[Openstack] Openstack Kilo Fresh install on Centos7 Create Keystone Service Error

Matt Kassawara mkassawara at gmail.com
Tue May 26 20:44:39 UTC 2015


Please stop with the misinformation. Kilo was released on April 30th and
the RDO packages several weeks later. In this particular case, I see no
reason to use Juno or avoid using Apache in front of keystone.

Darren,

This almost seems like a DNS issue. Do the contents of /etc/hosts, Apache
"ServerName" directive, and network configuration match up?

On Tue, May 26, 2015 at 10:58 AM, Mehdi BADAOUI <mehdiuniv at gmail.com> wrote:

> Darren,
>
> Send me your logs please?
>
> Regards,
>
> 2015-05-26 17:53 GMT+02:00 BUTTS, Darren (Darren)** CTR ** <
> darren.butts at alcatel-lucent.com>:
>
>>  Mehdi
>>
>>
>>
>> I thought Kilo had been officially released sorry for any
>> misunderstanding. I will look into using Juno however it would be good to
>> understand perhaps why this is happening in Kilo for this fresh
>> installation as I am following the documentation so not really sure where
>> it is going wrong.
>>
>>
>>
>> Thanks
>>
>>
>>
>> Darren
>>
>>
>>
>> *From:* Mehdi BADAOUI [mailto:mehdiuniv at gmail.com]
>> *Sent:* 26 May 2015 15:58
>> *To:* BUTTS, Darren (Darren)** CTR **
>> *Cc:* Matt Kassawara; openstack at lists.openstack.org
>>
>> *Subject:* Re: [Openstack] Openstack Kilo Fresh install on Centos7
>> Create Keystone Service Error
>>
>>
>>
>> I think it's better to use Juno version, KILO is not a final version.
>>
>> And for your problem, i propose:
>>
>>  1- Delete Keystone database
>>
>> #mysql - u root -p
>>
>> password:
>>
>> mysql> show databases;
>>
>> mysql> DROP DATABASE keystone;
>>
>> mysql> exit
>>
>> 2- Create a new database "keystone"
>>
>>
>>  mysql -u root -p
>>
>> mysql> CREATE DATABASE keystone;
>>
>> mysql> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone_dbpass';
>>
>> mysql> quit
>>
>> 3- in keystone.conf
>>
>> admin_token= <results of command openssl rand –hex 10>
>> connection = mysql://keystone:keystone_pass@server_ip/keystone
>>
>> 4-  Export variable
>>
>>
>>  export OS_SERVICE_TOKEN= <same results of admin_token in keystone.conf >
>>
>> export OS_SERVICE_ENDPOINT=http://server_ip:35357/v2.0
>>
>> 5-  Create admin user........
>>
>>  keystone tenant-create --name=admin --description="Admin Tenant"
>>
>> keystone tenant-create --name=service --description="Service Tenant"
>>
>> keystone user-create --name=admin --pass=ADMIN --email=admin at example.com
>>
>> keystone role-create --name=admin
>>
>> keystone user-role-add --user=admin --tenant=admin --role=admin
>>
>> 6-  Create keystone service
>>
>> keystone service-create --name=keystone --type=identity --description="Keystone Identity Service"
>>
>> 7- Create keystone endpoint
>>
>> keystone endpoint-create --service=keystone --publicurl=http://10.0.0.1:5000/v2.0 --internalurl=http://10.0.0.1:5000/v2.0 --adminurl=http://10.0.0.1:35357/v2.0
>>
>>  8- Unset the exported values
>>
>> unset OS_SERVICE_TOKEN
>>
>> unset OS_SERVICE_ENDPOINT
>>
>>   9- Create a file named creds and add the following lines
>>
>> export OS_USERNAME=admin
>>
>> export OS_PASSWORD=ADMIN
>>
>> export OS_TENANT_NAME=admin
>>
>> export OS_AUTH_URL=http://server_ip:35357/v2.0
>>
>>  10 - Source the file
>>
>> source creds
>>
>>  11- Test the keysone setup
>>
>> keystone token-get
>>
>> keystone user-list
>>
>>
>>
>> Good luck,
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> 2015-05-26 16:44 GMT+02:00 BUTTS, Darren (Darren)** CTR ** <
>> darren.butts at alcatel-lucent.com>:
>>
>> Mehdi
>>
>>
>>
>> I am attempting to install Kilo.
>>
>>
>>
>> Darren
>>
>>
>>
>> *From:* Mehdi BADAOUI [mailto:mehdiuniv at gmail.com]
>> *Sent:* 26 May 2015 15:42
>> *To:* Matt Kassawara
>> *Cc:* BUTTS, Darren (Darren)** CTR **; openstack at lists.openstack.org
>> *Subject:* Re: [Openstack] Openstack Kilo Fresh install on Centos7
>> Create Keystone Service Error
>>
>>
>>
>> Which version of Openstack do you Using?
>>
>>
>>
>> 2015-05-26 16:22 GMT+02:00 Matt Kassawara <mkassawara at gmail.com>:
>>
>> A 404 indicates that Apache is probably listening on ports 5000 and
>> 35357. Can you check with the 'ss -lntp' command to verify both ports?
>> Also, can you check the WSGI configuration (wsgi-keystone.conf) again and
>> the files that you copy into the /var/www/cgi-bin/keystone directory?
>>
>>
>>
>> On Tue, May 26, 2015 at 8:11 AM, BUTTS, Darren (Darren)** CTR ** <
>> darren.butts at alcatel-lucent.com> wrote:
>>
>> All
>>
>>
>>
>> I am currently trying to install the Openstack Kilo release for the first
>> time on a centos 7 virtual machine. Following the steps in the installation
>> guide I get to :
>>
>>
>>
>> Create the service entity and API endpoint
>>
>>
>>
>> At this point I am always faced with an HTTP error and depending on the
>> OS_URL I use the error is different :
>>
>> export OS_URL=http://controller:35357/v2.0
>>
>> openstack service create --name keystone --description "OpenStack
>> Identity" identity
>>
>> ERROR: openstack Not Found (HTTP 404)
>>
>>
>>
>> export OS_URL=http://controller.npi-openstack.com:35357/v2.0
>>
>> openstack service create --name keystone --description "OpenStack
>> Identity" identity
>>
>> ERROR: openstack Not Found (HTTP 404)
>>
>>
>>
>> export OS_URL=http://127.0.0.1:35357/v2.0
>>
>> openstack service create --name keystone --description "OpenStack
>> Identity" identity
>>
>> ERROR: openstack Service Unavailable (HTTP 503)
>>
>>
>>
>> export OS_URL=http://127.0.0.1:5000/v2.0
>>
>> openstack service create --name keystone --description "OpenStack
>> Identity" identity
>>
>> ERROR: openstack Service Unavailable (HTTP 503)
>>
>>
>>
>> export OS_URL=http://controller:5000/v2.0
>>
>> openstack service create --name keystone --description "OpenStack
>> Identity" identity
>>
>> ERROR: openstack Not Found (HTTP 404)
>>
>>
>>
>> Specifying the host name generates a different error to the local host, I
>> can see that the port is listening using `netstat –l`
>>
>> tcp        0      0 0.0.0.0:openstack-id    0.0.0.0:*
>> LISTEN
>>
>>
>>
>> As his release is using the WSG process I can also see the sockets active
>> :
>>
>> unix  2      [ ACC ]     STREAM     LISTENING     20240
>> /run/httpd/wsgi.3252.0.1.sock
>>
>> unix  2      [ ACC ]     STREAM     LISTENING     20243
>> /run/httpd/wsgi.3252.0.2.sock
>>
>>
>>
>> Http errors logs show :
>>
>>
>>
>> [root at controller httpd]# more keystone-error.log
>>
>> 2015-05-26 12:50:56.567779 mod_wsgi (pid=3260): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.574241 mod_wsgi (pid=3253): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.595580 mod_wsgi (pid=3259): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.603280 mod_wsgi (pid=3257): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.613034 mod_wsgi (pid=3261): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.621634 mod_wsgi (pid=3255): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.649824 mod_wsgi (pid=3256): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.656236 mod_wsgi (pid=3258): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.657031 mod_wsgi (pid=3254): Attach interpreter ''.
>>
>> 2015-05-26 12:50:56.662904 mod_wsgi (pid=3262): Attach interpreter ''.
>>
>> [root at controller httpd]# more error_log
>>
>> [Tue May 26 12:50:56.391098 2015] [suexec:notice] [pid 3252] AH01232:
>> suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
>>
>> [Tue May 26 12:50:56.430498 2015] [auth_digest:notice] [pid 3252]
>> AH01757: generating secret for digest authentication ...
>>
>> [Tue May 26 12:50:56.432171 2015] [lbmethod_heartbeat:notice] [pid 3252]
>> AH02282: No slotmem from mod_heartmonitor
>>
>> [Tue May 26 12:50:56.479156 2015] [mpm_prefork:notice] [pid 3252]
>> AH00163: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 configured --
>> resuming normal ope
>>
>> rations
>>
>> [Tue May 26 12:50:56.479244 2015] [core:notice] [pid 3252] AH00094:
>> Command line: '/usr/sbin/httpd -D FOREGROUND'
>>
>>
>>
>> This is my first time attempting to install Openstack although I have now
>> gone through the process numerous times unsuccessfully by killing and
>> rebuilding the
>>
>> Virtual machine so I know that there is nothing transient in the system
>> to suddenly cause it to work should it do so.
>>
>>
>>
>> As a side note I have disabled the firewall and also SELINUX to see if
>> that has any effect but it doesn’t.
>>
>>
>>
>> Any help would be greatly appreciated.
>>
>>
>>
>> Darren
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>>
>>
>> --
>>
>>
>>
>> *  <http://dz.linkedin.com/pub/mehdi-badaoui/20/944/3ab/>*
>>
>>
>>
>>
>>
>>
>> --
>>
>>
>>
>> *  <http://dz.linkedin.com/pub/mehdi-badaoui/20/944/3ab/>*
>>
>>
>>
>
>
>
> --
>
> *  <http://dz.linkedin.com/pub/mehdi-badaoui/20/944/3ab/>*
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150526/6de3ab79/attachment.html>


More information about the Openstack mailing list