[Openstack] keystone service endpoint creation failing on RHEL7

Matt Kassawara mkassawara at gmail.com
Tue May 26 02:18:57 UTC 2015


The patch to address this issue in the installation guide hasn't merged
yet. In the wsgi-keystone.conf file, you need to add "group=keystone" to
both WSGIDaemonProcess options and then restart Apache.

On Mon, May 25, 2015 at 9:14 PM, BYEONG-GI KIM <kimbyeonggi at gmail.com>
wrote:

> I just followed the installation guide,
> http://docs.openstack.org/kilo/install-guide/install/yum/content/keystone-install.html,
> and if the 'usermod -a -G keystone apache' is for what you mentioned, yes,
> I did.
>
> Am I missing something?
>
>
> 2015-05-26 10:32 GMT+09:00 Matt Kassawara <mkassawara at gmail.com>:
>
>> Starting the keystone service simply enables Eventlet, a library
>> deprecated in Kilo in favor of the Apache HTTP server. I'd call it a
>> workaround rather than a valid solution. Did you try adding the group to
>> the WSGI configuration?
>>
>> On Mon, May 25, 2015 at 8:04 PM, BYEONG-GI KIM <kimbyeonggi at gmail.com>
>> wrote:
>>
>>> Hello.
>>>
>>> I also met same problem and I solved it via following:
>>>
>>>
>>> https://ask.openstack.org/en/question/66833/kilo-on-centos7-keystone-throws-http-500-except-when-using-os_token/
>>>
>>> 1. Stop httpd.service
>>> 2. Start openstack-keystone.service
>>>
>>> Then the command 'openstack service create --name keystone --description
>>> "OpenStack Identity" identity' finally worked. But, I'm now confusing this
>>> is a good solution for the error because Jose said "*Take into account
>>> that in Kilo keystone service as an stand alone server as been deprecated
>>> for security reasons so you don't need to start it. In Kilo is the http
>>> server in charge of port listening and keystone behaves like as a wsgi
>>> script.*" on the above link.
>>>
>>> I'm not sure that I can successfully install all the openstack
>>> components after this makeshift.
>>>
>>> Best regards
>>>
>>> Byeong-Gi KIM
>>>
>>>
>>> 2015-05-25 19:40 GMT+09:00 <michael at tropyx.com>:
>>>
>>>>
>>>>
>>>> There's definitely something weird going on.... now we're trying SLES
>>>> and getting the same error.
>>>>
>>>>
>>>>
>>>> This is the keystone-error.log (apache)
>>>>
>>>>
>>>>
>>>> 2015-05-25 05:36:00.029253 mod_wsgi (pid=13432,
>>>> process='keystone-admin', application=''): Loading WSGI script
>>>> '/srv/www/cgi-bin/keystone/admin'.
>>>> 2015-05-25 05:36:00.029822 mod_wsgi (pid=13432): Target WSGI script
>>>> '/srv/www/cgi-bin/keystone/admin' cannot be loaded as Python module.
>>>> 2015-05-25 05:36:00.029875 mod_wsgi (pid=13432): Exception occurred
>>>> processing WSGI script '/srv/www/cgi-bin/keystone/admin'.
>>>> 2015-05-25 05:36:00.029937 Traceback (most recent call last):
>>>> 2015-05-25 05:36:00.029993   File "/srv/www/cgi-bin/keystone/admin",
>>>> line 25, in <module>
>>>> 2015-05-25 05:36:00.030064     application =
>>>> wsgi_server.initialize_application(name)
>>>> 2015-05-25 05:36:00.030124   File
>>>> "/usr/lib/python2.7/site-packages/keystone/server/wsgi.py", line 38, in
>>>> initialize_application
>>>> 2015-05-25 05:36:00.030178     common.configure()
>>>> 2015-05-25 05:36:00.030219   File
>>>> "/usr/lib/python2.7/site-packages/keystone/server/common.py", line 28, in
>>>> configure
>>>> 2015-05-25 05:36:00.030264     config.configure()
>>>> 2015-05-25 05:36:00.030304   File
>>>> "/usr/lib/python2.7/site-packages/keystone/common/config.py", line 1103, in
>>>> configure
>>>> 2015-05-25 05:36:00.030342     help='Do not monkey-patch threading
>>>> system modules.'))
>>>> 2015-05-25 05:36:00.030371   File
>>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1794, in __inner
>>>> 2015-05-25 05:36:00.030405     result = f(self, *args, **kwargs)
>>>> 2015-05-25 05:36:00.030429   File
>>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1967, in
>>>> register_cli_opt
>>>> 2015-05-25 05:36:00.030454     raise ArgsAlreadyParsedError("cannot
>>>> register CLI option")
>>>> 2015-05-25 05:36:00.030495 ArgsAlreadyParsedError: arguments already
>>>> parsed: cannot register CLI option
>>>> 2015-05-25 05:36:00.030671 AH00690: no acceptable variant:
>>>> /usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var
>>>>
>>>>
>>>>
>>>> Does that give anyone a clue as to what is going wrong?
>>>>
>>>>
>>>>
>>>> Here's our Apache-Keystone-WSGI config:
>>>>
>>>>
>>>>
>>>> Listen 5000
>>>> Listen 35357
>>>>
>>>> <VirtualHost *:5000>
>>>>     WSGIDaemonProcess keystone-public processes=5 threads=1
>>>> user=keystone display-name=%{GROUP}
>>>>     WSGIProcessGroup keystone-public
>>>>     WSGIScriptAlias / /srv/www/cgi-bin/keystone/main
>>>>     WSGIApplicationGroup %{GLOBAL}
>>>>     WSGIPassAuthorization On
>>>>     ErrorLogFormat "%{cu}t %M"
>>>>     LogLevel info
>>>>     ErrorLog /var/log/apache2/keystone-error.log
>>>>     CustomLog /var/log/apache2/keystone-access.log combined
>>>> </VirtualHost>
>>>>
>>>> <VirtualHost *:35357>
>>>>     WSGIDaemonProcess keystone-admin processes=5 threads=1
>>>> user=keystone display-name=%{GROUP}
>>>>     WSGIProcessGroup keystone-admin
>>>>     WSGIScriptAlias / /srv/www/cgi-bin/keystone/admin
>>>>     WSGIApplicationGroup %{GLOBAL}
>>>>     WSGIPassAuthorization On
>>>>     ErrorLogFormat "%{cu}t %M"
>>>>     LogLevel info
>>>>     ErrorLog /var/log/apache2/keystone-error.log
>>>>     CustomLog /var/log/apache2/keystone-access.log combined
>>>> </VirtualHost>
>>>>
>>>>
>>>>
>>>> Thanks in advance.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list:
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>> Post to     : openstack at lists.openstack.org
>>>> Unsubscribe :
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to     : openstack at lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150525/6ba1eeff/attachment.html>


More information about the Openstack mailing list