[Openstack] Swift not detect Keystone and Authtoken

Hua ZZ Zhang zhuadl at cn.ibm.com
Thu Sep 26 07:51:21 UTC 2013


The firewall might block the keystone service. but since you have disabled
it, it doesn't matter.
have you checked if keystone has been successfully started and is listening
on port 5000?
what is the output of this command?
curl http://localhost:5000/v2.0



                                                                           
             Mahardhika Gilang                                             
             <mahardika.gilang                                             
             @andalabs.com>                                             To 
                                       Hua ZZ Zhang/China/IBM at IBMCN,       
             2013-09-26 下午                                            cc 
             03:46                     Openstack Milis                     
                                       <openstack at lists.openstack.org>     
                                                                   Subject 
                                       Re: [Openstack] Swift not detect    
                                       Keystone and Authtoken              
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           




Am i must enable it and allow the ip of swift proxy on keystone server? now
firewall is disable with
#ufw disable

On 9/26/2013 2:43 PM, Hua ZZ Zhang wrote:


      Have you enabled Linux Firewall which block the request?

      -Zhang Hua(Edward)


      Inactive hide details for Mahardhika Gilang ---2013-09-26
          下
      午 03:28:47---Mahardhika Gilang
      <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26 下午
      03:28:47---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-26 下午 03:29                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           



      I have run without https and it turn this (even i run on keystone
      server)
      [Errno -5] No address associated with hostname


      On 9/26/2013 2:09 PM, Hua ZZ Zhang wrote:



            you can disable https and test if http protocol works or not.
            if it works, it might be the configuration problem of ssl.

            - Edward Zhang

            Inactive hide details for Mahardhika Gilang ---2013-09-26
            下午 02:17:18---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26
            下午 02:17:18---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-26 下午 02:18                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            When i put https on it, error come up
            Authorization Failure. Authorization Failed: [Errno 1]
            _ssl.c:504: error:140770FC:SSL
            routines:SSL23_GET_SERVER_HELLO:unknown protocol


            On 9/24/2013 10:09 PM, Hua ZZ Zhang wrote:


                  try https since you have enabled it in proxy
                  configuration.
                  swift -V 2 -A https://localhost:5000/v2.0 -U admin:admin
                  -K ADMIN stat
                  or:
                  swift --os-auth-url https://localhost:5000/v2.0
                  --os-tenant-name admin --os-username admin --os-password
                  ADMIN stat

                  -Zhang Hua(Edward)


                  Inactive hide details for Mahardhika Gilang
                  ---2013-09-24 下午 06:12:13---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>Mahardhika Gilang
                  ---2013-09-24 下午 06:12:13---Mahardhika Gilang
                  <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 下午 06:13                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                  Hi, thanks it work, but i fail when run this command
                  $ swift -V 2 -A http://localhost:5000/v2.0 -U admin:admin
                  -K ADMIN stat

                  [Errno -5] No address associated with hostname

                  On 9/24/2013 4:58 PM, Hua ZZ Zhang wrote:


                        try the sample here:
                        http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html


                        Best Regards,
                                                                             
       Edward Zhang(张华)                    地址:北京市海淀区东北旺西路8号  
       Advisory Software Engineer            中关村软件园28号楼 环宇大厦3层  
       Software Standards & Open             邮编:100193                    
       Source Software                       Address: 3F Ring, Building 28   
       Emerging Technology Institute         Zhongguancun Software Park, 8   
       (ETI)                                 Dongbeiwang West Road, Haidian  
       IBM China Software Development        District, Beijing, P.R.C.100193 
       Lab                                                                   
       e-mail: zhuadl at cn.ibm.com                                             
       Notes ID: Hua ZZ                                                      
       Zhang/China/IBM                                                       
       Tel: 86-10-82450483                                                   
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



                        Inactive hide details for Mahardhika Gilang
                        ---09/24/2013 04:33:12 PM---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>Mahardhika Gilang
                        ---09/24/2013 04:33:12 PM---Mahardhika Gilang
                        <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       09/24/2013 04:34 PM                                                 
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                        I got this error
                        LookupError: No loader given in section '
                        filter:keystoneauth'

                        On 9/24/2013 2:17 PM, Hua ZZ Zhang wrote:

                              I don't get what does it mean for "this
                              syntax give same result"?
                              what is your version of swift and keystone?
                              Here's my suggestion for 3 sections in the
                              proxy server paste file:

                                    [pipeline:main]
                                    pipeline = catch_errors healthcheck
                                    proxy-logging cache authtoken
                                    keystoneauth proxy-logging proxy-server


                                    [filter:authtoken]
                                    paste.filter_factory = keystoneclient
                                    .middleware.auth_token:filter_factory
                                    signing_dir = /var/cache/swift/
                                    auth_uri = http://10.10.10.40:5000/
                                    auth_host = 10.10.10.40
                                    #auth_uri = http://192.168.7.85:5000/
                                    #auth_host = 192.168.7.85
                                    auth_port = 35357
                                    auth_protocol = https
                                    admin_tenant_name = service
                                    admin_user = swift
                                    admin_password = admin
                                    #cache = swift.cache
                                    auth_token = admin

                                    [filter:keystoneauth]
                                    #use = egg:swift#keystoneauth
                                    operator_roles = Member,admin
                                    is_admin = true

                              http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html



                              Inactive hide details for Mahardhika Gilang
                              ---2013-09-24 上午 11:58:24---Mahardhika
                              Gilang
                              <mahardika.gilang at andalabs.com>Mahardhika
                              Gilang ---2013-09-24 上午
                              11:58:24---Mahardhika Gilang
                              <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-24 上午 11:59                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                              Hi, i've try change with auth_token and it's
                              work, but does this syntax give same result?

                              On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:

                                    try this:
                                    paste.filter_factory =
                                    keystoneclient.middleware.auth_token:filter_factory




                                    Inactive hide details for Mahardhika
                                    Gilang
                  ---2013-09-23
                                    下午 07:15:28---Mahardhika Gilang
                                    <mahardika.gilang at andalabs.com>
                                    Mahardhika Gilang ---2013-09-23 下午
                                    07:15:28---Mahardhika Gilang
                                    <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs                                          
       .com>                                                               
                                                                           
                                                                        To 
       2013-09-23 下午 07:16                                               
                                                   Hua ZZ                  
                                                   Zhang/China/IBM at IBMCN,  
                                                                           
                                                                        cc 
                                                                           
                                                   Openstack Milis         
                                                   <openstack at lists.openst 
                                                   ack.org>                
                                                                           
                                                                   Subject 
                                                                           
                                                   Re: [Openstack] Swift   
                                                   not detect Keystone and 
                                                   Authtoken               
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


                                    Hi, thanks for answering, i believe it
                                    work till i stuck at this error
                                    ImportError: No module named swift_auth

                                    it's on filter:keystone part
                                    paste.filter_factory =
                                    keystone.middleware.swift_auth:filter_factory


                                    how to solved this issue?
                                    On 9/23/2013 4:53 PM, Hua ZZ Zhang
                                    wrote:


                                          The authtoken and keystone
                                          middleware should be put ahead of
                                          proxy-server.
                                          you need to change the main
                                          pipeline as below:

                                          [pipeline:main]
                                          pipeline = catch_errors
                                          healthcheck proxy-logging cache
                                          authtoken keystone
                                          proxy-logging proxy-server

                                          Best Regards,
                                                                             
       Edward Zhang(张华)                                                    
                                                                             


                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             
                                                                             



            Inactive hide details for Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang
            <mahardika.gilang at andalabs.com>Mahardhika Gilang ---09/23/2013
            05:14:26 PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>
                                                                           
       Mahardhika Gilang                                                   
       <mahardika.gilang at andalabs.                                         
       com>                                                                
                                                                           
                                                                        To 
       09/23/2013 05:01 PM                                                 
                                                     Openstack Milis       
                                                     <openstack at lists.open 
                                                     stack.org>,           
                                                                           
                                                                        cc 
                                                                           
                                                                           
                                                                   Subject 
                                                                           
                                                     [Openstack] Swift not 
                                                     detect Keystone and   
                                                     Authtoken             
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           


            Hi all
            i've got an issue when i want to used keystone for
            authentication on
            swift proxy node.
            i got this when run #swift-init proxy restart
            LookupError: No section 'authtoken'
            LookupError: No section 'keystone'

            here's my proxy-server.conf
            [DEFAULT]
            cert_file = /etc/swift/cert.crt
            key_file = /etc/swift/cert.key
            bind_port = 8080
            #bind_port = 443
            workers = 8
            user = swift
            swift_dir = /etc/swift

            [pipeline:main]
            pipeline = catch_errors healthcheck proxy-logging cache
            tempauth
            proxy-logging proxy-server keystone authtoken

            [app:proxy-server]
            use = egg:swift#proxy
            allow_account_management = true
            account_autocreate = true

            [filter:authtoken]
            #use = egg:swift:authtoken
            paste.filter_factory =
            keystone.middleware.auth_token:filter_factory
            signing_dir = /var/cache/swift/
            auth_uri = http://10.10.10.40:5000/
            auth_host = 10.10.10.40
            #auth_uri = http://192.168.7.85:5000/
            #auth_host = 192.168.7.85
            auth_port = 35357
            auth_protocol = https
            admin_tenant_name = service
            admin_user = swift
            admin_password = admin
            #cache = swift.cache
            auth_token = admin

            [filter:catch_errors]
            use = egg:swift#catch_errors

            [filter:proxy-logging]
            use = egg:swift#proxy_logging

            #[filter:tempauth]
            #use = egg:swift#tempauth
            #user_system_root = testpass .admin
            https://10.10.10.40:8080/v1/AUTH_system
            #user_test_tester = testing .admin
            https://10.10.10.40:8080/v1/AUTH_test

            [filter:healthcheck]
            use = egg:swift#healthcheck

            [filter:cache]
            use = egg:swift#memcache
            memcache_servers = 10.10.10.40:11211

            [filter:keystone]
            #use = egg:swift#keystone
            paste.filter_factory =
            keystone.middleware.swift_auth:filter_factory
            operator_roles = Member,admin
            is_admin = true


            Please help
            thanks

            --
            Regards,
            Mahardhika Gilang



            _______________________________________________
            Mailing list:
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
            Post to     : openstack at lists.openstack.org
            Unsubscribe :
            http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


            --
            Regards,
            Mahardhika Gilang



            --
            Regards,
            Mahardhika Gilang



            -





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ef0b5ca0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ef0b5ca0/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pic02799.gif
Type: image/gif
Size: 1255 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ef0b5ca0/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ecblank.gif
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ef0b5ca0/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 15686863.gif
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/ef0b5ca0/attachment-0003.gif>


More information about the Openstack mailing list