:
>
>
> [root at openstack182 ~]# glance image-create --name="Cirros 0.3.1" --disk-format=qcow2 --container-format bare < /tmp/images/cirros-0.3.1-x86_64-disk.img Request returned failure status.500 Internal Server ErrorThe server has either erred or is incapable of performing the requested operation.
> (HTTP 500)[root at openstack182 ~]# date
> czw, 22 sie 2013, 14:39:00 CEST[root at openstack182 ~]# tail -n 50 /var/log/glance/api.log2013-08-22 14:38:49.316 ERROR glance.api.v1.images [f32b8f75-054d-4be0-a048-dd797016d043 f554f1bf0c964ab3843214c0dfabf7a6 c154fa85885b4589aeb3b76f3a8d8beb] Failed to upload image2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images Traceback (most recent call last):2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/api/v1/images.py", line 444, in _upload2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images image_meta['size'])2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/store/swift.py", line 321, in add2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images self._create_container_if_missing(location.container, connection)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/glance/store/swift.py", line 490, in _create_container_if_missing2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images connection.head_container(container)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1070, in head_container2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images return self._retry(None, head_container, container)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1022, in _retry2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images self.url, self.token = self.get_auth()2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1010, in get_auth2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images insecure=self.insecure)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 329, in get_auth2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images insecure=insecure)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 266, in get_keystoneclient_2_02013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images raise ClientException('Authorization Failure. %s' % err)2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images ClientException: Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:490: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol2013-08-22 14:38:49.316 8466 TRACE glance.api.v1.images
>
> Some keystone command output:
>
>
> [root at openstack182 ~]# keystone user-list+----------------------------------+---------+---------+-------+| id | name | enabled | email |+----------------------------------+---------+---------+-------+| f554f1bf0c964ab3843214c0dfabf7a6 | admin | True | || ce494e0d76e44f1e9a4e4bccc5d6d3b2 | cinder | True | || efa48ad1e0cb4142a7043cdc97ff605e | ec2 | True | || 39d7c739fc31408c97cae9112a6da056 | glance | True | || 147bf1212187401e8a21ee18a6e174b1 | nova | True | || ac2a95560972434a84583df494b721ba | quantum | True | || 97b1c6a788bc476ba620152c769b20b5 | swift | True | |+----------------------------------+---------+---------+-------+[root at openstack182 ~]# keystone tenant-list+----------------------------------+---------+---------+| id | name | enabled |+----------------------------------+---------+---------+| c154fa85885b4589aeb3b76f3a8d8beb | demo | True || ae243f7ba98441aea224d712cdd97ed0 | service | True |+----------------------------------+---------+---------+
> [root at openstack182 ~]# keystone service-list+----------------------------------+----------+--------------+------------------------------+| id | name | type | description |+----------------------------------+----------+--------------+------------------------------+| 8d5ec35259d2442e999a709f49e6355d | cinder | volume | Cinder Volume Service || e93f78475fd8476895ff7a74fac8842b | ec2 | ec2 | EC2 Compatibility Layer || 422c6b4ccb8f4765ab55c51d9fd5d11a | glance | image | Image Service || 64dd013cbab24a48a8d3b25423d8c555 | keystone | identity | Identity Service || c807829b23444d90a065a0597c691424 | nova | compute | Compute Service || 97179db088674c35b31b51abf9605bc7 | quantum | network | OpenStack Networking service || 72a8718bb35143cfaac726cc7a41e60e | swift | object-store | Object Storage Service |+----------------------------------+----------+--------------+------------------------------+
>
> Could anyone help me with this issue, please?
>
> All answers are appreciated.
>
> Regards.
>
> Piotr
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130822/1c3675ef/attachment.html>
More information about the Openstack
mailing list