[Openstack] Swift not detect Keystone and Authtoken
Mahardhika Gilang
mahardika.gilang at andalabs.com
Thu Sep 26 09:29:37 UTC 2013
Hi it works, yes i used separate machine, keystone server is run nova,
glance and cinder, and other machine run quantum and swift the other one
is run compute for kvm. It might the issue of my network topology, as
before i can't ping to keystone server (strange as i have route all ip
to talk each other)
Now i can create container on tenant X, but in horizon at Object Store
menu > Containers in tenant X i cant access that menu, it will show up
error page like this
Something went wrong!
An unexpected error has occurred. Try refreshing the page. If that
doesn't help, contact your local administrator.
How can this happen?
I can get list of the container from CLI.
Thanks before.
On 9/26/2013 3:54 PM, Hua ZZ Zhang wrote:
>
> are you running swift server and keystone server in the same machine?
> or two separate machines?
> if not in the same node, you might need to add --os-storage-url to
> indicate where is the proxy service address
> in swift command when your run execute swift CLI command on keystone
> server.
>
>
> Inactive hide details for Mahardhika Gilang ---2013-09-26 下午
> 04:24:44---Mahardhika Gilang <mahardika.gilang at andalabs.com>Mahardhika
> Gilang ---2013-09-26 下午 04:24:44---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>
>
> *Mahardhika Gilang <mahardika.gilang at andalabs.com>*
>
> 2013-09-26 下午 04:25
>
>
>
> To
>
>
> Hua ZZ Zhang/China/IBM at IBMCN,
>
>
> cc
>
>
> Openstack Milis <openstack at lists.openstack.org>
>
>
> Subject
>
>
> Re: [Openstack] Swift not detect Keystone and Authtoken
>
>
>
>
> Here's the output
> {"version": {"status": "stable", "updated": "2013-03-06T00:00:00Z",
> "media-types": [{"base": "application/json", "type":
> "application/vnd.openstack.identity-v2.0+json"}, {"base":
> "application/xml", "type":
> "application/vnd.openstack.identity-v2.0+xml"}], "id": "v2.0",
> "links": [{"href": _"http://localhost:5000/v2.0/"_
> <http://localhost:5000/v2.0/>, "rel": "self"}, {"href":
> _"http://docs.openstack.org/api/openstack-identity-service/2.0/content/"_
> <http://docs.openstack.org/api/openstack-identity-service/2.0/content/>,
> "type": "text/html", "rel": "describedby"}, {"href":
> _"http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf"_
> <http://docs.openstack.org/api/openstack-identity-service/2.0/identity-dev-guide-2.0.pdf>,
> "type": "application/pdf", "rel": "describedby"}]}}
>
> run swift again on keystone server and got this
> [Errno 113] EHOSTUNREACH
>
>
> On 9/26/2013 2:51 PM, Hua ZZ Zhang wrote:
>
>
> The firewall might block the keystone service. but since you have
> disabled it, it doesn't matter.
> have you checked if keystone has been successfully started and is
> listening on port 5000?
> what is the output of this command?_
> _/_curl http://localhost:5000/v2.0_/ <http://localhost:5000/v2.0>//
>
>
> Inactive hide details for Mahardhika Gilang ---2013-09-26 下午
> 03:46:02---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26 下
> 午 03:46:02---Mahardhika Gilang _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-26 下午 03:46
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone and Authtoken
>
>
>
>
> Am i must enable it and allow the ip of swift proxy on keystone
> server? now firewall is disable with
> #ufw disable
>
> On 9/26/2013 2:43 PM, Hua ZZ Zhang wrote:
>
>
> Have you enabled Linux Firewall which block the request?
>
> -Zhang Hua(Edward)
>
>
> Inactive hide details for Mahardhika Gilang ---2013-09-26 下午
> 03:28:47---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika Gilang ---2013-09-26
> 下午 03:28:47---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-26 下午 03:29
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone and Authtoken
>
>
>
>
> I have run without https and it turn this (even i run on
> keystone server)
> [Errno -5] No address associated with hostname
>
>
> On 9/26/2013 2:09 PM, Hua ZZ Zhang wrote:
>
>
> you can disable https and test if http protocol works or not.
> if it works, it might be the configuration problem of ssl.
>
> - Edward Zhang
>
> Inactive hide details for Mahardhika Gilang ---2013-09-26
> 下午 02:17:18---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika Gilang
> ---2013-09-26 下午 02:17:18---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang
> **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-26 下午 02:18
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone and Authtoken
>
>
>
>
> When i put https on it, error come up
> Authorization Failure. Authorization Failed: [Errno 1]
> _ssl.c:504: error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown protocol
>
>
> On 9/24/2013 10:09 PM, Hua ZZ Zhang wrote:
>
>
> try https since you have enabled it in proxy
> configuration.
> swift -V 2 -A _https://localhost:5000/v2.0_
> <http://localhost:5000/v2.0>-U admin:admin -K ADMIN stat
> or:
> swift --os-auth-url
> _https://localhost:5000/v2.0_--os-tenant-name admin
> --os-username admin --os-password ADMIN stat
>
> -Zhang Hua(Edward)
>
>
> Inactive hide details for Mahardhika Gilang
> ---2013-09-24 下午 06:12:13---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika Gilang
> ---2013-09-24 下午 06:12:13---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang
> **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-24 下午 06:13
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone and
> Authtoken
>
>
>
>
> Hi, thanks it work, but i fail when run this command
> $ swift -V 2 -A _http://localhost:5000/v2.0_-U
> admin:admin -K ADMIN stat
>
> [Errno -5] No address associated with hostname
>
> On 9/24/2013 4:58 PM, Hua ZZ Zhang wrote:
>
>
> try the sample here:_
> __http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html_*
>
> Best Regards, *
> ------------------------------------------------------------------------
> *Edward Zhang(张华)*
> Advisory Software Engineer
> Software Standards & Open Source Software
> Emerging Technology Institute(ETI)
> IBM China Software Development Lab
> e-mail: _zhuadl at cn.ibm.com_
> <mailto:zhuadl at cn.ibm.com>
> Notes ID: Hua ZZ Zhang/China/IBM
> Tel: 86-10-82450483
> 地址:北京市海淀区东北旺西路8号 中关村软件园28
> 号楼 环宇大厦3层 邮编:100193
> Address: 3F Ring, Building 28 Zhongguancun
> Software Park, 8 Dongbeiwang West Road,
> Haidian District, Beijing, P.R.C.100193
>
>
>
>
> Inactive hide details for Mahardhika Gilang
> ---09/24/2013 04:33:12 PM---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika Gilang
> ---09/24/2013 04:33:12 PM---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang
> **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 09/24/2013 04:34 PM
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis
> _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone and
> Authtoken
>
>
>
>
> I got this error
> LookupError: No loader given in section
> '_filter:keystoneauth_'
>
> On 9/24/2013 2:17 PM, Hua ZZ Zhang wrote:
>
> I don't get what does it mean for "this syntax
> give same result"?
> what is your version of swift and keystone?
> Here's my suggestion for 3 sections in the
> proxy server paste file:
>
> [pipeline:main]
> pipeline = catch_errors healthcheck
> proxy-logging cache
> *authtoken**keystoneauth *proxy-logging
> proxy-server
>
> [_filter:authtoken_]
> paste.filter_factory =
> *keystoneclient*.middleware.auth_token:filter_factory
> signing_dir = /var/cache/swift/
> auth_uri = _http://10.10.10.40:5000/_
> auth_host = 10.10.10.40
> #auth_uri = _http://192.168.7.85:5000/_
> #auth_host = 192.168.7.85
> auth_port = 35357
> auth_protocol = https
> admin_tenant_name = service
> admin_user = swift
> admin_password = admin
> #cache = swift.cache
> auth_token = admin
>
> [*_filter:keystoneauth_* <filter:keystone>]
> #use = egg:swift#keystoneauth
> operator_roles = Member,admin
> is_admin = true_
> __http://docs.openstack.org/grizzly/openstack-compute/admin/content/configuring-swift-to-use-keystone.html_
>
>
> Inactive hide details for Mahardhika Gilang
> ---2013-09-24 上午 11:58:24---Mahardhika
> Gilang
> <mahardika.gilang at andalabs.com>Mahardhika
> Gilang ---2013-09-24 上午
> 11:58:24---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang
> **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-24 上午 11:59
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis
> _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect Keystone
> and Authtoken
>
>
>
>
> Hi, i've try change with auth_token and it's
> work, but does this syntax give same result?
>
> On 9/24/2013 6:21 AM, Hua ZZ Zhang wrote:
>
> try this:
> paste.filter_factory
> =keystoneclient.middleware.auth_token:filter_factory
>
>
>
> Inactive hide details for Mahardhika
> Gilang ---2013-09-23 下午
> 07:15:28---Mahardhika Gilang
> <mahardika.gilang at andalabs.com>Mahardhika
> Gilang ---2013-09-23 下午
> 07:15:28---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang
> **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 2013-09-23 下午 07:16
>
>
> To
>
> Hua ZZ Zhang/China/IBM at IBMCN,
> cc
>
> Openstack Milis
> _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>
> Subject
>
> Re: [Openstack] Swift not detect
> Keystone and Authtoken
>
>
>
>
> Hi, thanks for answering, i believe it
> work till i stuck at this error
> ImportError: No module named swift_auth
>
> it's on _filter:keystone_part
> paste.filter_factory =
> keystone.middleware.swift_auth:filter_factory
>
> how to solved this issue?
> On 9/23/2013 4:53 PM, Hua ZZ Zhang wrote:
>
>
> The /authtoken /and /keystone
> /middleware should be put ahead
> of/proxy-server/.
> you need to change the main pipeline
> as below:/
>
> [pipeline:main]
> pipeline = catch_errors healthcheck
> proxy-logging cache authtoken keystone
> proxy-logging proxy-server/*
>
> Best Regards, *
> ------------------------------------------------------------------------
> *Edward Zhang(张华)*
>
>
>
>
>
>
>
> Inactive hide details for Mahardhika Gilang ---09/23/2013 05:14:26
> PM---Mahardhika Gilang <mahardika.gilang at andalabs.com>Mahardhika
> Gilang ---09/23/2013 05:14:26 PM---Mahardhika Gilang
> _<mahardika.gilang at andalabs.com>_
> <mailto:mahardika.gilang at andalabs.com>
> *Mahardhika Gilang **_<mahardika.gilang at andalabs.com>_*
> <mailto:mahardika.gilang at andalabs.com>
>
> 09/23/2013 05:01 PM
>
>
> To
>
> Openstack Milis _<openstack at lists.openstack.org>_
> <mailto:openstack at lists.openstack.org>,
> cc
>
> Subject
>
> [Openstack] Swift not detect Keystone and Authtoken
>
>
>
>
> Hi all
> i've got an issue when i want to used keystone for authentication on
> swift proxy node.
> i got this when run #swift-init proxy restart
> LookupError: No section 'authtoken'
> LookupError: No section 'keystone'
>
> here's my proxy-server.conf
> [DEFAULT]
> cert_file = /etc/swift/cert.crt
> key_file = /etc/swift/cert.key
> bind_port = 8080
> #bind_port = 443
> workers = 8
> user = swift
> swift_dir = /etc/swift
>
> [pipeline:main]
> pipeline = catch_errors healthcheck proxy-logging cache tempauth
> proxy-logging proxy-server keystone authtoken
>
> [_app:proxy-server_]
> use = egg:swift#proxy
> allow_account_management = true
> account_autocreate = true
>
> [_filter:authtoken_]
> #use = egg:swift:authtoken
> paste.filter_factory = keystone.middleware.auth_token:filter_factory
> signing_dir = /var/cache/swift/
> auth_uri = _http://10.10.10.40:5000/_
> auth_host = 10.10.10.40
> #auth_uri = _http://192.168.7.85:5000/_
> #auth_host = 192.168.7.85
> auth_port = 35357
> auth_protocol = https
> admin_tenant_name = service
> admin_user = swift
> admin_password = admin
> #cache = swift.cache
> auth_token = admin
>
> [_filter:catch_errors_]
> use = egg:swift#catch_errors
>
> [_filter:proxy-logging_]
> use = egg:swift#proxy_logging
>
> #[_filter:tempauth_]
> #use = egg:swift#tempauth
> #user_system_root = testpass .admin
> _https://10.10.10.40:8080/v1/AUTH_system_
> #user_test_tester = testing .admin
> _https://10.10.10.40:8080/v1/AUTH_test_
>
> [_filter:healthcheck_]
> use = egg:swift#healthcheck
>
> [_filter:cache_]
> use = egg:swift#memcache
> memcache_servers = 10.10.10.40:11211
>
> [_filter:keystone_]
> #use = egg:swift#keystone
> paste.filter_factory = keystone.middleware.swift_auth:filter_factory
> operator_roles = Member,admin
> is_admin = true
>
>
> Please help
> thanks
>
> --
> Regards,
> Mahardhika Gilang
>
>
>
> _______________________________________________
> Mailing list:
> _http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack_
> Post to : _openstack at lists.openstack.org_
> <mailto:openstack at lists.openstack.org>
> Unsubscribe :
> _http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack_
>
>
> --
> Regards,
> Mahardhika Gilang
>
>
>
> --
> Regards,
> Mahardhika Gilang
>
>
>
> -
>
>
>
>
>
--
Regards,
Mahardhika Gilang
*PT. Andalabs Technology *
Gedung Gravira
Jl. Cideng Barat no. 54
Jakarta Pusat 10150
Mobile : 0852 139 55861
Email : mahardika.gilang at andalabs.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/a1a6d3be/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/a1a6d3be/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 45 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/a1a6d3be/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 1279 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130926/a1a6d3be/attachment-0002.gif>
More information about the Openstack
mailing list