[Openstack] Swift Fail Unauthorized

Adam Young ayoung at redhat.com
Mon Sep 16 14:01:10 UTC 2013


On 09/16/2013 07:02 AM, Mahardhika wrote:
> Hi Adam, in my proxy node, am i must create keystone.conf ?
Sorry, not sure what you mean by this?  In most deployements, there is a 
file /etc/keystone/keystone.conf created for you.

> currently i used keystone that same as on controller node, so i can 
> get all tenant list with *#keystone tenant-list *command on proxy node.
> On your blog post, in signing_dir part, where i suppose to check?
Depends on the config file for your application.  THe config file 
options are specified in auth_token middleware, buyt are read from 
swifts, nova, or whatever the remote services config file.  So it would 
be swift.conf or something comparable.

https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/middleware/auth_token.py#L199


> sorry i just confused in this part
> thanks
>
> On 9/13/2013 11:40 PM, Adam Young wrote:
>> On 09/13/2013 03:25 AM, Mahardhika wrote:
>>> Hi, still i can't get out from this issue, can you please lead me. I 
>>> follow this guide
>>> http://docs.openstack.org/developer/swift/howto_installmultinode.html
>>>
>>> On 9/12/2013 9:24 AM, Kuo Hugo wrote:
>>>> You can observe the log out put while issue the request.
>>>> I vote on memcache related ...
>>>>
>>>> +Hugo Kuo+
>>>> (+886) 935004793
>>>>
>>>>
>>>> 2013/9/11 Mahardhika <mahardika.gilang at andalabs.com 
>>>> <mailto:mahardika.gilang at andalabs.com>>
>>>>
>>>>     Hi, following this guide
>>>>     http://docs.openstack.org/developer/swift/development_saio.html#partition-section
>>>>     i am stuck at step 14 = Check that you can GET
>>>>     account:curl-v-H'X-Auth-Token:<token-from-x-auth-token-above>'<url-from-x-storage-url-above>
>>>>
>>>>     *I run this command*
>>>>     #curl -v -H 'X-Auth-Token:
>>>>     AUTH_tkebd882e8ac094a08a1842811e025f2a8'
>>>>     http://127.0.0.1:8080/v1/AUTH_swift
>>>>
>>
>> Can you use this token to talk to Keystone?
>>
>> Have you gone through the troubleshooting steps I posted here?
>>
>> http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/
>>
>>>>     and get
>>>>     ===============
>>>>     /* About to connect() to 127.0.0.1 port 8080 (#0)//
>>>>     //*   Trying 127.0.0.1...//
>>>>     //* Connected to 127.0.0.1 (127.0.0.1) port 8080 (#0)//
>>>>     //> GET /v1/AUTH_swift HTTP/1.1//
>>>>     //> User-Agent: curl/7.29.0//
>>>>     //> Host: 127.0.0.1:8080 <http://127.0.0.1:8080>//
>>>>     //> Accept: */*//
>>>>     //> X-Auth-Token: AUTH_tkebd882e8ac094a08a1842811e025f2a8//
>>>>     //>//
>>>>     //< HTTP/1.1 401 Unauthorized//
>>>>     //< Content-Length: 131//
>>>>     //< Content-Type: text/html; charset=UTF-8//
>>>>     //< Date: Wed, 11 Sep 2013 04:53:35 GMT//
>>>>     //<//
>>>>     //* Connection #0 to host 127.0.0.1 left intact/
>>>>     ===========
>>>>
>>>>     *Why i get unauthorized?**
>>>>     **this my proxy-server.conf*
>>>>
>>>>     /[DEFAULT]//
>>>>     //#cert_file = /etc/swift/cert.crt//
>>>>     //#key_file = /etc/swift/cert.key//
>>>>     //bind_port = 8080//
>>>>     //#bind_port = 443//
>>>>     //workers = 8//
>>>>     //user = swift//
>>>>     //log_facility = LOG_LOCAL1//
>>>>     //eventlet_debug = true//
>>>>     //
>>>>     //[pipeline:main]//
>>>>     //pipeline = healthcheck cache tempauth proxy-logging
>>>>     proxy-server//
>>>>     //
>>>>     //[app:proxy-server]//
>>>>     //use = egg:swift#proxy//
>>>>     //allow_account_management = true//
>>>>     //account_autocreate = true//
>>>>     //
>>>>     //[filter:tempauth]//
>>>>     //use = egg:swift#tempauth//
>>>>     //user_admin_admin = admin .admin .reseller_admin//
>>>>     //user_test_tester = testing .admin//
>>>>     //user_test2_tester2 = testing2 .admin//
>>>>     //user_test_tester3 = testing3//
>>>>     //#user_system_root = testpass .admin
>>>>     https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system//
>>>>     //user_swift_swift = pass .admin//
>>>>     //
>>>>     //[filter:healthcheck]//
>>>>     //use = egg:swift#healthcheck//
>>>>     //
>>>>     //[filter:cache]//
>>>>     //use = egg:swift#memcache//
>>>>     //#memcache_servers = $PROXY_LOCAL_NET_IP:11211//
>>>>     //
>>>>     //[filter:proxy-logging]//
>>>>     //use = egg:swift#proxy_logging//
>>>>     /
>>>>     Please help me out
>>>>     thanks
>>>>
>>>>     -- 
>>>>     Regards,
>>>>     Mahardhika Gilang
>>>>
>>>>
>>>>
>>>>     _______________________________________________
>>>>     Mailing list:
>>>>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>     Post to     : openstack at lists.openstack.org
>>>>     <mailto:openstack at lists.openstack.org>
>>>>     Unsubscribe :
>>>>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>
>>>>
>>>
>>>
>>> -- 
>>> Regards,
>>> Mahardhika Gilang
>>>
>>> *PT. Andalabs Technology *
>>> Gedung Gravira
>>> Jl. Cideng Barat no. 54
>>> Jakarta Pusat 10150
>>>
>>> HP : 0852 139 55861
>>> Email : mahardika.gilang at andalabs.com
>>>
>>>
>>> _______________________________________________
>>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to     :openstack at lists.openstack.org
>>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>>
>> _______________________________________________
>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     :openstack at lists.openstack.org
>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
> -- 
> Regards,
> Mahardhika Gilang
>
> *PT. Andalabs Technology *
> Gedung Gravira
> Jl. Cideng Barat no. 54
> Jakarta Pusat 10150
>
> HP : 0852 139 55861
> Email : mahardika.gilang at andalabs.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130916/897d3217/attachment.html>


More information about the Openstack mailing list