[Openstack] [ceph-users] Unable to start radosgw
mark.kirkwood at catalyst.net.nz
Mon Dec 15 08:14:59 UTC 2014
On 15/12/14 20:54, Vivek Varghese Cherian wrote:
> Do I need to overwrite the existing .db files and .txt file in
> /var/lib/nssdb on the radosgw host with the ones copied from
> /var/ceph/nss on the Juno node ?
> Yeah - worth a try (we want to rule out any certificate mis-match
> I have manually copied the keys from the directory /var/ceph/nss on the
> juno node to the /var/ceph/nss on my radogw node, I have also made the
> following changes to my ceph.conf:
> #rgw keystone url = 10.x.x.175:35357
> rgw keystone url = 10.x.x.175:5000
> rgw keystone admin token = password123
> rgw keystone accepted roles = Member, admin
> rgw keystone token cache size = 10000
> rgw keystone revocation interval = 15 * 60
> rgw s3 auth use keystone = true
> #nss db path = /var/lib/nssdb
> nss db path = /var/ceph/nss
> I have restarted the radosgw and it works.
> ceph at ppm-c240-ceph3:~$ ps aux | grep rados
> root 19833 0.2 0.0 10324668 33288 ? Ssl Dec12 7:30
> /usr/bin/radosgw -n client.radosgw.gateway
> ceph 28101 0.0 0.0 10464 916 pts/0 S+ 02:25 0:00 grep
> --color=auto rados
> ceph at ppm-c240-ceph3:~$
> Imho, the document ( http://ceph.com/docs/master/radosgw/keystone/ )
> should explicitly state that the /var/ceph/nss directory should be
> created on the radosgw node and not on the openstack node.
> I had a discussion with Loïc Dachary on irc, and on his request, I have
> filed a bug against the documentation.
> The ticket url is http://tracker.ceph.com/issues/10305
> Btw, thanks Mark for the pointers.
Excellent - glad it is working now. Yeah, the docs could certainly be
clearer. Also the error message from radosgw when the certs are
wrong/missing could be better too!
More information about the Openstack