Open Stack

Hi Karan

This is clear case of authorization. So keystone is not able to authorize
with credential and token you are giving. Token supplied is wrong. Hence
you are hitting the issue.

I was suspecting the tenant definition as you defined it as 'services'. I
thought it is defined as 'service'(no s at the end). That is not the case
now.

Try the following.

1. Set OS_USERNAME= cinder, OS_TENANT = services and ENDPOINT_URL now.
2. Run the keystone token-get . THis should display the current token of
user
3. Run the above command --debug option.
4. Can you set keystone to debug as well /etc/keystone/keystone.conf
--debug = True
5. Send me teh cinder.log and keystone.log and debug out.

-Dheerendra


On Sun, Nov 24, 2013 at 8:00 PM, Karan Singh <ksingh at csc.fi> wrote:

> Hello Dheerendra
>
> Thanks for your reply , please find keystone tenant and role-list output.
> Please suggest.
>
>
> [root at rdo ~]#
> [root at rdo ~]# keystone tenant-list
> +----------------------------------+----------+---------+
> | id | name | enabled |
> +----------------------------------+----------+---------+
> | 0dafe42cfde242ddbb67b681f59bdb00 | admin | True |
> | f5e21418087f43f7afb2352576136f0a | alt_demo | True |
> | 94a2c960f68d45cdb763fe5b05147206 | demo | True |
> | af2f42d510fa405aa8d4e75c1a669ab8 | services | True |
> +----------------------------------+----------+---------+
> [root at rdo ~]#
> [root at rdo ~]# keystone role-list
> +----------------------------------+---------------+
> | id | name |
> +----------------------------------+---------------+
> | cd5b0d2475374bb6bbf65ccc9b349145 | Member |
> | 63ad68eee2a94cd0b477ee67bf7df36a | ResellerAdmin |
> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
> | 6042354830ef4e3b9678fe18c40a8ed7 | admin |
> +----------------------------------+---------------+
> [root at rdo ~]#
>
>
>
>
> Many Thanks
> Karan Singh
>
>
> ------------------------------
> *From: *"Dheerendra" <dheerendra.madhusudhana at gmail.com>
> *To: *"karan.singh" <karan.singh at csc.fi>
> *Cc: *openstack at lists.openstack.org
> *Sent: *Sunday, 24 November, 2013 4:20:45 PM
> *Subject: *Re: [Openstack] Error with Cinder **Need Urgent help** HIGH
> PRIORITY
>
>
> Can you past 'keystone tenant-list' and 'keystone role-list' ?
>
> -Dheerendra
>
>
> On Sun, Nov 24, 2013 at 5:35 AM, Karan Singh <karan.singh at csc.fi> wrote:
>
>> Please help I am in urgent need
>>
>>
>> -------- Original message --------
>> From: Karan Singh <ksingh at csc.fi>
>> Date: 23/11/2013 18:24 (GMT+02:00)
>> To: openstack at lists.openstack.org
>> Subject: Error with Cinder **Need Urgent help** HIGH PRIORITY
>>
>>
>> Hello Openstack Community Members.
>>
>> I need your quick support on my issue related to Cinder.
>>
>>
>> *1 . Error Logs from cinder/api.log*
>>
>> 2013-11-23 18:08:02.037 29478 INFO urllib3.connectionpool [-] Starting
>> new HTTP connection (1): 127.0.0.1
>> 2013-11-23 18:08:02.100 29478 WARNING
>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone
>> service: {u'error': {u'message': u'The request you have made requires
>> authentication.', u'code': 401, u'title': u'Unauthorized'}}
>> 2013-11-23 18:08:02.101 29478 WARNING
>> keystoneclient.middleware.auth_token [-] Authorization failed for token
>> d675640b9346a631549c85c156159fb9
>> 2013-11-23 18:08:02.102 29478 INFO keystoneclient.middleware.auth_token
>> [-] Invalid user token - rejecting request
>> 2013-11-23 18:08:02.362 29478 INFO urllib3.connectionpool [-] Starting
>> new HTTP connection (1): 127.0.0.1
>> 2013-11-23 18:08:02.434 29478 WARNING
>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone
>> service: {u'error': {u'message': u'The request you have made requires
>> authentication.', u'code': 401, u'title': u'Unauthorized'}}
>> 2013-11-23 18:08:02.435 29478 WARNING
>> keystoneclient.middleware.auth_token [-] Authorization failed for token
>> 03aee2508b2c4132a9c23b382c6ba284
>> 2013-11-23 18:08:02.435 29478 INFO keystoneclient.middleware.auth_token
>> [-] Invalid user token - rejecting request
>>
>>
>>
>> *2 . Errors from cinder list command output *
>>
>> [root at rdo cinder]# cinder list
>>
>> ERROR: Unauthorized (HTTP 401)
>> [root at rdo cinder]#
>>
>>
>> *3. Output from cinder/api-paste.ini*
>>
>> [filter:keystonecontext]
>> paste.filter_factory =
>> cinder.api.middleware.auth:CinderKeystoneContext.factory
>>
>> [filter:authtoken]
>> paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
>> service_protocol = http
>> service_host = 127.0.0.1
>> service_port = 5000
>> signing_dir = /var/lib/cinder
>>
>> auth_host = 127.0.0.1
>> auth_port = 35357
>> auth_protocol = http
>> admin_tenant_name = services
>> admin_user = cinder
>> admin_password = root
>> auth_uri = http://127.0.0.1:5000/
>>
>>
>>
>> *4. Output from cinder/cinder.conf*
>>
>>
>> rootwrap_config=/etc/cinder/rootwrap.conf
>> sql_connection = mysql://cinder:root@localhost/cinder
>> api_paste_config = /etc/cinder/api-paste.ini
>>
>> iscsi_helper=tgtadm
>> volume_name_template = volume-%s
>> volume_group = cinder-volumes
>> verbose = True
>> auth_strategy = keystone
>> #osapi_volume_listen_port=5900
>> [keystone_authtoken]
>> admin_tenant_name = services
>> admin_user = cinder
>> admin_password = root
>> auth_host = 127.0.0.1
>> auth_port = 35357
>> auth_protocol = http
>> signing_dirname = /tmp/keystone-signing-cinder
>>
>>
>> 5. All the components from Horizon web interface works fine except ,
>> VOLUME ( cinder component ) , as soon as i click on volume it throws errors
>>  *Error: Unauthorised: Unable to retrieve volume list.  Error:
>> Unauthorised: Unable to retrieve volume types*
>>
>> 6. Keystone has cinder user
>>
>> [root at rdo cinder]# keystone user-list
>>
>> +----------------------------------+------------+---------+----------------------+
>> | id | name | enabled | email |
>>
>> +----------------------------------+------------+---------+----------------------+
>> | 99f8019ba2694d78a680a5de46aa1afd | admin | True | test at test.com |
>> | ee6de67df5bf4498bd477e2a973f393f | alt_demo | True | |
>> | f632591a717c4f9b91c4ebfdc8eb86ef | ceilometer | True |
>> ceilometer at localhost |
>> | be199f4da0e84abb9f0ca069f0a4b408 | cinder | True | cinder at localhost.com|
>> | 79071cdc981d4f5787a8d1abebac7eec | demo | True | |
>> | 8d8d4107a72d4cdd838f3cc8f643a0f2 | glance | True | glance at localhost |
>> | 901d979b861d45ada359252da45082f6 | neutron | True | neutron at localhost |
>> | 0e371ae93dce4ea392224354929c8257 | nova | True | nova at localhost |
>> | 069624d0554a432bb1f57629bde6ebc8 | swift | True | swift at localhost |
>>
>> +----------------------------------+------------+---------+----------------------+
>> [root at rdo cinder]#
>>
>>
>> 7. I am able to connect to mysql db  with user cinder and password ( root
>> )
>>
>>
>> [root at rdo cinder]# mysql -u cinder -p
>> Enter password:
>> Welcome to the MySQL monitor. Commands end with ; or \g.
>> Your MySQL connection id is 1230
>> Server version: 5.1.69 Source distribution
>>
>> Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights
>> reserved.
>>
>> Oracle is a registered trademark of Oracle Corporation and/or its
>> affiliates. Other names may be trademarks of their respective
>> owners.
>>
>> Type 'help;' or '\h' for help. Type '\c' to clear the current input
>> statement.
>>
>> mysql>
>>
>>
>> I have set up openstack using RDO , i tried all  possible ways but cinder
>> ( volumes ) are not working , except everything works well , please advise
>> a solution ASAP , i am on a very tight deadline.
>>
>>
>> Waiting for your quick responses.
>>
>> Karan Singh
>> CSC - IT Center for Science Ltd.
>> P.O. Box 405, FI-02101 Espoo, FINLAND
>> http://www.csc.fi/ | +358 (0) 503 812758
>>
>>
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20131124/1f2fa76f/attachment.html>