[Openstack] Keystone problem
Louis-Philippe Reid
louis.philippe.reid at gmail.com
Tue Sep 9 14:47:48 UTC 2014
Ok, I think I just found a typo resulting from the correction I did for
adminurl. I have http:///lecloud100 (note the triple /). Let me check
that again and retest.
On Tue, Sep 9, 2014 at 10:35 AM, Louis-Philippe Reid <
louis.philippe.reid at gmail.com> wrote:
>
>
> I'm not sure I understand you correctly. keystone is not associated
> properly with the role? Let met trace association and you will be able to
> tell me where the link is not good:
>
> user 4e51cf42393e478ba630233a1984e5ab admin associated to tenant admin bc8c91c4c321480a99c1d5c01f9ee2ee
>
>
> # keystone user-role-list --user admin --tenant admin
> WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
> +----------------------------------+----------+----------------------------------+----------------------------------+
> | id | name | user_id | tenant_id |
> +----------------------------------+----------+----------------------------------+----------------------------------+
> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
> | e51a667a851f4768b3ee3fb7c4de711d | admin | 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
> +----------------------------------+----------+----------------------------------+----------------------------------+
>
>
> user_id is mapping to the correct user:
>
> # keystone user-list
> WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
> +----------------------------------+-------+---------+---------------------------------+
> | id | name | enabled | email |
> +----------------------------------+-------+---------+---------------------------------+
> | 4e51cf42393e478ba630233a1984e5ab | admin | True | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
> | 38ee12f0c8364218a7ffab0c39fbce5f | demo | True | xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx |
> +----------------------------------+-------+---------+---------------------------------+
>
> also associated to the right tenant:
>
> # keystone tenant-list
> WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
> +----------------------------------+---------+---------+
> | id | name | enabled |
> +----------------------------------+---------+---------+
> | bc8c91c4c321480a99c1d5c01f9ee2ee | admin | True |
> | 9bddf495845e4138b6c05305917518b9 | demo | True |
> | 2ba53d8ccf82496eb4c0ed91db73df41 | service | True |
> +----------------------------------+---------+---------+
>
>
>
> service keystone is associated correctly to endpoint:
>
>
> keystone cad84013496a4d33a132fd99026d1322 associated with endpoint 9c5aa10925014e7c939ad392d8384b22
>
>
> # keystone service-list
> WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
> +----------------------------------+----------+----------+--------------------+
> | id | name | type | description |
> +----------------------------------+----------+----------+--------------------+
> | cad84013496a4d33a132fd99026d1322 | keystone | identity | OpenStack Identity |
> +----------------------------------+----------+----------+--------------------+
>
> # keystone endpoint-list
> WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
> +----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+
> | id | region | publicurl | internalurl | adminurl | service_id |
> +----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+
> | 9c5aa10925014e7c939ad392d8384b22 | regionOne | http://cloud-pp-public-10-15-109-200.xxxx.com:5000/v2.0 | http://lecloud100:5000/v2.0 | http:///lecloud100:35357/v2.0 | cad84013496a4d33a132fd99026d1322 |
> +----------------------------------+-----------+------------------------------------------------------------+-----------------------------+-------------------------------+----------------------------------+
>
>
> Looking back at the documentation I don't see any missing links. What am I missing?
>
> Thanks,
>
>
>
> On Tue, Sep 9, 2014 at 10:06 AM, <raghavendra.lad at accenture.com> wrote:
>
>> Hi,
>>
>>
>> I did check the attached doc. I find that the keystone is not
>> associated properly with the role.
>>
>>
>> You can try to unset and then keystone token-get, after which try
>> executing the keystone commands by sourcing from the file.
>>
>>
>> Let me know if that helps.
>>
>>
>> Regards,
>>
>> Raghavendra Lad
>>
>>
>> ------------------------------
>> *From:* Louis-Philippe Reid <louis.philippe.reid at gmail.com>
>> *Sent:* Tuesday, September 9, 2014 7:25 PM
>> *To:* Lad, Raghavendra
>> *Cc:* openstack at lists.openstack.org
>> *Subject:* Re: [Openstack] Keystone problem
>>
>> Thanks for your quick reply, I found an error in my installation when
>> I defined the endpoint. I used port 5000 for the adminurl. I restarted
>> from scratch, once again just to be sure it was clean and made sure ton
>> unset the token and service endpoint has you suggested. I did use the --os
>> commands. I did create admin and associate everything. Also, the error I
>> get since I corrected the adminurl is now different.
>>
>> [root at lecloud100 ~]# env | grep OS_
>> OS_PASSWORD=xxxxxxxxxx
>> OS_AUTH_URL=http://lecloud100:35357/v2.0
>> OS_USERNAME=admin
>> OS_TENANT_NAME=admin
>>
>> # keystone user-list
>> 'NoneType' object has no attribute 'encode'
>>
>>
>> Here is all the information used to create the config, line by line and
>> debug outputs:
>>
>> http://pastebin.com/6XWVqBqb
>>
>> Thanks,
>>
>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140909/8164fd6c/attachment.html>
More information about the Openstack
mailing list