[Openstack] Swift not detect Keystone and Authtoken

Mahardhika Gilang mahardika.gilang at andalabs.com
Thu Sep 26 07:46:41 UTC 2013


Am i must enable it and allow the ip of swift proxy on keystone server?
now firewall is disable with
#ufw disable

On 9/26/2013 2:43 PM, Hua ZZ Zhang wrote:
>
> Have you enabled Linux Firewall which block the request?
>
> -Zhang Hua(Edward)
>
>
> Inactive hide details for Mahardhika Gilang ---2013-09-26 下午
> 03:28:47---Mahardhika Gilang <mahardika.gilang at andalabs.com>Mahardhika
> Gilang ---2013-09-26 下午 03:28:47---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>
>
>     *Mahardhika Gilang <mahardika.gilang at andalabs.com>*
>
>     2013-09-26 下午 03:29
>
> 	
>
> To
> 	
>
>     Hua ZZ Zhang/China/IBM at IBMCN, 
>
>
> cc
> 	
>
>     Openstack Milis <openstack at lists.openstack.org> 
>
>
> Subject
> 	
>
>     Re: [Openstack] Swift not detect Keystone and Authtoken 
>
> 	
>
>
> I have run without https and it turn this (even i run on keystone server)
> [Errno -5] No address associated with hostname
>
>
> On 9/26/2013 2:09 PM, Hua ZZ Zhang wrote:
>
>
>     you can disable https and test if http protocol works or not.
>     if it works, it might be the configuration problem of ssl.
>
>     - Edward Zhang
>
>     Inactive hide details for Mahardhika Gilang ---2013-09-26 下午
>     02:17:18---Mahardhika Gilang
>     <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26 下
>     午 02:17:18---Mahardhika Gilang _<mahardika.gilang at andalabs.com>_
>     <mailto:mahardika.gilang at andalabs.com>
>         *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
>         <mailto:mahardika.gilang at andalabs.com>
>
>         2013-09-26 下午 02:18
>
>     	
>     To
>     	
>         Hua ZZ Zhang/China/IBM at IBMCN, 
>     cc
>     	
>         Openstack Milis _<openstack at lists.openstack.org>_
>         <mailto:openstack at lists.openstack.org>
>     Subject
>     	
>         Re: [Openstack] Swift not detect Keystone and Authtoken
>
>     	
>
>
>     When i put https on it, error come up
>     Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:504:
>     error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
>
>
>     On 9/24/2013 10:09 PM, Hua ZZ Zhang wrote:
>
>
>         try https since you have enabled it in proxy configuration.
>         swift -V 2 -A _https://localhost:5000/v2.0_
>         <http://localhost:5000/v2.0>-U admin:admin -K ADMIN stat
>         or:
>         swift --os-auth-url
>         _https://localhost:5000/v2.0_--os-tenant-name admin
>         --os-username admin --os-password ADMIN stat
>
>         -Zhang Hua(Edward)
>
>
>         Inactive hide details for Mahardhika Gilang ---2013-09-24 下午
>         06:12:13---Mahardhika Gilang
>         <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-24
>         下午 06:12:13---Mahardhika Gilang
>         _<mahardika.gilang at andalabs.com>_
>         <mailto:mahardika.gilang at andalabs.com>
>             *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
>             <mailto:mahardika.gilang at andalabs.com>
>
>             2013-09-24 下午 06:13
>
>         	
>         To
>         	
>             Hua ZZ Zhang/China/IBM at IBMCN, 
>         cc
>         	
>             Openstack Milis _<openstack at lists.openstack.org>_
>             <mailto:openstack at lists.openstack.org>
>         Subject
>         	
>             Re: [Openstack] Swift not detect Keystone and Authtoken
>
>         	
>
>
>         Hi, thanks it work, but i fail when run this command
>         $ swift -V 2 -A _http://localhost:5000/v2.0_-U admin:admin -K
>         ADMIN stat
>
>         [Errno -5] No address associated with hostname
>
>         On 9/24/2013 4:58 PM, Hua ZZ Zhang wrote:
>
>
>             try the sample here:_
>             __http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html_*
>
>             Best Regards, *
>             ------------------------------------------------------------------------
>                 *Edward Zhang(张华)*
>                 Advisory Software Engineer
>                 Software Standards & Open Source Software
>                 Emerging Technology Institute(ETI)
>                 IBM China Software Development Lab
>                 e-mail: _zhuadl at cn.ibm.com_ <mailto:zhuadl at cn.ibm.com>
>                 Notes ID: Hua ZZ Zhang/China/IBM
>                 Tel: 86-10-82450483	
>                 地址:北京市海淀区东北旺西路8号 中关村软件园28号楼 环宇
>                 大厦3层 邮编:100193
>                 Address: 3F Ring, Building 28 Zhongguancun Software
>                 Park, 8 Dongbeiwang West Road, Haidian District,
>                 Beijing, P.R.C.100193
>             	
>             	
>
>
>             Inactive hide details for Mahardhika Gilang ---09/24/2013
>             04:33:12 PM---Mahardhika Gilang
>             <mahardika.gilang at andalabs.com>Mahardhika Gilang
>             ---09/24/2013 04:33:12 PM---Mahardhika Gilang
>             _<mahardika.gilang at andalabs.com>_
>             <mailto:mahardika.gilang at andalabs.com>
>                 *Mahardhika Gilang
>                 **_<mahardika.gilang at andalabs.com>_*
>                 <mailto:mahardika.gilang at andalabs.com>
>
>                 09/24/2013 04:34 PM
>
>             	
>             To
>             	
>                 Hua ZZ Zhang/China/IBM at IBMCN, 
>             cc
>             	
>                 Openstack Milis _<openstack at lists.openstack.org>_
>                 <mailto:openstack at lists.openstack.org>
>             Subject
>             	
>                 Re: [Openstack] Swift not detect Keystone and Authtoken
>
>             	
>
>
>             I got this error
>             LookupError: No loader given in section
>             '_filter:keystoneauth_'
>
>             On 9/24/2013 2:17 PM, Hua ZZ Zhang wrote:
>
>                 I don't get what does it mean for "this syntax give
>                 same result"?
>                 what is your version of swift and keystone?
>                 Here's my suggestion for 3 sections in the proxy
>                 server paste file:
>
>                     [pipeline:main]
>                     pipeline = catch_errors healthcheck proxy-logging
>                     cache *authtoken**keystoneauth *proxy-logging
>                     proxy-server
>
>                     [_filter:authtoken_]
>                     paste.filter_factory =
>                     *keystoneclient*.middleware.auth_token:filter_factory
>                     signing_dir = /var/cache/swift/
>                     auth_uri = _http://10.10.10.40:5000/_
>                     auth_host = 10.10.10.40
>                     #auth_uri = _http://192.168.7.85:5000/_
>                     #auth_host = 192.168.7.85
>                     auth_port = 35357
>                     auth_protocol = https
>                     admin_tenant_name = service
>                     admin_user = swift
>                     admin_password = admin
>                     #cache = swift.cache
>                     auth_token = admin
>
>                     [*_filter:keystoneauth_* <filter:keystone>]
>                     #use = egg:swift#keystoneauth
>                     operator_roles = Member,admin
>                     is_admin = true_
>                 __http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html_
>
>
>                 Inactive hide details for Mahardhika Gilang
>                 ---2013-09-24 上午 11:58:24---Mahardhika Gilang
>                 <mahardika.gilang at andalabs.com>Mahardhika Gilang
>                 ---2013-09-24 上午 11:58:24---Mahardhika Gilang
>                 _<mahardika.gilang at andalabs.com>_
>                 <mailto:mahardika.gilang at andalabs.com>
>                     *Mahardhika Gilang
>                     **_<mahardika.gilang at andalabs.com>_*
>                     <mailto:mahardika.gilang at andalabs.com>
>
>                     2013-09-24 上午 11:59
>
>                 	
>                 To
>                 	
>                     Hua ZZ Zhang/China/IBM at IBMCN, 
>                 cc
>                 	
>                     Openstack Milis _<openstack at lists.openstack.org>_
>                     <mailto:openstack at lists.openstack.org>
>                 Subject
>                 	
>                     Re: [Openstack] Swift not detect Keystone and
>                     Authtoken
>
>                 	
>
>
>                 Hi, i've try change with auth_token and it's work, but
>                 does this syntax give same result?
>
>                 On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:
>
>                     try this:
>                     paste.filter_factory
>                     =keystoneclient.middleware.auth_token:filter_factory
>
>
>
>                     Inactive hide details for Mahardhika Gilang
>                     ---2013-09-23 下午 07:15:28---Mahardhika Gilang
>                     <mahardika.gilang at andalabs.com>Mahardhika Gilang
>                     ---2013-09-23 下午 07:15:28---Mahardhika Gilang
>                     _<mahardika.gilang at andalabs.com>_
>                     <mailto:mahardika.gilang at andalabs.com>
>                         *Mahardhika Gilang
>                         **_<mahardika.gilang at andalabs.com>_*
>                         <mailto:mahardika.gilang at andalabs.com>
>
>                         2013-09-23 下午 07:16
>
>                     	
>                     To
>                     	
>                         Hua ZZ Zhang/China/IBM at IBMCN, 
>                     cc
>                     	
>                         Openstack Milis
>                         _<openstack at lists.openstack.org>_
>                         <mailto:openstack at lists.openstack.org>
>                     Subject
>                     	
>                         Re: [Openstack] Swift not detect Keystone and
>                         Authtoken
>
>                     	
>
>
>                     Hi, thanks for answering, i believe it work till i
>                     stuck at this error
>                     ImportError: No module named swift_auth
>
>                     it's on _filter:keystone_part
>                     paste.filter_factory =
>                     keystone.middleware.swift_auth:filter_factory
>
>                     how to solved this issue?
>                     On 9/23/2013 4:53 PM, Hua ZZ Zhang wrote:
>
>
>                         The /authtoken /and /keystone /middleware
>                         should be put ahead of/proxy-server/.
>                         you need to change the main pipeline as below:/
>
>                         [pipeline:main]
>                         pipeline = catch_errors healthcheck
>                         proxy-logging cache authtoken keystone
>                         proxy-logging proxy-server/*
>
>                         Best Regards, *
>                         ------------------------------------------------------------------------
>                             *Edward Zhang(张华)*	
>
> 	
>
> 	
> 	
>
>
>     Inactive hide details for Mahardhika Gilang ---09/23/2013 05:14:26
>     PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>Mahardhika
>     Gilang ---09/23/2013 05:14:26 PM---Mahardhika Gilang
>     _<mahardika.gilang at andalabs.com>_
>     <mailto:mahardika.gilang at andalabs.com>
>         *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
>         <mailto:mahardika.gilang at andalabs.com>
>
>         09/23/2013 05:01 PM
>
>     	
>     To
>     	
>         Openstack Milis _<openstack at lists.openstack.org>_
>         <mailto:openstack at lists.openstack.org>, 
>     cc
>     	
>     Subject
>     	
>         [Openstack] Swift not detect Keystone and Authtoken
>
>     	
>
>
>     Hi all
>     i've got an issue when i want to used keystone for authentication on
>     swift proxy node.
>     i got this when run #swift-init proxy restart
>     LookupError: No section 'authtoken'
>     LookupError: No section 'keystone'
>
>     here's my proxy-server.conf
>     [DEFAULT]
>     cert_file = /etc/swift/cert.crt
>     key_file = /etc/swift/cert.key
>     bind_port = 8080
>     #bind_port = 443
>     workers = 8
>     user = swift
>     swift_dir = /etc/swift
>
>     [pipeline:main]
>     pipeline = catch_errors healthcheck proxy-logging cache tempauth
>     proxy-logging proxy-server keystone authtoken
>
>     [_app:proxy-server_]
>     use = egg:swift#proxy
>     allow_account_management = true
>     account_autocreate = true
>
>     [_filter:authtoken_]
>     #use = egg:swift:authtoken
>     paste.filter_factory = keystone.middleware.auth_token:filter_factory
>     signing_dir = /var/cache/swift/
>     auth_uri = _http://10.10.10.40:5000/_
>     auth_host = 10.10.10.40
>     #auth_uri = _http://192.168.7.85:5000/_
>     #auth_host = 192.168.7.85
>     auth_port = 35357
>     auth_protocol = https
>     admin_tenant_name = service
>     admin_user = swift
>     admin_password = admin
>     #cache = swift.cache
>     auth_token = admin
>
>     [_filter:catch_errors_]
>     use = egg:swift#catch_errors
>
>     [_filter:proxy-logging_]
>     use = egg:swift#proxy_logging
>
>     #[_filter:tempauth_]
>     #use = egg:swift#tempauth
>     #user_system_root = testpass .admin
>     _https://10.10.10.40:8080/v1/AUTH_system_
>     #user_test_tester = testing .admin
>     _https://10.10.10.40:8080/v1/AUTH_test_
>
>     [_filter:healthcheck_]
>     use = egg:swift#healthcheck
>
>     [_filter:cache_]
>     use = egg:swift#memcache
>     memcache_servers = 10.10.10.40:11211
>
>     [_filter:keystone_]
>     #use = egg:swift#keystone
>     paste.filter_factory = keystone.middleware.swift_auth:filter_factory
>     operator_roles = Member,admin
>     is_admin = true
>
>
>     Please help
>     thanks
>
>     -- 
>     Regards,
>     Mahardhika Gilang
>
>
>
>     _______________________________________________
>     Mailing list:
>     _http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack_
>     Post to : _openstack at lists.openstack.org_
>     <mailto:openstack at lists.openstack.org>
>     Unsubscribe :
>     _http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack_
>
>
>     -- 
>     Regards,
>     Mahardhika Gilang
>
>
>
>     -- 
>     Regards,
>     Mahardhika Gilang
>
>
>
>     - 
>
>
>
>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/07d7e867/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/07d7e867/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/07d7e867/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/07d7e867/attachment-0002.gif>


More information about the Openstack mailing list