Open Stack

Matt

Thanks the files in the /var/www/cgi-bin/keystone directory were created using the command as specified in the install document :

curl http://git.openstack.org/cgit/openstack/keystone/plain/httpd/keystone.py?h=stable/kilo | tee /var/www/cgi-bin/keystone/main /var/www/cgi-bin/keystone/admin

The contents of which are :

[root at controller httpd]# more /var/www/cgi-bin/keystone/main
# Copyright 2013 OpenStack Foundation
#
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

import os

from keystone.server import wsgi as wsgi_server


name = os.path.basename(__file__)

# NOTE(ldbragst): 'application' is required in this context by WSGI spec.
# The following is a reference to Python Paste Deploy documentation
# http://pythonpaste.org/deploy/
application = wsgi_server.initialize_application(name)


The ports do appear to be listening  `ss –lntp`
State      Recv-Q Send-Q                                              Local Address:Port                                                Peer Address:Port
LISTEN     0      128                                                             *:5000                                                           *:*      users:(("httpd",13818,4),("httpd",13817,4),("httpd",13816,4),("httpd",13815,4),("httpd",13814,4),("httpd",13803,4))

LISTEN     0      128                                                             *:35357                                                          *:*      users:(("httpd",13818,5),("httpd",13817,5),("httpd",13816,5),("httpd",13815,5),("httpd",13814,5),("httpd",13803,5))

Regarding the /etc/keystone/keystone.conf file on this instance I just created a new file and copied the following (again from the installation document) however I have also edited the file previously and just modified the relevant lines but the problem is the same :

[root at controller log]# more /etc/keystone/keystone.conf
[DEFAULT]
admin_token = *******
verbose = true

[database]
connection = mysql://keystone:******@controller/keystone

[memcache]
servers = localhost:11211

[token]
provider = keystone.token.providers.uuid.Provider
driver = keystone.token.persistence.backends.memcache.Token

[revoke]
driver = keystone.contrib.revoke.backends.sql.Revoke

The wsgi-keystone.conf is :

[root at controller log]# more /etc/httpd/conf.d/wsgi-keystone.conf
Listen 5000
Listen 35357

<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /var/www/cgi-bin/keystone/main
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
LogLevel debug
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error-5000.log
CustomLog /var/log/httpd/keystone-access-5000.log combined
</VirtualHost>

<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
LogLevel debug
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error-35357.log
CustomLog /var/log/httpd/keystone-access-35357.log combined
</VirtualHost>

Thanks for your time and help in looking into this.

Darren

From: Matt Kassawara [mailto:mkassawara at gmail.com]
Sent: 26 May 2015 15:23
To: BUTTS, Darren (Darren)** CTR **
Cc: openstack at lists.openstack.org
Subject: Re: [Openstack] Openstack Kilo Fresh install on Centos7 Create Keystone Service Error

A 404 indicates that Apache is probably listening on ports 5000 and 35357. Can you check with the 'ss -lntp' command to verify both ports? Also, can you check the WSGI configuration (wsgi-keystone.conf) again and the files that you copy into the /var/www/cgi-bin/keystone directory?

On Tue, May 26, 2015 at 8:11 AM, BUTTS, Darren (Darren)** CTR ** <darren.butts at alcatel-lucent.com<mailto:darren.butts at alcatel-lucent.com>> wrote:
All

I am currently trying to install the Openstack Kilo release for the first time on a centos 7 virtual machine. Following the steps in the installation guide I get to :

Create the service entity and API endpoint

At this point I am always faced with an HTTP error and depending on the OS_URL I use the error is different :
export OS_URL=http://controller:35357/v2.0
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Not Found (HTTP 404)

export OS_URL=http://controller.npi-openstack.com:35357/v2.0
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Not Found (HTTP 404)

export OS_URL=http://127.0.0.1:35357/v2.0
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Service Unavailable (HTTP 503)

export OS_URL=http://127.0.0.1:5000/v2.0
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Service Unavailable (HTTP 503)

export OS_URL=http://controller:5000/v2.0
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Not Found (HTTP 404)

Specifying the host name generates a different error to the local host, I can see that the port is listening using `netstat –l`
tcp        0      0 0.0.0.0:openstack-id    0.0.0.0:*               LISTEN

As his release is using the WSG process I can also see the sockets active :
unix  2      [ ACC ]     STREAM     LISTENING     20240    /run/httpd/wsgi.3252.0.1.sock
unix  2      [ ACC ]     STREAM     LISTENING     20243    /run/httpd/wsgi.3252.0.2.sock

Http errors logs show :

[root at controller httpd]# more keystone-error.log
2015-05-26 12:50:56.567779 mod_wsgi (pid=3260): Attach interpreter ''.
2015-05-26 12:50:56.574241 mod_wsgi (pid=3253): Attach interpreter ''.
2015-05-26 12:50:56.595580 mod_wsgi (pid=3259): Attach interpreter ''.
2015-05-26 12:50:56.603280 mod_wsgi (pid=3257): Attach interpreter ''.
2015-05-26 12:50:56.613034 mod_wsgi (pid=3261): Attach interpreter ''.
2015-05-26 12:50:56.621634 mod_wsgi (pid=3255): Attach interpreter ''.
2015-05-26 12:50:56.649824 mod_wsgi (pid=3256): Attach interpreter ''.
2015-05-26 12:50:56.656236 mod_wsgi (pid=3258): Attach interpreter ''.
2015-05-26 12:50:56.657031 mod_wsgi (pid=3254): Attach interpreter ''.
2015-05-26 12:50:56.662904 mod_wsgi (pid=3262): Attach interpreter ''.
[root at controller httpd]# more error_log
[Tue May 26 12:50:56.391098 2015] [suexec:notice] [pid 3252] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue May 26 12:50:56.430498 2015] [auth_digest:notice] [pid 3252] AH01757: generating secret for digest authentication ...
[Tue May 26 12:50:56.432171 2015] [lbmethod_heartbeat:notice] [pid 3252] AH02282: No slotmem from mod_heartmonitor
[Tue May 26 12:50:56.479156 2015] [mpm_prefork:notice] [pid 3252] AH00163: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 configured -- resuming normal ope
rations
[Tue May 26 12:50:56.479244 2015] [core:notice] [pid 3252] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

This is my first time attempting to install Openstack although I have now gone through the process numerous times unsuccessfully by killing and rebuilding the
Virtual machine so I know that there is nothing transient in the system to suddenly cause it to work should it do so.

As a side note I have disabled the firewall and also SELINUX to see if that has any effect but it doesn’t.

Any help would be greatly appreciated.

Darren


_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150526/184aa765/attachment.html>