Open Stack

I have an issue where nova is 'missing' the networks that are on some
instances (they are really there, they work, I can see them in horizon
topology)

$ nova list
+--------------------------------------+------------+--------+------------+-------------+----------------------------------+
| ID                                   | Name       | Status | Task State |
Power State | Networks                         |
+--------------------------------------+------------+--------+------------+-------------+----------------------------------+
| 4599b917-7b86-4195-a82a-e733bd8b041c | xxxxxx-pts | ACTIVE | -          |
Running     |                                  |
| 4859d4ac-e2a5-4e5d-8f98-12ce2d3fd36d | xxxxxx-sde | ACTIVE | -          |
Running     |                                  |
| c40f7e59-02a0-4c16-9544-c3a9940358d6 | xxxxxx-spb | ACTIVE | -          |
Running     | xxxxxx-data-ctrl-net=172.16.1.10 |
| 28b7a632-4f12-41fc-a917-3b19233701c2 | xxxxxx-vpn | ACTIVE | -          |
Running     |                                  |
+--------------------------------------+------------+--------+------------+-------------+----------------------------------+


Doing a 'neutron port-list' the port shows up:
+--------------------------------------+-----------------+-------------------+------------------------------------------------------------------------------------+
| id                                   | name            | mac_address
  | fixed_ips
           |
+--------------------------------------+-----------------+-------------------+------------------------------------------------------------------------------------+
| adc3b59f-e73c-4c94-9765-7c9fc2d210a3 | justin-pts-port |
fa:16:3e:b2:3c:f7 | {"subnet_id": "994123b2-0386-49e4-b8b0-d952d925dff5",
"ip_address": "172.16.1.13"} |

...

I presume this indicates some problem on the api-pass-through that nova
does to neutron (I am running neutron network, juno, ubuntu 14.10)

the only clue to the mystery is found in the log file:
2014-12-02 23:57:37.787 20876 WARNING keystonemiddleware.auth_token [-]
Authorization failed for token
in nova-api.log

why it would fail for one and not another i don't know.

can someone suggest how to debug this? enabling verbose/debug in nova
didn't really provide more info.
in keystone-all.log, there is an awful lot of stuff about RBAC, its not
obvious which line
matters.

something that surprises me, when i run 'neutron --debug net-list', i see
it re-use my existing token.
When i run 'nova --debug list', i see it get a new token *every time i run
it* on the command
line.

a) why would nova not remember my token but neutron would?
b) is this related to my problem?
c) if you had this issue (and i have it for more than one user, and its not
intermittent on a given instance), what would you look for?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20141202/922ba7d4/attachment.html>