[Openstack] Swift Fail Unauthorized
Adam Young
ayoung at redhat.com
Mon Sep 16 15:01:16 UTC 2013
On 09/16/2013 10:29 AM, Andalabs wrote:
> Sorry i just got that , thats in prox-conf.conf
> I just add that keystone authoken lines, and restart swift proxy
> server, but that 3 files (.pem) not appear on signing_dir path.
Could be permissions or SELinux. I address both in the troubleshooting
article.
>
> Email-an dari Kokpit
>
> On 16 Sep 2013, at 09:01 PM, Adam Young <ayoung at redhat.com
> <mailto:ayoung at redhat.com>> wrote:
>
>> On 09/16/2013 07:02 AM, Mahardhika wrote:
>>> Hi Adam, in my proxy node, am i must create keystone.conf ?
>> Sorry, not sure what you mean by this? In most deployements, there
>> is a file /etc/keystone/keystone.conf created for you.
>>
>>> currently i used keystone that same as on controller node, so i can
>>> get all tenant list with *#keystone tenant-list *command on proxy node.
>>> On your blog post, in signing_dir part, where i suppose to check?
>> Depends on the config file for your application. THe config file
>> options are specified in auth_token middleware, buyt are read from
>> swifts, nova, or whatever the remote services config file. So it
>> would be swift.conf or something comparable.
>>
>> https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/middleware/auth_token.py#L199
>>
>>
>>> sorry i just confused in this part
>>> thanks
>>>
>>> On 9/13/2013 11:40 PM, Adam Young wrote:
>>>> On 09/13/2013 03:25 AM, Mahardhika wrote:
>>>>> Hi, still i can't get out from this issue, can you please lead me.
>>>>> I follow this guide
>>>>> http://docs.openstack.org/developer/swift/howto_installmultinode.html
>>>>>
>>>>> On 9/12/2013 9:24 AM, Kuo Hugo wrote:
>>>>>> You can observe the log out put while issue the request.
>>>>>> I vote on memcache related ...
>>>>>>
>>>>>> +Hugo Kuo+
>>>>>> (+886) 935004793
>>>>>>
>>>>>>
>>>>>> 2013/9/11 Mahardhika <mahardika.gilang at andalabs.com
>>>>>> <mailto:mahardika.gilang at andalabs.com>>
>>>>>>
>>>>>> Hi, following this guide
>>>>>> http://docs.openstack.org/developer/swift/development_saio.html#partition-section
>>>>>> i am stuck at step 14 = Check that you can GET
>>>>>> account:curl-v-H'X-Auth-Token:<token-from-x-auth-token-above>'<url-from-x-storage-url-above>
>>>>>>
>>>>>> *I run this command*
>>>>>> #curl -v -H 'X-Auth-Token:
>>>>>> AUTH_tkebd882e8ac094a08a1842811e025f2a8'
>>>>>> http://127.0.0.1:8080/v1/AUTH_swift
>>>>>>
>>>>
>>>> Can you use this token to talk to Keystone?
>>>>
>>>> Have you gone through the troubleshooting steps I posted here?
>>>>
>>>> http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/
>>>>
>>>>>> and get
>>>>>> ===============
>>>>>> /* About to connect() to 127.0.0.1 port 8080 (#0)//
>>>>>> //* Trying 127.0.0.1...//
>>>>>> //* Connected to 127.0.0.1 (127.0.0.1) port 8080 (#0)//
>>>>>> //> GET /v1/AUTH_swift HTTP/1.1//
>>>>>> //> User-Agent: curl/7.29.0//
>>>>>> //> Host: 127.0.0.1:8080 <http://127.0.0.1:8080>//
>>>>>> //> Accept: */*//
>>>>>> //> X-Auth-Token: AUTH_tkebd882e8ac094a08a1842811e025f2a8//
>>>>>> //>//
>>>>>> //< HTTP/1.1 401 Unauthorized//
>>>>>> //< Content-Length: 131//
>>>>>> //< Content-Type: text/html; charset=UTF-8//
>>>>>> //< Date: Wed, 11 Sep 2013 04:53:35 GMT//
>>>>>> //<//
>>>>>> //* Connection #0 to host 127.0.0.1 left intact/
>>>>>> ===========
>>>>>>
>>>>>> *Why i get unauthorized?**
>>>>>> **this my proxy-server.conf*
>>>>>>
>>>>>> /[DEFAULT]//
>>>>>> //#cert_file = /etc/swift/cert.crt//
>>>>>> //#key_file = /etc/swift/cert.key//
>>>>>> //bind_port = 8080//
>>>>>> //#bind_port = 443//
>>>>>> //workers = 8//
>>>>>> //user = swift//
>>>>>> //log_facility = LOG_LOCAL1//
>>>>>> //eventlet_debug = true//
>>>>>> //
>>>>>> //[pipeline:main]//
>>>>>> //pipeline = healthcheck cache tempauth proxy-logging
>>>>>> proxy-server//
>>>>>> //
>>>>>> //[app:proxy-server]//
>>>>>> //use = egg:swift#proxy//
>>>>>> //allow_account_management = true//
>>>>>> //account_autocreate = true//
>>>>>> //
>>>>>> //[filter:tempauth]//
>>>>>> //use = egg:swift#tempauth//
>>>>>> //user_admin_admin = admin .admin .reseller_admin//
>>>>>> //user_test_tester = testing .admin//
>>>>>> //user_test2_tester2 = testing2 .admin//
>>>>>> //user_test_tester3 = testing3//
>>>>>> //#user_system_root = testpass .admin
>>>>>> https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system//
>>>>>> //user_swift_swift = pass .admin//
>>>>>> //
>>>>>> //[filter:healthcheck]//
>>>>>> //use = egg:swift#healthcheck//
>>>>>> //
>>>>>> //[filter:cache]//
>>>>>> //use = egg:swift#memcache//
>>>>>> //#memcache_servers = $PROXY_LOCAL_NET_IP:11211//
>>>>>> //
>>>>>> //[filter:proxy-logging]//
>>>>>> //use = egg:swift#proxy_logging//
>>>>>> /
>>>>>> Please help me out
>>>>>> thanks
>>>>>>
>>>>>> --
>>>>>> Regards,
>>>>>> Mahardhika Gilang
>>>>>>
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Mailing list:
>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>>> Post to : openstack at lists.openstack.org
>>>>>> <mailto:openstack at lists.openstack.org>
>>>>>> Unsubscribe :
>>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Regards,
>>>>> Mahardhika Gilang
>>>>>
>>>>> *PT. Andalabs Technology *
>>>>> Gedung Gravira
>>>>> Jl. Cideng Barat no. 54
>>>>> Jakarta Pusat 10150
>>>>>
>>>>> HP : 0852 139 55861
>>>>> Email : mahardika.gilang at andalabs.com
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>> Post to :openstack at lists.openstack.org
>>>>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>> Post to :openstack at lists.openstack.org
>>>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>> --
>>> Regards,
>>> Mahardhika Gilang
>>>
>>> *PT. Andalabs Technology *
>>> Gedung Gravira
>>> Jl. Cideng Barat no. 54
>>> Jakarta Pusat 10150
>>>
>>> HP : 0852 139 55861
>>> Email : mahardika.gilang at andalabs.com
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130916/275b2d8f/attachment.html>
More information about the Openstack
mailing list