[Openstack] Glance suddenly unhappy with Keystone behind Apache

Adam Young ayoung at redhat.com
Tue Jan 28 20:55:29 UTC 2014


On 01/27/2014 11:58 AM, Jonathan Proulx wrote:
> Hi All,
>
> This was working fine until I rebooted to clear an issue with network
> namespaces...
>
> glance consistently gives authentication failures if I'm running
> keystone in wsgi mode behind apache, all other services (cinder, nova,
> neutron, and keytone) respond normally.
>
> changing nothing else, if I run keystone in stand alone eventlet mode
> everything works, well until it crawls to a stop due to overloading
> the single keystone process.
UUID or PKI Tokens?  If PKI: 
http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/

Make sure that Glance is doing an SSL call to Keystone.




>
> tail /var/log/glance/api.log
> 2014-01-27 11:44:31.877 10634 ERROR
> keystoneclient.middleware.auth_token [-] Unable to get version info
> from keystone: 301
> 2014-01-27 11:44:31.878 10634 WARNING
> keystoneclient.middleware.auth_token [-] Authorization failed for
> token 5d49732f701d43ea831ff2c9bd4de5de
>
> Help?
> -Jon
>
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack





More information about the Openstack mailing list