[Openstack] Swift not detect Keystone and Authtoken

Hua ZZ Zhang zhuadl at cn.ibm.com
Thu Sep 26 07:09:57 UTC 2013


you can disable https and test if http protocol works or not.
if it works, it might be the configuration problem of ssl.

- Edward Zhang


                                                                           
             Mahardhika Gilang                                             
             <mahardika.gilang                                             
             @andalabs.com>                                             To 
                                       Hua ZZ Zhang/China/IBM at IBMCN,       
             2013-09-26 下午                                            cc 
             02:18                     Openstack Milis                     
                                       <openstack at lists.openstack.org>     
                                                                   Subject 
                                       Re: [Openstack] Swift not detect    
                                       Keystone and Authtoken              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




When i put https on it, error come up
Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:504:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol


On 9/24/2013 10:09 PM, Hua ZZ Zhang wrote:


      try https since you have enabled it in proxy configuration.
      swift -V 2 -A https://localhost:5000/v2.0 -U admin:admin -K ADMIN
      stat
      or:
      swift --os-auth-url https://localhost:5000/v2.0 --os-tenant-name
      admin --os-username admin --os-password ADMIN stat

      -Zhang Hua(Edward)


      Inactive hide details for Mahardhika Gilang ---2013-09-24
          下
      午 06:12:13---Mahardhika Gilang
      <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-24 下午
      06:12:13---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 下午 06:13                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           



      Hi, thanks it work, but i fail when run this command
      $ swift -V 2 -A http://localhost:5000/v2.0 -U admin:admin -K ADMIN
      stat

      [Errno -5] No address associated with hostname

      On 9/24/2013 4:58 PM, Hua ZZ Zhang wrote:



            try the sample here:
            http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html


            Best Regards,
                                                                             
       Edward Zhang(张华)                    地址:北京市海淀区东北旺西路8号  
       Advisory Software Engineer            中关村软件园28号楼 环宇大厦3层  
       Software Standards & Open             邮编:100193                    
       Source Software                       Address: 3F Ring, Building 28   
       Emerging Technology Institute         Zhongguancun Software Park, 8   
       (ETI)                                 Dongbeiwang West Road, Haidian  
       IBM China Software Development        District, Beijing, P.R.C.100193 
       Lab                                                                   
       e-mail: zhuadl at cn.ibm.com                                             
       Notes ID: Hua ZZ                                                      
       Zhang/China/IBM                                                       
       Tel: 86-10-82450483                                                   
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



            Inactive hide details for Mahardhika Gilang ---09/24/2013
            04:33:12 PM---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---09/24/2013
            04:33:12 PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       09/24/2013 04:34 PM                                                 
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            I got this error
            LookupError: No loader given in section 'filter:keystoneauth'

            On 9/24/2013 2:17 PM, Hua ZZ Zhang wrote:

                  I don't get what does it mean for "this syntax give same
                  result"?
                  what is your version of swift and keystone?
                  Here's my suggestion for 3 sections in the proxy server
                  paste file:

                        [pipeline:main]
                        pipeline = catch_errors healthcheck proxy-logging
                        cache authtoken keystoneauth proxy-logging
                        proxy-server

                        [filter:authtoken]
                        paste.filter_factory = keystoneclient
                        .middleware.auth_token:filter_factory
                        signing_dir = /var/cache/swift/
                        auth_uri = http://10.10.10.40:5000/
                        auth_host = 10.10.10.40
                        #auth_uri = http://192.168.7.85:5000/
                        #auth_host = 192.168.7.85
                        auth_port = 35357
                        auth_protocol = https
                        admin_tenant_name = service
                        admin_user = swift
                        admin_password = admin
                        #cache = swift.cache
                        auth_token = admin

                        [filter:keystoneauth]
                        #use = egg:swift#keystoneauth
                        operator_roles = Member,admin
                        is_admin = true

                  http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html



                  Inactive hide details for Mahardhika Gilang
                  ---2013-09-24 上午 11:58:24---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>Mahardhika Gilang
                  ---2013-09-24 上午 11:58:24---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 上午 11:59                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                  Hi, i've try change with auth_token and it's work, but
                  does this syntax give same result?

                  On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:

                        try this:
                        paste.filter_factory =
                        keystoneclient.middleware.auth_token:filter_factory



                        Inactive hide details for Mahardhika Gilang
                        ---2013-09-23 下午 07:15:28---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>Mahardhika Gilang
                        ---2013-09-23 下午 07:15:28---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-23 下午 07:16                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                        Hi, thanks for answering, i believe it work till i
                        stuck at this error
                        ImportError: No module named swift_auth

                        it's on filter:keystone part
                        paste.filter_factory =
                        keystone.middleware.swift_auth:filter_factory

                        how to solved this issue?
                        On 9/23/2013 4:53 PM, Hua ZZ Zhang wrote:


                              The authtoken and keystone middleware should
                              be put ahead of proxy-server.
                              you need to change the main pipeline as
                              below:

                              [pipeline:main]
                              pipeline = catch_errors healthcheck
                              proxy-logging cache authtoken keystone
                              proxy-logging proxy-server

                              Best Regards,
                                                                             
       Edward Zhang(张华)                                                    
                                                                             


                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



            Inactive hide details for Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs.                                         
       com>                                                                
                                                                           
                                                                        To 
       09/23/2013 05:01 PM                                                 
                                                    Openstack Milis        
                                                    <openstack at lists.opens 
                                                    tack.org>,             
                                                                           
                                                                        cc 
                                                                           
                                                                           
                                                                   Subject 
                                                                           
                                                    [Openstack] Swift not  
                                                    detect Keystone and    
                                                    Authtoken              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            Hi all
            i've got an issue when i want to used keystone for
            authentication on
            swift proxy node.
            i got this when run #swift-init proxy restart
            LookupError: No section 'authtoken'
            LookupError: No section 'keystone'

            here's my proxy-server.conf
            [DEFAULT]
            cert_file = /etc/swift/cert.crt
            key_file = /etc/swift/cert.key
            bind_port = 8080
            #bind_port = 443
            workers = 8
            user = swift
            swift_dir = /etc/swift

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            tempauth
            proxy-logging proxy-server keystone authtoken

            [app:proxy-server]
            use = egg:swift#proxy
            allow_account_management = true
            account_autocreate = true

            [filter:authtoken]
            #use = egg:swift:authtoken
            paste.filter_factory =
            keystone.middleware.auth_token:filter_factory
            signing_dir = /var/cache/swift/
            auth_uri = http://10.10.10.40:5000/
            auth_host = 10.10.10.40
            #auth_uri = http://192.168.7.85:5000/
            #auth_host = 192.168.7.85
            auth_port = 35357
            auth_protocol = https
            admin_tenant_name = service
            admin_user = swift
            admin_password = admin
            #cache = swift.cache
            auth_token = admin

            [filter:catch_errors]
            use = egg:swift#catch_errors

            [filter:proxy-logging]
            use = egg:swift#proxy_logging

            #[filter:tempauth]
            #use = egg:swift#tempauth
            #user_system_root = testpass .admin
            https://10.10.10.40:8080/v1/AUTH_system
            #user_test_tester = testing .admin
            https://10.10.10.40:8080/v1/AUTH_test

            [filter:healthcheck]
            use = egg:swift#healthcheck

            [filter:cache]
            use = egg:swift#memcache
            memcache_servers = 10.10.10.40:11211

            [filter:keystone]
            #use = egg:swift#keystone
            paste.filter_factory =
            keystone.middleware.swift_auth:filter_factory
            operator_roles = Member,admin
            is_admin = true


            Please help
            thanks

            --
            Regards,
            Mahardhika Gilang



            _______________________________________________
            Mailing list:
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
            Post to     : openstack at lists.openstack.org
            Unsubscribe :
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


            --
            Regards,
            Mahardhika Gilang



            --
            Regards,
            Mahardhika Gilang





-
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/c695cd40/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/c695cd40/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic08490.gif
Type: image/gif
Size: 1255 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/c695cd40/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecblank.gif
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/c695cd40/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: A1458000.gif
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/c695cd40/attachment-0003.gif>


More information about the Openstack mailing list