[Openstack] keystone service endpoint creation failing on RHEL7

Michael Lindner michael at tropyx.com
Sun May 24 01:43:27 UTC 2015


Yes indeed, even though that patch was for tasks we've yet to get to, 
still exactly the same error.

Been bashing my head against this wall for days now, I've resorted to 
reading source - and begging for help here :-D



On 24/05/15 01:18, Matt Kassawara wrote:
> You made the wsgi vhost changes from the patch that hasn't merged?
> On Sat, May 23, 2015 at 08:41 Michael Lindner <michael at tropyx.com 
> <mailto:michael at tropyx.com>> wrote:
>
>     Completely disabled.
>     It really looks like it can't read the password (and correct
>     hostname) from keystone.conf.....
>
>
>
>     -----Original Message-----
>     From: Matt Kassawara <mkassawara at gmail.com
>     <mailto:mkassawara at gmail.com>>
>     To: Michael Lindner <michael at tropyx.com <mailto:michael at tropyx.com>>
>     Sent: Sun, 24 May 2015 12:31 AM
>     Subject: Re: [Openstack] keystone service endpoint creation
>     failing on RHEL7
>
>     Any selinux issues?
>     On Sat, May 23, 2015 at 07:57 Michael Lindner <michael at tropyx.com
>     <mailto:michael at tropyx.com>> wrote:
>
>         Yep. And stuff is coming up in the custom apache log files
>         showing they're working.
>         I'm stumped lol.
>
>
>         Michael Lindner
>         IT Systems Consultant
>
>         Sent from a Linux and Java based Android!
>
>
>
>         -----Original Message-----
>         From: Matt Kassawara <mkassawara at gmail.com
>         <mailto:mkassawara at gmail.com>>
>         To: Michael Lindner <michael at tropyx.com
>         <mailto:michael at tropyx.com>>
>         Cc: "openstack at lists.openstack.org
>         <mailto:openstack at lists.openstack.org>"
>         <openstack at lists.openstack.org
>         <mailto:openstack at lists.openstack.org>>
>         Sent: Sat, 23 May 2015 11:11 PM
>         Subject: Re: [Openstack] keystone service endpoint creation
>         failing on RHEL7
>
>         Did you restart Apache after adding the group to the WSGI
>         virtual host config file?
>
>         On Sat, May 23, 2015 at 1:25 AM, Michael Lindner
>         <michael at tropyx.com <mailto:michael at tropyx.com>> wrote:
>
>
>             Hi List,
>
>             That wasn't it, unfortunately.  I made those changes but
>             to no avail.
>
>             We're hitting this problem before that stage in the
>             install guide anyway, in the "Create the service entity
>             and API endpoint" section.
>
>             *To create the service entity and API endpoint*
>
>             1.
>
>                 The Identity service manages a catalog of services in
>                 your OpenStack environment. Services use this catalog
>                 to determine the other services available in your
>                 environment.
>
>                 Create the service entity for the Identity service:
>
>                 $ openstack service create \
>                    --name keystone --description "OpenStack Identity" identity
>
>
>             The SQL in keystone.conf works perfectly, copying it to
>             the shell logs straight in to the keystone database as
>             user keystone.
>
>             It does look like WSGI - from keystone.log:
>
>             2015-05-23 16:03:44.909 1739 TRACE keystone.common.wsgi
>             OperationalError: (OperationalError) (1045, "Access denied
>             for user 'keystone'@'localhost' (using password: YES)")
>             None None
>
>             In keystone.conf the hostname is set to "controller", not
>             localhost. (and changing it makes no diff)
>
>             Thanks,
>
>             Mike.
>
>
>
>             On 23/05/15 13:59, Matt Kassawara wrote:
>>             Robson,
>>
>>             In this particular case, I believe the WSGI bits can't
>>             read the keystone configuration file and assume default
>>             values.
>>
>>             On Fri, May 22, 2015 at 11:15 PM, Robson Ramos Barreto
>>             <robson.rbarreto at gmail.com
>>             <mailto:robson.rbarreto at gmail.com>> wrote:
>>
>>                 Hi Michael,
>>
>>                 Did you check the grant to keystone user on database
>>                 and are you using the same password/host on the
>>                 keystone config file and database ?
>>
>>                 Regards
>>
>>                 Sent from my iPhone
>>
>>                 On 22/05/2015, at 22:43, michael at tropyx.com
>>                 <mailto:michael at tropyx.com> wrote:
>>
>>>                 Hi List,
>>>
>>>
>>>                 We're trying to install Kilo on RHEL7, when we get
>>>                 to creating service endpoints, this command:
>>>
>>>                 openstack service create \
>>>                   --name keystone --description "OpenStack Identity"
>>>                 identity
>>>
>>>                 Consistently returns this error:
>>>
>>>                 ERROR: openstack An unexpected error prevented the
>>>                 server from fulfilling your request. (HTTP 500)
>>>
>>>                 Looking into keystone.log we see that the final
>>>                 error reads:
>>>
>>>                 (OperationalError) (1045, "Access denied for user
>>>                 'keystone'@'localhost' (using password: YES)") None None
>>>
>>>                 Three of our team have tried reinstalling as per the
>>>                 instructions, we've triple checked our config and
>>>                 database settings but are still lost.
>>>
>>>                 Apologies if this question is terribly backward, but
>>>                 we've exhausted all other ideas.
>>>
>>>                 Thanks,
>>>
>>>                 MikeL.
>>>
>>>                 _______________________________________________
>>>                 Mailing list:
>>>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>                 Post to     : openstack at lists.openstack.org
>>>                 <mailto:openstack at lists.openstack.org>
>>>                 Unsubscribe :
>>>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>                 _______________________________________________
>>                 Mailing list:
>>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>                 Post to     : openstack at lists.openstack.org
>>                 <mailto:openstack at lists.openstack.org>
>>                 Unsubscribe :
>>                 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
>
>             _______________________________________________
>             Mailing list:
>             http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>             Post to     : openstack at lists.openstack.org
>             <mailto:openstack at lists.openstack.org>
>             Unsubscribe :
>             http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150524/8e534065/attachment.html>


More information about the Openstack mailing list