Open Stack

Hi Karan

Some more stuff

1. Run cinder --debug list. This will give some info on token sent, url
sent etc.
2.
http://docs.openstack.org/api/quick-start/content/index.html#Openstack-API-Concepts-a09234.
Just look command 1 and 2.
    This link and examples will give good details on what is happening with
authorization.
3. Using command #1 you get the token with user name, password and tenant.
4. Use the command #2 with URL you got in the step#1 to query. See what
happens.

-Dheerendra


On Sun, Nov 24, 2013 at 8:50 PM, Dheerendra <
dheerendra.madhusudhana at gmail.com> wrote:

> Hi Karan
>
> This is clear case of authorization. So keystone is not able to authorize
> with credential and token you are giving. Token supplied is wrong. Hence
> you are hitting the issue.
>
> I was suspecting the tenant definition as you defined it as 'services'. I
> thought it is defined as 'service'(no s at the end). That is not the case
> now.
>
> Try the following.
>
> 1. Set OS_USERNAME= cinder, OS_TENANT = services and ENDPOINT_URL now.
> 2. Run the keystone token-get . THis should display the current token of
> user
> 3. Run the above command --debug option.
> 4. Can you set keystone to debug as well /etc/keystone/keystone.conf
> --debug = True
> 5. Send me teh cinder.log and keystone.log and debug out.
>
> -Dheerendra
>
>
> On Sun, Nov 24, 2013 at 8:00 PM, Karan Singh <ksingh at csc.fi> wrote:
>
>> Hello Dheerendra
>>
>> Thanks for your reply , please find keystone tenant and role-list output.
>> Please suggest.
>>
>>
>> [root at rdo ~]#
>> [root at rdo ~]# keystone tenant-list
>> +----------------------------------+----------+---------+
>> | id | name | enabled |
>> +----------------------------------+----------+---------+
>> | 0dafe42cfde242ddbb67b681f59bdb00 | admin | True |
>> | f5e21418087f43f7afb2352576136f0a | alt_demo | True |
>> | 94a2c960f68d45cdb763fe5b05147206 | demo | True |
>> | af2f42d510fa405aa8d4e75c1a669ab8 | services | True |
>> +----------------------------------+----------+---------+
>> [root at rdo ~]#
>> [root at rdo ~]# keystone role-list
>> +----------------------------------+---------------+
>> | id | name |
>> +----------------------------------+---------------+
>> | cd5b0d2475374bb6bbf65ccc9b349145 | Member |
>> | 63ad68eee2a94cd0b477ee67bf7df36a | ResellerAdmin |
>> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
>> | 6042354830ef4e3b9678fe18c40a8ed7 | admin |
>> +----------------------------------+---------------+
>> [root at rdo ~]#
>>
>>
>>
>>
>> Many Thanks
>> Karan Singh
>>
>>
>> ------------------------------
>> *From: *"Dheerendra" <dheerendra.madhusudhana at gmail.com>
>> *To: *"karan.singh" <karan.singh at csc.fi>
>> *Cc: *openstack at lists.openstack.org
>> *Sent: *Sunday, 24 November, 2013 4:20:45 PM
>> *Subject: *Re: [Openstack] Error with Cinder **Need Urgent help** HIGH
>> PRIORITY
>>
>>
>> Can you past 'keystone tenant-list' and 'keystone role-list' ?
>>
>> -Dheerendra
>>
>>
>> On Sun, Nov 24, 2013 at 5:35 AM, Karan Singh <karan.singh at csc.fi> wrote:
>>
>>> Please help I am in urgent need
>>>
>>>
>>> -------- Original message --------
>>> From: Karan Singh <ksingh at csc.fi>
>>> Date: 23/11/2013 18:24 (GMT+02:00)
>>> To: openstack at lists.openstack.org
>>> Subject: Error with Cinder **Need Urgent help** HIGH PRIORITY
>>>
>>>
>>> Hello Openstack Community Members.
>>>
>>> I need your quick support on my issue related to Cinder.
>>>
>>>
>>> *1 . Error Logs from cinder/api.log*
>>>
>>> 2013-11-23 18:08:02.037 29478 INFO urllib3.connectionpool [-] Starting
>>> new HTTP connection (1): 127.0.0.1
>>> 2013-11-23 18:08:02.100 29478 WARNING
>>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone
>>> service: {u'error': {u'message': u'The request you have made requires
>>> authentication.', u'code': 401, u'title': u'Unauthorized'}}
>>> 2013-11-23 18:08:02.101 29478 WARNING
>>> keystoneclient.middleware.auth_token [-] Authorization failed for token
>>> d675640b9346a631549c85c156159fb9
>>> 2013-11-23 18:08:02.102 29478 INFO keystoneclient.middleware.auth_token
>>> [-] Invalid user token - rejecting request
>>> 2013-11-23 18:08:02.362 29478 INFO urllib3.connectionpool [-] Starting
>>> new HTTP connection (1): 127.0.0.1
>>> 2013-11-23 18:08:02.434 29478 WARNING
>>> keystoneclient.middleware.auth_token [-] Unexpected response from keystone
>>> service: {u'error': {u'message': u'The request you have made requires
>>> authentication.', u'code': 401, u'title': u'Unauthorized'}}
>>> 2013-11-23 18:08:02.435 29478 WARNING
>>> keystoneclient.middleware.auth_token [-] Authorization failed for token
>>> 03aee2508b2c4132a9c23b382c6ba284
>>> 2013-11-23 18:08:02.435 29478 INFO keystoneclient.middleware.auth_token
>>> [-] Invalid user token - rejecting request
>>>
>>>
>>>
>>> *2 . Errors from cinder list command output *
>>>
>>> [root at rdo cinder]# cinder list
>>>
>>> ERROR: Unauthorized (HTTP 401)
>>> [root at rdo cinder]#
>>>
>>>
>>> *3. Output from cinder/api-paste.ini*
>>>
>>> [filter:keystonecontext]
>>> paste.filter_factory =
>>> cinder.api.middleware.auth:CinderKeystoneContext.factory
>>>
>>> [filter:authtoken]
>>> paste.filter_factory =
>>> keystoneclient.middleware.auth_token:filter_factory
>>> service_protocol = http
>>> service_host = 127.0.0.1
>>> service_port = 5000
>>> signing_dir = /var/lib/cinder
>>>
>>> auth_host = 127.0.0.1
>>> auth_port = 35357
>>> auth_protocol = http
>>> admin_tenant_name = services
>>> admin_user = cinder
>>> admin_password = root
>>> auth_uri = http://127.0.0.1:5000/
>>>
>>>
>>>
>>> *4. Output from cinder/cinder.conf*
>>>
>>>
>>> rootwrap_config=/etc/cinder/rootwrap.conf
>>> sql_connection = mysql://cinder:root@localhost/cinder
>>> api_paste_config = /etc/cinder/api-paste.ini
>>>
>>> iscsi_helper=tgtadm
>>> volume_name_template = volume-%s
>>> volume_group = cinder-volumes
>>> verbose = True
>>> auth_strategy = keystone
>>> #osapi_volume_listen_port=5900
>>> [keystone_authtoken]
>>> admin_tenant_name = services
>>> admin_user = cinder
>>> admin_password = root
>>> auth_host = 127.0.0.1
>>> auth_port = 35357
>>> auth_protocol = http
>>> signing_dirname = /tmp/keystone-signing-cinder
>>>
>>>
>>> 5. All the components from Horizon web interface works fine except ,
>>> VOLUME ( cinder component ) , as soon as i click on volume it throws errors
>>>  *Error: Unauthorised: Unable to retrieve volume list.  Error:
>>> Unauthorised: Unable to retrieve volume types*
>>>
>>> 6. Keystone has cinder user
>>>
>>> [root at rdo cinder]# keystone user-list
>>>
>>> +----------------------------------+------------+---------+----------------------+
>>> | id | name | enabled | email |
>>>
>>> +----------------------------------+------------+---------+----------------------+
>>> | 99f8019ba2694d78a680a5de46aa1afd | admin | True | test at test.com |
>>> | ee6de67df5bf4498bd477e2a973f393f | alt_demo | True | |
>>> | f632591a717c4f9b91c4ebfdc8eb86ef | ceilometer | True |
>>> ceilometer at localhost |
>>> | be199f4da0e84abb9f0ca069f0a4b408 | cinder | True |
>>> cinder at localhost.com |
>>> | 79071cdc981d4f5787a8d1abebac7eec | demo | True | |
>>> | 8d8d4107a72d4cdd838f3cc8f643a0f2 | glance | True | glance at localhost |
>>> | 901d979b861d45ada359252da45082f6 | neutron | True | neutron at localhost|
>>> | 0e371ae93dce4ea392224354929c8257 | nova | True | nova at localhost |
>>> | 069624d0554a432bb1f57629bde6ebc8 | swift | True | swift at localhost |
>>>
>>> +----------------------------------+------------+---------+----------------------+
>>> [root at rdo cinder]#
>>>
>>>
>>> 7. I am able to connect to mysql db  with user cinder and password (
>>> root )
>>>
>>>
>>> [root at rdo cinder]# mysql -u cinder -p
>>> Enter password:
>>> Welcome to the MySQL monitor. Commands end with ; or \g.
>>> Your MySQL connection id is 1230
>>> Server version: 5.1.69 Source distribution
>>>
>>> Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights
>>> reserved.
>>>
>>> Oracle is a registered trademark of Oracle Corporation and/or its
>>> affiliates. Other names may be trademarks of their respective
>>> owners.
>>>
>>> Type 'help;' or '\h' for help. Type '\c' to clear the current input
>>> statement.
>>>
>>> mysql>
>>>
>>>
>>> I have set up openstack using RDO , i tried all  possible ways but
>>> cinder ( volumes ) are not working , except everything works well , please
>>> advise a solution ASAP , i am on a very tight deadline.
>>>
>>>
>>> Waiting for your quick responses.
>>>
>>> Karan Singh
>>> CSC - IT Center for Science Ltd.
>>> P.O. Box 405, FI-02101 Espoo, FINLAND
>>> http://www.csc.fi/ | +358 (0) 503 812758
>>>
>>>
>>>
>>> _______________________________________________
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to     : openstack at lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20131124/442f6c5f/attachment.html>