Open Stack

401 seems to indicate the token you're getting from keystone isn't able to
be validated by the swift proxy.

Maybe the proxy logs or keystone logs will indicate if keystone thinks AUTH_
ca382398c06749f483d4adfa6cecd868 is a valid token?

-Clay

On Fri, Nov 14, 2014 at 8:31 PM, Vivek Varghese Cherian <
vivekcherian at gmail.com> wrote:

> Hi,
>
> I am running OpenStack Juno on Ubuntu 14.04 and I am trying to configure
> swift as per the URL:
> http://docs.openstack.org/juno/install-guide/install/apt/content/ch_swift.html
>
> I am getting the following error when I do a swift stat.
>
>
> --------------------------------------------------------------------------------------------------
> root at juno-14:/etc/swift# swift --debug stat
> DEBUG:keystoneclient.auth.identity.v2:Making authentication request to
> http://172.18.116.227:35357/v2.0/tokens
> INFO:urllib3.connectionpool:Starting new HTTP connection (1):
> 172.18.116.227
> DEBUG:urllib3.connectionpool:Setting read timeout to None
> DEBUG:urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3223
> DEBUG:iso8601.iso8601:Parsed 2014-11-14T19:52:22Z into {'tz_sign': None,
> 'second_fraction': None, 'hour': u'19', 'daydash': u'14', 'tz_hour': None,
> 'month': None, 'timezone': u'Z', 'second': u'22', 'tz_minute': None,
> 'year': u'2014', 'separator': u'T', 'monthdash': u'11', 'day': None,
> 'minute': u'52'} with default timezone <iso8601.iso8601.Utc object at
> 0x7fe5549b17d0>
> DEBUG:iso8601.iso8601:Got u'2014' for 'year' with default None
> DEBUG:iso8601.iso8601:Got u'11' for 'monthdash' with default 1
> DEBUG:iso8601.iso8601:Got 11 for 'month' with default 11
> DEBUG:iso8601.iso8601:Got u'14' for 'daydash' with default 1
> DEBUG:iso8601.iso8601:Got 14 for 'day' with default 14
> DEBUG:iso8601.iso8601:Got u'19' for 'hour' with default None
> DEBUG:iso8601.iso8601:Got u'52' for 'minute' with default None
> DEBUG:iso8601.iso8601:Got u'22' for 'second' with default None
> INFO:urllib3.connectionpool:Starting new HTTP connection (1):
> 172.18.116.227
> DEBUG:urllib3.connectionpool:Setting read timeout to None
> DEBUG:urllib3.connectionpool:"HEAD
> /v1/AUTH_ca382398c06749f483d4adfa6cecd868 HTTP/1.1" 401 0
> INFO:swiftclient:REQ: curl -i
> http://172.18.116.227:8080/v1/AUTH_ca382398c06749f483d4adfa6cecd868 -I -H
> "X-Auth-Token: 1f34c7a5f43b4477b5cfd64356029c52"
> INFO:swiftclient:RESP STATUS: 401 Unauthorized
> INFO:swiftclient:RESP HEADERS: [('date', 'Fri, 14 Nov 2014 18:52:22 GMT'),
> ('content-length', '0'), ('content-type', 'text/html; charset=UTF-8'),
> ('www-authenticate', 'Swift
> realm="AUTH_ca382398c06749f483d4adfa6cecd868"'), ('x-trans-id',
> 'tx6a610ba3f34d41ab967eb-0054664f66')]
> DEBUG:keystoneclient.auth.identity.v2:Making authentication request to
> http://172.18.116.227:35357/v2.0/tokens
> INFO:urllib3.connectionpool:Starting new HTTP connection (1):
> 172.18.116.227
> DEBUG:urllib3.connectionpool:Setting read timeout to None
> DEBUG:urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3223
> DEBUG:iso8601.iso8601:Parsed 2014-11-14T19:52:23Z into {'tz_sign': None,
> 'second_fraction': None, 'hour': u'19', 'daydash': u'14', 'tz_hour': None,
> 'month': None, 'timezone': u'Z', 'second': u'23', 'tz_minute': None,
> 'year': u'2014', 'separator': u'T', 'monthdash': u'11', 'day': None,
> 'minute': u'52'} with default timezone <iso8601.iso8601.Utc object at
> 0x7fe5549b17d0>
> DEBUG:iso8601.iso8601:Got u'2014' for 'year' with default None
> DEBUG:iso8601.iso8601:Got u'11' for 'monthdash' with default 1
> DEBUG:iso8601.iso8601:Got 11 for 'month' with default 11
> DEBUG:iso8601.iso8601:Got u'14' for 'daydash' with default 1
> DEBUG:iso8601.iso8601:Got 14 for 'day' with default 14
> DEBUG:iso8601.iso8601:Got u'19' for 'hour' with default None
> DEBUG:iso8601.iso8601:Got u'52' for 'minute' with default None
> DEBUG:iso8601.iso8601:Got u'23' for 'second' with default None
> INFO:urllib3.connectionpool:Starting new HTTP connection (1):
> 172.18.116.227
> DEBUG:urllib3.connectionpool:Setting read timeout to None
> DEBUG:urllib3.connectionpool:"HEAD
> /v1/AUTH_ca382398c06749f483d4adfa6cecd868 HTTP/1.1" 401 0
> INFO:swiftclient:REQ: curl -i
> http://172.18.116.227:8080/v1/AUTH_ca382398c06749f483d4adfa6cecd868 -I -H
> "X-Auth-Token: b3df5bccbd424707b19543f0f02beed1"
> INFO:swiftclient:RESP STATUS: 401 Unauthorized
> INFO:swiftclient:RESP HEADERS: [('date', 'Fri, 14 Nov 2014 18:52:23 GMT'),
> ('content-length', '0'), ('content-type', 'text/html; charset=UTF-8'),
> ('www-authenticate', 'Swift
> realm="AUTH_ca382398c06749f483d4adfa6cecd868"'), ('x-trans-id',
> 'txd492cc40c8f7443988463-0054664f67')]
> ERROR:swiftclient:Account HEAD failed:
> http://172.18.116.227:8080/v1/AUTH_ca382398c06749f483d4adfa6cecd868 401
> Unauthorized
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line
> 1236, in _retry
>     rv = func(self.url, self.token, *args, **kwargs)
>   File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 521,
> in head_account
>     http_response_content=body)
> ClientException: Account HEAD failed:
> http://172.18.116.227:8080/v1/AUTH_ca382398c06749f483d4adfa6cecd868 401
> Unauthorized
> Traceback (most recent call last):
>   File "/usr/bin/swift", line 10, in <module>
>     sys.exit(main())
>   File "/usr/lib/python2.7/dist-packages/swiftclient/shell.py", line 1287,
> in main
>     globals()['st_%s' % args[0]](parser, argv[1:], output)
>   File "/usr/lib/python2.7/dist-packages/swiftclient/shell.py", line 492,
> in st_stat
>     stat_result = swift.stat()
>   File "/usr/lib/python2.7/dist-packages/swiftclient/service.py", line
> 427, in stat
>     raise SwiftError('Account not found', exc=err)
> swiftclient.service.SwiftError: 'Account not found'
>
>
> --------------------------------------------------------------------------------------------------
>
> /var/log/syslog shows me that sda2 is not mounted, sda2 is a 100 GB LVM
> out of which 50 GB has been carved out for swift. The rest of the 50 GB is
> being
> used by Cinder.
>
> ------------------------------------------------------------------------------------------------------------------------
> Nov 14 14:09:00 juno-14 object-replicator: Starting object replication
> pass.
> Nov 14 14:09:00 juno-14 object-replicator: sda2 is not mounted
> Nov 14 14:09:00 juno-14 object-replicator: Nothing replicated for
> 0.003676891326
>
> ----------------------------------------------------------------------------------------------------------------------
>
> mount gives me the following output
>
> /dev/mapper/cinder--volumes-swift on /srv/node/swift type xfs (rw)
>
>
>
>
>
> ----------------------------------------------------------------------------------------------------------------------
> root at juno-14:~# cat /etc/fstab
> # /etc/fstab: static file system information.
> #
> # Use 'blkid' to print the universally unique identifier for a
> # device; this may be used with UUID= as a more robust way to name devices
> # that works even if disks are added and removed. See fstab(5).
> #
> # <file system> <mount point>   <type>  <options>       <dump>  <pass>
> # / was on /dev/sda1 during installation
> UUID=2b126311-d0a5-46bd-b91a-41c157d12168 /               ext4
> errors=remount
> -ro 0       1
> # swap was on /dev/sda3 during installation
> UUID=5ccb0969-12c2-444d-9526-6f54c9eed5b8 none            swap
> sw
> 0       0
> /dev/fd0        /media/floppy0  auto    rw,user,noauto,exec,utf8 0       0
>
> UUID="4b472864-4d5f-4943-86c6-2fa13d114dda"  /srv/node/swift    xfs
> defaults
>
> -----------------------------------------------------------------------------------------------------------------------
>
>
> I have generated the swift_hash_path_suffix and swift_hash_path_prefix in
> swift.conf by
> openssl rand -hex 10, I am not sure if this is a cause for the issue.
>
> Any pointers would be most welcome.
>
>
>
> Regards,
> --
> Vivek Varghese Cherian
>
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20141117/dccde921/attachment.html>