[Openstack] Swift not detect Keystone and Authtoken

Hua ZZ Zhang zhuadl at cn.ibm.com
Thu Sep 26 07:43:13 UTC 2013


Have you enabled Linux Firewall which block the request?

-Zhang Hua(Edward)



                                                                           
             Mahardhika Gilang                                             
             <mahardika.gilang                                             
             @andalabs.com>                                             To 
                                       Hua ZZ Zhang/China/IBM at IBMCN,       
             2013-09-26 下午                                            cc 
             03:29                     Openstack Milis                     
                                       <openstack at lists.openstack.org>     
                                                                   Subject 
                                       Re: [Openstack] Swift not detect    
                                       Keystone and Authtoken              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




I have run without https and it turn this (even i run on keystone server)
[Errno -5] No address associated with hostname


On 9/26/2013 2:09 PM, Hua ZZ Zhang wrote:


      you can disable https and test if http protocol works or not.
      if it works, it might be the configuration problem of ssl.

      - Edward Zhang

      Inactive hide details for Mahardhika Gilang ---2013-09-26
          下
      午 02:17:18---Mahardhika Gilang
      <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26 下午
      02:17:18---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-26 下午 02:18                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           



      When i put https on it, error come up
      Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:504:
      error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol


      On 9/24/2013 10:09 PM, Hua ZZ Zhang wrote:



            try https since you have enabled it in proxy configuration.
            swift -V 2 -A https://localhost:5000/v2.0 -U admin:admin -K
            ADMIN stat
            or:
            swift --os-auth-url https://localhost:5000/v2.0
            --os-tenant-name admin --os-username admin --os-password ADMIN
            stat

            -Zhang Hua(Edward)


            Inactive hide details for Mahardhika Gilang ---2013-09-24
            下午 06:12:13---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-24
            下午 06:12:13---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 下午 06:13                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            Hi, thanks it work, but i fail when run this command
            $ swift -V 2 -A http://localhost:5000/v2.0 -U admin:admin -K
            ADMIN stat

            [Errno -5] No address associated with hostname

            On 9/24/2013 4:58 PM, Hua ZZ Zhang wrote:


                  try the sample here:
                  http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html


                  Best Regards,
                                                                             
       Edward Zhang(张华)                    地址:北京市海淀区东北旺西路8号  
       Advisory Software Engineer            中关村软件园28号楼 环宇大厦3层  
       Software Standards & Open             邮编:100193                    
       Source Software                       Address: 3F Ring, Building 28   
       Emerging Technology Institute         Zhongguancun Software Park, 8   
       (ETI)                                 Dongbeiwang West Road, Haidian  
       IBM China Software Development        District, Beijing, P.R.C.100193 
       Lab                                                                   
       e-mail: zhuadl at cn.ibm.com                                             
       Notes ID: Hua ZZ                                                      
       Zhang/China/IBM                                                       
       Tel: 86-10-82450483                                                   
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



                  Inactive hide details for Mahardhika Gilang
                  ---09/24/2013 04:33:12 PM---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>Mahardhika Gilang
                  ---09/24/2013 04:33:12 PM---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       09/24/2013 04:34 PM                                                 
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                  I got this error
                  LookupError: No loader given in section '
                  filter:keystoneauth'

                  On 9/24/2013 2:17 PM, Hua ZZ Zhang wrote:

                        I don't get what does it mean for "this syntax give
                        same result"?
                        what is your version of swift and keystone?
                        Here's my suggestion for 3 sections in the proxy
                        server paste file:

                              [pipeline:main]
                              pipeline = catch_errors healthcheck
                              proxy-logging cache authtoken keystoneauth
                              proxy-logging proxy-server

                              [filter:authtoken]
                              paste.filter_factory = keystoneclient
                              .middleware.auth_token:filter_factory
                              signing_dir = /var/cache/swift/
                              auth_uri = http://10.10.10.40:5000/
                              auth_host = 10.10.10.40
                              #auth_uri = http://192.168.7.85:5000/
                              #auth_host = 192.168.7.85
                              auth_port = 35357
                              auth_protocol = https
                              admin_tenant_name = service
                              admin_user = swift
                              admin_password = admin
                              #cache = swift.cache
                              auth_token = admin

                              [filter:keystoneauth]
                              #use = egg:swift#keystoneauth
                              operator_roles = Member,admin
                              is_admin = true

                        http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html



                        Inactive hide details for Mahardhika Gilang
                        ---2013-09-24 上午 11:58:24---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>Mahardhika Gilang
                        ---2013-09-24 上午 11:58:24---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 上午 11:59                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                        Hi, i've try change with auth_token and it's work,
                        but does this syntax give same result?

                        On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:

                              try this:
                              paste.filter_factory =
                              keystoneclient.middleware.auth_token:filter_factory




                              Inactive hide details for Mahardhika Gilang
                              ---2013-09-23 下午 07:15:28---Mahardhika
                              Gilang
                              <mahardika.gilang at andalabs.com>Mahardhika
                              Gilang ---2013-09-23 下午
                              07:15:28---Mahardhika Gilang
                              <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-23 下午 07:16                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                              Hi, thanks for answering, i believe it work
                              till i stuck at this error
                              ImportError: No module named swift_auth

                              it's on filter:keystone part
                              paste.filter_factory =
                              keystone.middleware.swift_auth:filter_factory

                              how to solved this issue?
                              On 9/23/2013 4:53 PM, Hua ZZ Zhang wrote:


                                    The authtoken and keystone middleware
                                    should be put ahead of proxy-server.
                                    you need to change the main pipeline as
                                    below:

                                    [pipeline:main]
                                    pipeline = catch_errors healthcheck
                                    proxy-logging cache authtoken keystone
                                    proxy-logging proxy-server

                                    Best Regards,
                                                                             
       Edward Zhang(张华)                                                    
                                                                             


                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



            Inactive hide details for Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs.                                         
       com>                                                                
                                                                           
                                                                        To 
       09/23/2013 05:01 PM                                                 
                                                     Openstack Milis       
                                                     <openstack at lists.open 
                                                     stack.org>,           
                                                                           
                                                                        cc 
                                                                           
                                                                           
                                                                   Subject 
                                                                           
                                                     [Openstack] Swift not 
                                                     detect Keystone and   
                                                     Authtoken             
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            Hi all
            i've got an issue when i want to used keystone for
            authentication on
            swift proxy node.
            i got this when run #swift-init proxy restart
            LookupError: No section 'authtoken'
            LookupError: No section 'keystone'

            here's my proxy-server.conf
            [DEFAULT]
            cert_file = /etc/swift/cert.crt
            key_file = /etc/swift/cert.key
            bind_port = 8080
            #bind_port = 443
            workers = 8
            user = swift
            swift_dir = /etc/swift

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            tempauth
            proxy-logging proxy-server keystone authtoken

            [app:proxy-server]
            use = egg:swift#proxy
            allow_account_management = true
            account_autocreate = true

            [filter:authtoken]
            #use = egg:swift:authtoken
            paste.filter_factory =
            keystone.middleware.auth_token:filter_factory
            signing_dir = /var/cache/swift/
            auth_uri = http://10.10.10.40:5000/
            auth_host = 10.10.10.40
            #auth_uri = http://192.168.7.85:5000/
            #auth_host = 192.168.7.85
            auth_port = 35357
            auth_protocol = https
            admin_tenant_name = service
            admin_user = swift
            admin_password = admin
            #cache = swift.cache
            auth_token = admin

            [filter:catch_errors]
            use = egg:swift#catch_errors

            [filter:proxy-logging]
            use = egg:swift#proxy_logging

            #[filter:tempauth]
            #use = egg:swift#tempauth
            #user_system_root = testpass .admin
            https://10.10.10.40:8080/v1/AUTH_system
            #user_test_tester = testing .admin
            https://10.10.10.40:8080/v1/AUTH_test

            [filter:healthcheck]
            use = egg:swift#healthcheck

            [filter:cache]
            use = egg:swift#memcache
            memcache_servers = 10.10.10.40:11211

            [filter:keystone]
            #use = egg:swift#keystone
            paste.filter_factory =
            keystone.middleware.swift_auth:filter_factory
            operator_roles = Member,admin
            is_admin = true


            Please help
            thanks

            --
            Regards,
            Mahardhika Gilang



            _______________________________________________
            Mailing list:
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
            Post to     : openstack at lists.openstack.org
            Unsubscribe :
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


            --
            Regards,
            Mahardhika Gilang



            --
            Regards,
            Mahardhika Gilang




      -


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ea638799/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ea638799/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic31088.gif
Type: image/gif
Size: 1255 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ea638799/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecblank.gif
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ea638799/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: C3651677.gif
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ea638799/attachment-0003.gif>


More information about the Openstack mailing list