[Openstack] issue with swift and keystone (Active directory)
Deepak G
deepakrghuge at gmail.com
Thu Jun 12 09:55:19 UTC 2014
Thanks Matthieu for reply,
I added swift role under Roles, after this error message changed
to
Jun 12 03:18:30 node1 proxy-server: Authorization failed for token
d2285b87bb950a416c17cccc61d5b6d4
Jun 12 03:18:30 node1 proxy-server: Invalid user token - deferring reject
downstream
Jun 12 03:18:31 node1 proxy-server: Authorization failed for token
48c7d3e10a1ee23caea2b72a752132ba
Jun 12 03:18:31 node1 proxy-server: Invalid user token - deferring reject
downstream
Jun 12 03:18:41 node1 proxy-server: Authorization failed for token
1f174dbadfab030ad970cc247b4fa392
Jun 12 03:18:41 node1 proxy-server: Invalid user token - deferring reject
downstream
Jun 12 03:18:42 node1 proxy-server: Authorization failed for token
e2e6e8b09916ac22dd714e3dbc155902
Jun 12 03:18:42 node1 proxy-server: Invalid user token - deferring reject
downstream
now sure what is missing now ?
On Thu, Jun 12, 2014 at 1:20 PM, Matthieu Huin <matthieu.huin at enovance.com>
wrote:
> Hello,
>
> I assume you're using Icehouse, and you configured keystone's assignment
> backend
> to use Active Directory with the ldap driver. You can either:
>
> * Create the missing roles needed by swift in AD (how to do this will
> depend on
> the schema you chose)
> * switch back to the default mysql backend for assignment, since this is
> purely
> specific to Openstack
>
>
> Matthieu Huin
>
> mhu at enovance.com
>
> ----- Original Message -----
> > From: "Deepak G" <deepakrghuge at gmail.com>
> > To: openstack at lists.openstack.org
> > Sent: Thursday, June 12, 2014 7:46:17 AM
> > Subject: [Openstack] issue with swift and keystone (Active directory)
> >
> > Hello,
> > I have configured swift with keystone (Active directory).
> > While creating container in swift i am getting following error.
> >
> > #swift post CONTAINER_4_admin1
> > Container POST failed:
> > http://controller:8080/v1/AUTH_admin/CONTAINER_4_admin1 401 Unauthorized
> > [first 60 chars of response] <html><h1>Unauthorized</h1><p>This server
> could
> > not verify t
> >
> >
> > Message in sysylog:
> > Jun 11 22:52:36 node1 proxy-server: Unexpected response from keystone
> > service: {u'error': {u'message': u'Could not find role, swift.', u'code':
> > 404, u'title': u'Not Found'}}
> > Jun 11 22:52:36 node1 proxy-server: Authorization failed for token
> > 9ece2e7637704563fc61eff8d53e0508
> > Jun 11 22:52:36 node1 proxy-server: Invalid user token - deferring reject
> > downstream
> >
> > Am i missing anything in setup ?
> >
> > - Thanks
> > DEEP
> >
> > _______________________________________________
> > Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> > Post to : openstack at lists.openstack.org
> > Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140612/8acc6f28/attachment.html>
More information about the Openstack
mailing list