Open Stack

Hi all,

I've installed IceHouse (RDO) and everything is working fine except Heat.
On any heat command it returns "access was denied":

$ heat list
> ERROR: Access was denied to this resource.


Could you give me a hint what resource does it mean and what I should check?
All other commands (keystone, nova, etc) are working fine with the same
credentials.

When I install DevStack version of OpenStack, then heat works just fine.
I've compared configs from DevStack-installation and RDO-installation and
did not fine any key differences that could break Heat.

>From keystone.log:

OpenStack (keystone:4382) DEBUG: Auth token not in the request header. Will
> not build auth context.
> OpenStack (keystone:4382) DEBUG: arg_dict: {}
> OpenStack (keystone:4382) DEBUG: CADF Event: {'typeURI': '
> http://schemas.dmtf.org/cloud/audit/1.0/event', 'initiator': {'typeURI':
> 'service/security/account/user', 'host': {'agent': 'python-keystoneclient',
> 'address': '10.141.255.254'}, 'id':
> 'openstack:dee61662-b95d-4993-9cb5-f66f260e2dd9', 'name':
> u'0137930b44c443889ab28a88fc7235cb'}, 'target': {'typeURI':
> 'service/security/account/user', 'id':
> 'openstack:9289f1b4-77f8-46cb-90b3-429745c27ecc'}, 'observer': {'typeURI':
> 'service/security', 'id':
> 'openstack:9a695172-ee8a-4588-bb1c-f0a755c1ffee'}, 'eventType': 'activity',
> 'eventTime': '2014-05-19T11:28:59.996561+0000', 'action': 'authenticate',
> 'outcome': 'pending', 'id':
> 'openstack:981e55e6-80cd-41ca-a174-3970ba22c1c4'}
> OpenStack (keystone:4382) DEBUG: CADF Event: {'typeURI': '
> http://schemas.dmtf.org/cloud/audit/1.0/event', 'initiator': {'typeURI':
> 'service/security/account/user', 'host': {'agent': 'python-keystoneclient',
> 'address': '10.141.255.254'}, 'id':
> 'openstack:dee61662-b95d-4993-9cb5-f66f260e2dd9', 'name':
> u'0137930b44c443889ab28a88fc7235cb'}, 'target': {'typeURI':
> 'service/security/account/user', 'id':
> 'openstack:8ac20a95-c732-46b9-a790-cef7cc3f2a55'}, 'observer': {'typeURI':
> 'service/security', 'id':
> 'openstack:0ec56b30-98db-4f40-9352-3c16c5f06f55'}, 'eventType': 'activity',
> 'eventTime': '2014-05-19T11:29:00.062629+0000', 'action': 'authenticate',
> 'outcome': 'success', 'id':
> 'openstack:ef422089-a6a8-4d22-a7d8-32e13caaa710'}
> OpenStack (keystone:4382) INFO: 10.141.255.254 - - [19/May/2014 04:29:00]
> "POST /v2.0/tokens HTTP/1.1" 200 6397 0.216606



>From heat-api.log:

OpenStack (heat:28518) DEBUG: JSON response : {"explanation": "Access was
> denied to this resource.", "code": 403, "error": {"message": "Access was
> denied to this resource.", "traceback": "  File
> \"/usr/lib/python2.6/site-packages/heat/common/wsgi.py\", line 676, in
> __call__\n    request, **action_args)\n  File
> \"/usr/lib/python2.6/site-packages/heat/common/wsgi.py\", line 746, in
> dispatch\n    return method(*args, **kwargs)\n  File
> \"/usr/lib/python2.6/site-packages/heat/api/openstack/v1/util.py\", line
> 30, in handle_stack_method\n    raise exc.HTTPForbidden()\n", "type":
> "HTTPForbidden"}, "title": "Forbidden"} to_json
> /usr/lib/python2.6/site-packages/heat/common/wsgi.py:57



Thanks,
Taras
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140519/e5ebb886/attachment.html>