[Openstack] keystone service endpoint creation failing on RHEL7

BYEONG-GI KIM kimbyeonggi at gmail.com
Tue May 26 03:04:36 UTC 2015


It seems working fine! Thank you for the information!

2015-05-26 11:18 GMT+09:00 Matt Kassawara <mkassawara at gmail.com>:

> The patch to address this issue in the installation guide hasn't merged
> yet. In the wsgi-keystone.conf file, you need to add "group=keystone" to
> both WSGIDaemonProcess options and then restart Apache.
>
> On Mon, May 25, 2015 at 9:14 PM, BYEONG-GI KIM <kimbyeonggi at gmail.com>
> wrote:
>
>> I just followed the installation guide,
>> http://docs.openstack.org/kilo/install-guide/install/yum/content/keystone-install.html,
>> and if the 'usermod -a -G keystone apache' is for what you mentioned, yes,
>> I did.
>>
>> Am I missing something?
>>
>>
>> 2015-05-26 10:32 GMT+09:00 Matt Kassawara <mkassawara at gmail.com>:
>>
>>> Starting the keystone service simply enables Eventlet, a library
>>> deprecated in Kilo in favor of the Apache HTTP server. I'd call it a
>>> workaround rather than a valid solution. Did you try adding the group to
>>> the WSGI configuration?
>>>
>>> On Mon, May 25, 2015 at 8:04 PM, BYEONG-GI KIM <kimbyeonggi at gmail.com>
>>> wrote:
>>>
>>>> Hello.
>>>>
>>>> I also met same problem and I solved it via following:
>>>>
>>>>
>>>> https://ask.openstack.org/en/question/66833/kilo-on-centos7-keystone-throws-http-500-except-when-using-os_token/
>>>>
>>>> 1. Stop httpd.service
>>>> 2. Start openstack-keystone.service
>>>>
>>>> Then the command 'openstack service create --name keystone
>>>> --description "OpenStack Identity" identity' finally worked. But, I'm now
>>>> confusing this is a good solution for the error because Jose said "*Take
>>>> into account that in Kilo keystone service as an stand alone server as been
>>>> deprecated for security reasons so you don't need to start it. In Kilo is
>>>> the http server in charge of port listening and keystone behaves like as a
>>>> wsgi script.*" on the above link.
>>>>
>>>> I'm not sure that I can successfully install all the openstack
>>>> components after this makeshift.
>>>>
>>>> Best regards
>>>>
>>>> Byeong-Gi KIM
>>>>
>>>>
>>>> 2015-05-25 19:40 GMT+09:00 <michael at tropyx.com>:
>>>>
>>>>>
>>>>>
>>>>> There's definitely something weird going on.... now we're trying SLES
>>>>> and getting the same error.
>>>>>
>>>>>
>>>>>
>>>>> This is the keystone-error.log (apache)
>>>>>
>>>>>
>>>>>
>>>>> 2015-05-25 05:36:00.029253 mod_wsgi (pid=13432,
>>>>> process='keystone-admin', application=''): Loading WSGI script
>>>>> '/srv/www/cgi-bin/keystone/admin'.
>>>>> 2015-05-25 05:36:00.029822 mod_wsgi (pid=13432): Target WSGI script
>>>>> '/srv/www/cgi-bin/keystone/admin' cannot be loaded as Python module.
>>>>> 2015-05-25 05:36:00.029875 mod_wsgi (pid=13432): Exception occurred
>>>>> processing WSGI script '/srv/www/cgi-bin/keystone/admin'.
>>>>> 2015-05-25 05:36:00.029937 Traceback (most recent call last):
>>>>> 2015-05-25 05:36:00.029993   File "/srv/www/cgi-bin/keystone/admin",
>>>>> line 25, in <module>
>>>>> 2015-05-25 05:36:00.030064     application =
>>>>> wsgi_server.initialize_application(name)
>>>>> 2015-05-25 05:36:00.030124   File
>>>>> "/usr/lib/python2.7/site-packages/keystone/server/wsgi.py", line 38, in
>>>>> initialize_application
>>>>> 2015-05-25 05:36:00.030178     common.configure()
>>>>> 2015-05-25 05:36:00.030219   File
>>>>> "/usr/lib/python2.7/site-packages/keystone/server/common.py", line 28, in
>>>>> configure
>>>>> 2015-05-25 05:36:00.030264     config.configure()
>>>>> 2015-05-25 05:36:00.030304   File
>>>>> "/usr/lib/python2.7/site-packages/keystone/common/config.py", line 1103, in
>>>>> configure
>>>>> 2015-05-25 05:36:00.030342     help='Do not monkey-patch threading
>>>>> system modules.'))
>>>>> 2015-05-25 05:36:00.030371   File
>>>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1794, in __inner
>>>>> 2015-05-25 05:36:00.030405     result = f(self, *args, **kwargs)
>>>>> 2015-05-25 05:36:00.030429   File
>>>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1967, in
>>>>> register_cli_opt
>>>>> 2015-05-25 05:36:00.030454     raise ArgsAlreadyParsedError("cannot
>>>>> register CLI option")
>>>>> 2015-05-25 05:36:00.030495 ArgsAlreadyParsedError: arguments already
>>>>> parsed: cannot register CLI option
>>>>> 2015-05-25 05:36:00.030671 AH00690: no acceptable variant:
>>>>> /usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var
>>>>>
>>>>>
>>>>>
>>>>> Does that give anyone a clue as to what is going wrong?
>>>>>
>>>>>
>>>>>
>>>>> Here's our Apache-Keystone-WSGI config:
>>>>>
>>>>>
>>>>>
>>>>> Listen 5000
>>>>> Listen 35357
>>>>>
>>>>> <VirtualHost *:5000>
>>>>>     WSGIDaemonProcess keystone-public processes=5 threads=1
>>>>> user=keystone display-name=%{GROUP}
>>>>>     WSGIProcessGroup keystone-public
>>>>>     WSGIScriptAlias / /srv/www/cgi-bin/keystone/main
>>>>>     WSGIApplicationGroup %{GLOBAL}
>>>>>     WSGIPassAuthorization On
>>>>>     ErrorLogFormat "%{cu}t %M"
>>>>>     LogLevel info
>>>>>     ErrorLog /var/log/apache2/keystone-error.log
>>>>>     CustomLog /var/log/apache2/keystone-access.log combined
>>>>> </VirtualHost>
>>>>>
>>>>> <VirtualHost *:35357>
>>>>>     WSGIDaemonProcess keystone-admin processes=5 threads=1
>>>>> user=keystone display-name=%{GROUP}
>>>>>     WSGIProcessGroup keystone-admin
>>>>>     WSGIScriptAlias / /srv/www/cgi-bin/keystone/admin
>>>>>     WSGIApplicationGroup %{GLOBAL}
>>>>>     WSGIPassAuthorization On
>>>>>     ErrorLogFormat "%{cu}t %M"
>>>>>     LogLevel info
>>>>>     ErrorLog /var/log/apache2/keystone-error.log
>>>>>     CustomLog /var/log/apache2/keystone-access.log combined
>>>>> </VirtualHost>
>>>>>
>>>>>
>>>>>
>>>>> Thanks in advance.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Mailing list:
>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>> Post to     : openstack at lists.openstack.org
>>>>> Unsubscribe :
>>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list:
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>> Post to     : openstack at lists.openstack.org
>>>> Unsubscribe :
>>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150526/ff6269fe/attachment.html>


More information about the Openstack mailing list