Open Stack

Hi

I have created the ec2 credential for a given user with
$  keystone ec2-credentials-create --user-id <user-id> --tenant-id
<tentant-id>

I verified the credentials have been registered in the ec2_credential table
of the keystone database

but when trying to sue such credential with the 'boto' libraries (please
note that we do use 'boto' libraries extensively and successfully with
pretty much all of our 100 users on the same infrastructure),
I get the following:

EC2ResponseError: 400 Bad Request
<?xml version="1.0"?>
<Response><Errors><Error><Code>Unauthorized</Code><Message>Failure
communicating with
keystone</Message></Error></Errors><RequestID>req-a9706686-0161-4dee-b3ee-9c50c67c7f2a</RequestID></Response>.

on the server side (nova-api.log), I get:

2014-03-20 09:18:44 23633 ERROR nova.api.ec2 [-] Unauthorized: Failure
communicating with keystone
2014-03-20 09:18:44 23633 INFO nova.api.ec2 [-] 0.77128s 130.60.24.9 POST
/services/Cloud/ None:None 400 [Boto/2.26.1 Python/2.7.3
Linux/3.2.0-59-generic] application/x-www-form-urlencoded text/xml
2014-03-20 09:18:44 23633 INFO nova.ec2.wsgi.server [-] 130.60.24.9 - -
[20/Mar/2014 09:18:44] "POST /services/Cloud/ HTTP/1.1" 400 327 0.078316


I also tried with a different version of the boto libraries, but got the
same result:
2014-03-20 09:22:42 23633 INFO nova.api.ec2 [-] 0.84472s 130.60.40.14 POST
/services/Cloud/ None:None 400 [Boto/2.15.0 Python/2.6.6
Linux/2.6.32-5-amd64] application/x-www-form-urlencoded text/xml

any clue ?

S.
-- 
sergio.maffioletti at gc3.uzh.ch
GC3: Grid Computing Competence Center
http://www.gc3.uzh.ch/
University of Zurich
Winterthurerstrasse 190
CH-8057 Zurich Switzerland
Tel: +41 44 635 4222
Fax: +41 44 635 6888
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140320/90d03066/attachment.html>