Open Stack

If keystone is in HA, have a look here: https://ask.openstack.org/en/question/90640/keystone-authentication-failure-in-a-ha-setup/?answer=90674#post-id-90674


-Kaustubh

From: Dhvanan Shah [mailto:dhvanan at gmail.com]
Sent: Wednesday, April 27, 2016 3:52 AM
To: openstack at lists.openstack.org
Subject: [Openstack] Keystone Authorization failed : Forbidden (HTTP 403)

Hi,

I have a 2 node OpenStack cluster setup running on CentOS. Due to some reason now I'm unable to perform any actions as it is not able to authorize me, it shows an error message saying "Authorization Failed: Forbidden (HTTP 403)" for Keystone when I run the command openstack-status and for nova-managed services it says "No handlers could be found for logger "keystoneclient.auth.identity.generic.base"
ERROR (Forbidden): Forbidden (HTTP 403)".

The keystone logs at /var/log/keystone show no problem that might have occured.
The nova api logs show this :
2016-04-27 04:18:31.279 4314 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62 -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}9d202e0a726633f660321097015cd9d67ac4df19" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:195
2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] RESP: _http_log_response /usr/lib/python2.7/site-packages/keystoneclient/session.py:224
2016-04-27 04:18:31.290 4314 DEBUG keystoneclient.session [-] Request returned failure status: 404 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Could not find token: 34e4b79b157a4526bc8ebb80b82cbf62", "code": 404, "title": "Not Found"}}
2016-04-27 04:18:31.290 4314 WARNING keystonemiddleware.auth_token [-] Authorization failed for token



http://10.16.37.221:35357/v2.0/tokens/34e4b79b157a4526bc8ebb80b82cbf62

This link corresponding to the above token shows this error message -

{"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}



So there is a problem in authentication from the keystone.I haven't changed the admin password.

Also by chance if my admin password is changed then how can I set it again? All my attempts show an error message of Forbidden (403).

Any help would be appreciated.

Thanks,
Dhvanan Shah
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160427/0f1cae0b/attachment.html>