[Openstack] Swift Fail Unauthorized

Adam Young ayoung at redhat.com
Mon Sep 16 15:01:16 UTC 2013


On 09/16/2013 10:29 AM, Andalabs wrote:
> Sorry i just got that , thats in prox-conf.conf
> I just add that keystone authoken lines, and restart swift proxy 
> server, but that 3 files (.pem) not appear on signing_dir path.

Could be permissions or SELinux.  I address both in the troubleshooting 
article.

>
> Email-an dari Kokpit
>
> On 16 Sep 2013, at 09:01 PM, Adam Young <ayoung at redhat.com 
> <mailto:ayoung at redhat.com>> wrote:
>
>> On 09/16/2013 07:02 AM, Mahardhika wrote:
>>> Hi Adam, in my proxy node, am i must create keystone.conf ?
>> Sorry, not sure what you mean by this?  In most deployements, there 
>> is a file /etc/keystone/keystone.conf created for you.
>>
>>> currently i used keystone that same as on controller node, so i can 
>>> get all tenant list with *#keystone tenant-list *command on proxy node.
>>> On your blog post, in signing_dir part, where i suppose to check?
>> Depends on the config file for your application.  THe config file 
>> options are specified in auth_token middleware, buyt are read from 
>> swifts, nova, or whatever the remote services config file.  So it 
>> would be swift.conf or something comparable.
>>
>> https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/middleware/auth_token.py#L199
>>
>>
>>> sorry i just confused in this part
>>> thanks
>>>
>>> On 9/13/2013 11:40 PM, Adam Young wrote:
>>>> On 09/13/2013 03:25 AM, Mahardhika wrote:
>>>>> Hi, still i can't get out from this issue, can you please lead me. 
>>>>> I follow this guide
>>>>> http://docs.openstack.org/developer/swift/howto_installmultinode.html
>>>>>
>>>>> On 9/12/2013 9:24 AM, Kuo Hugo wrote:
>>>>>> You can observe the log out put while issue the request.
>>>>>> I vote on memcache related ...
>>>>>>
>>>>>> +Hugo Kuo+
>>>>>> (+886) 935004793
>>>>>>
>>>>>>
>>>>>> 2013/9/11 Mahardhika <mahardika.gilang at andalabs.com 
>>>>>> <mailto:mahardika.gilang at andalabs.com>>
>>>>>>
>>>>>>     Hi, following this guide
>>>>>>     http://docs.openstack.org/developer/swift/development_saio.html#partition-section
>>>>>>     i am stuck at step 14 = Check that you can GET
>>>>>>     account:curl-v-H'X-Auth-Token:<token-from-x-auth-token-above>'<url-from-x-storage-url-above>
>>>>>>
>>>>>>     *I run this command*
>>>>>>     #curl -v -H 'X-Auth-Token:
>>>>>>     AUTH_tkebd882e8ac094a08a1842811e025f2a8'
>>>>>>     http://127.0.0.1:8080/v1/AUTH_swift
>>>>>>
>>>>
>>>> Can you use this token to talk to Keystone?
>>>>
>>>> Have you gone through the troubleshooting steps I posted here?
>>>>
>>>> http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/
>>>>
>>>>>>     and get
>>>>>>     ===============
>>>>>>     /* About to connect() to 127.0.0.1 port 8080 (#0)//
>>>>>>     //*   Trying 127.0.0.1...//
>>>>>>     //* Connected to 127.0.0.1 (127.0.0.1) port 8080 (#0)//
>>>>>>     //> GET /v1/AUTH_swift HTTP/1.1//
>>>>>>     //> User-Agent: curl/7.29.0//
>>>>>>     //> Host: 127.0.0.1:8080 <http://127.0.0.1:8080>//
>>>>>>     //> Accept: */*//
>>>>>>     //> X-Auth-Token: AUTH_tkebd882e8ac094a08a1842811e025f2a8//
>>>>>>     //>//
>>>>>>     //< HTTP/1.1 401 Unauthorized//
>>>>>>     //< Content-Length: 131//
>>>>>>     //< Content-Type: text/html; charset=UTF-8//
>>>>>>     //< Date: Wed, 11 Sep 2013 04:53:35 GMT//
>>>>>>     //<//
>>>>>>     //* Connection #0 to host 127.0.0.1 left intact/
>>>>>>     ===========
>>>>>>
>>>>>>     *Why i get unauthorized?**
>>>>>>     **this my proxy-server.conf*
>>>>>>
>>>>>>     /[DEFAULT]//
>>>>>>     //#cert_file = /etc/swift/cert.crt//
>>>>>>     //#key_file = /etc/swift/cert.key//
>>>>>>     //bind_port = 8080//
>>>>>>     //#bind_port = 443//
>>>>>>     //workers = 8//
>>>>>>     //user = swift//
>>>>>>     //log_facility = LOG_LOCAL1//
>>>>>>     //eventlet_debug = true//
>>>>>>     //
>>>>>>     //[pipeline:main]//
>>>>>>     //pipeline = healthcheck cache tempauth proxy-logging
>>>>>>     proxy-server//
>>>>>>     //
>>>>>>     //[app:proxy-server]//
>>>>>>     //use = egg:swift#proxy//
>>>>>>     //allow_account_management = true//
>>>>>>     //account_autocreate = true//
>>>>>>     //
>>>>>>     //[filter:tempauth]//
>>>>>>     //use = egg:swift#tempauth//
>>>>>>     //user_admin_admin = admin .admin .reseller_admin//
>>>>>>     //user_test_tester = testing .admin//
>>>>>>     //user_test2_tester2 = testing2 .admin//
>>>>>>     //user_test_tester3 = testing3//
>>>>>>     //#user_system_root = testpass .admin
>>>>>>     https://$PROXY_LOCAL_NET_IP:8080/v1/AUTH_system//
>>>>>>     //user_swift_swift = pass .admin//
>>>>>>     //
>>>>>>     //[filter:healthcheck]//
>>>>>>     //use = egg:swift#healthcheck//
>>>>>>     //
>>>>>>     //[filter:cache]//
>>>>>>     //use = egg:swift#memcache//
>>>>>>     //#memcache_servers = $PROXY_LOCAL_NET_IP:11211//
>>>>>>     //
>>>>>>     //[filter:proxy-logging]//
>>>>>>     //use = egg:swift#proxy_logging//
>>>>>>     /
>>>>>>     Please help me out
>>>>>>     thanks
>>>>>>
>>>>>>     -- 
>>>>>>     Regards,
>>>>>>     Mahardhika Gilang
>>>>>>
>>>>>>
>>>>>>
>>>>>>     _______________________________________________
>>>>>>     Mailing list:
>>>>>>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>>>     Post to     : openstack at lists.openstack.org
>>>>>>     <mailto:openstack at lists.openstack.org>
>>>>>>     Unsubscribe :
>>>>>>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> -- 
>>>>> Regards,
>>>>> Mahardhika Gilang
>>>>>
>>>>> *PT. Andalabs Technology *
>>>>> Gedung Gravira
>>>>> Jl. Cideng Barat no. 54
>>>>> Jakarta Pusat 10150
>>>>>
>>>>> HP : 0852 139 55861
>>>>> Email : mahardika.gilang at andalabs.com
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>> Post to     :openstack at lists.openstack.org
>>>>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list:http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>> Post to     :openstack at lists.openstack.org
>>>> Unsubscribe :http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>> -- 
>>> Regards,
>>> Mahardhika Gilang
>>>
>>> *PT. Andalabs Technology *
>>> Gedung Gravira
>>> Jl. Cideng Barat no. 54
>>> Jakarta Pusat 10150
>>>
>>> HP : 0852 139 55861
>>> Email : mahardika.gilang at andalabs.com
>>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130916/275b2d8f/attachment.html>


More information about the Openstack mailing list