[Openstack] [OpenStack] Glance: Unable to create image.

Eugen Block eblock at nde.ag
Tue Aug 2 12:34:27 UTC 2016


Which guide are you using?
I don't see any domains in your glance-api.conf or  
glance-registry.conf, an excerpt from Mitaka guide:

---cut here---
[keystone_authtoken]
...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = GLANCE_PASS
---cut here---

Did you set the environment variables in your scripts correctly  
(OS_IMAGE_API_VERSION=2)? There are several points that could lead to  
the authorization error. I don't use SSL in my test environment, I  
don't know if this is another point to check.

Regards.
Eugen

Zitat von shivkumar gupta <shivkumar_gupta98 at yahoo.com>:

> Thanks Trinath,
> I already verify the configuration from the document. Can you please  
> help me what exactly should i verify. also what will be the  
> authentication flow while creating an image in glance.
>
>     On Monday, 1 August 2016 3:09 PM, Trinath Somanchi  
> <trinath.somanchi at nxp.com> wrote:
>
>
>  #yiv3904287517 #yiv3904287517 -- _filtered #yiv3904287517  
> {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;} _filtered  
> #yiv3904287517 {panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered  
> #yiv3904287517 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2  
> 4;}#yiv3904287517 #yiv3904287517 p.yiv3904287517MsoNormal,  
> #yiv3904287517 li.yiv3904287517MsoNormal, #yiv3904287517  
> div.yiv3904287517MsoNormal  
> {margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv3904287517  
> a:link, #yiv3904287517 span.yiv3904287517MsoHyperlink  
> {color:#0563C1;text-decoration:underline;}#yiv3904287517 a:visited,  
> #yiv3904287517 span.yiv3904287517MsoHyperlinkFollowed  
> {color:#954F72;text-decoration:underline;}#yiv3904287517  
> p.yiv3904287517msonormal0, #yiv3904287517  
> li.yiv3904287517msonormal0, #yiv3904287517  
> div.yiv3904287517msonormal0  
> {margin-right:0in;margin-left:0in;font-size:12.0pt;}#yiv3904287517  
> span.yiv3904287517EmailStyle18 {color:windowtext;}#yiv3904287517  
> .yiv3904287517MsoChpDefault {font-size:10.0pt;} _filtered  
> #yiv3904287517 {margin:1.0in 1.0in 1.0in 1.0in;}#yiv3904287517  
> div.yiv3904287517WordSection1 {}#yiv3904287517 Hi Shiv-    The error  
> clearly mentions its an misconfiguration of keystone.    Reverify  
> your glance configuration for keystone – glance authentication  
> credentials.  The one you have created while installing and  
> configuring glance.    / Trinath          From: shivkumar gupta  
> [mailto:shivkumar_gupta98 at yahoo.com]
> Sent: Monday, August 01, 2016 2:42 PM
> To: OpenStack Mailing List <openstack at lists.openstack.org>
> Subject: Re: [Openstack] [OpenStack] Glance: Unable to create image.  
>    Hello Experts,    Please suggest and help to proceed further.     
> Regards Shiv    On Sunday, 31 July 2016 5:04 PM, shivkumar gupta  
> <shivkumar_gupta98 at yahoo.com> wrote:    Hello Experts,    I am  
> unable to create image in during glance installation and getting  
> following error.     glance image-create --name "Cirros" --file  
> /tmp/images/cirros-0.3.3-x86_64-disk.img --disk-format qcow2  
> --container-format bare --is-public True --progress   
> [=============================>] 100% Request returned failure  
> status. Invalid OpenStack Identity credentials.    From api.log i  
> can see following errors was present. 2016-07-30 21:36:17.135 7114  
> INFO urllib3.connectionpool [-] Starting new HTTPS connection (1):  
> 127.0.0.1 2016-07-30 21:36:17.145 7114 WARNING  
> keystoneclient.middleware.auth_token [-] Retrying on HTTP connection  
> exception: [Errno 1] _ssl.c:510: error:140770FC:SSL  
> routines:SSL23_GET_SERVER_HELLO:unknown protocol 2016-07-30  
> 21:36:17.648 7114 INFO urllib3.connectionpool [-] Starting new HTTPS  
> connection (1): 127.0.0.1 2016-07-30 21:36:17.671 7114 WARNING  
> keystoneclient.middleware.auth_token [-] Retrying on HTTP connection  
> exception: [Errno 1] _ssl.c:510: error:140770FC:SSL  
> routines:SSL23_GET_SERVER_HELLO:unknown protocol 2016-07-30  
> 21:36:18.673 7114 INFO urllib3.connectionpool [-] Starting new HTTPS  
> connection (1): 127.0.0.1 2016-07-30 21:36:18.686 7114 WARNING  
> keystoneclient.middleware.auth_token [-] Retrying on HTTP connection  
> exception: [Errno 1] _ssl.c:510: error:140770FC:SSL  
> routines:SSL23_GET_SERVER_HELLO:unknown protocol 2016-07-30  
> 21:36:20.690 7114 INFO urllib3.connectionpool [-] Starting new HTTPS  
> connection (1): 127.0.0.1 2016-07-30 21:36:20.724 7114 ERROR  
> keystoneclient.middleware.auth_token [-] HTTP connection exception:  
> [Errno 1] _ssl.c:510: error:140770FC:SSL  
> routines:SSL23_GET_SERVER_HELLO:unknown protocol 2016-07-30  
> 21:36:20.725 7114 WARNING keystoneclient.middleware.auth_token [-]  
> Authorization failed for token 2016-07-30 21:36:20.726 7114 INFO  
> keystoneclient.middleware.auth_token [-] Invalid user token -  
> deferring reject downstream 2016-07-30 21:36:20.776 7114 INFO  
> glance.wsgi.server [-] 10.10.10.10 - - [30/Jul/2016 21:36:20] "POST  
> /v1/images HTTP/1.1" 401 381 3.642616    root at controller:/home/shiv#  
> keystone user-list  
> +----------------------------------+--------+---------+-----------------------------+ |                id                |  name  | enabled |            email            | +----------------------------------+--------+---------+-----------------------------+ | 4b5b3e35bf7646c5ab2151f0e641c71e | admin  |   True  |shivkumar_gupta98 at yahoo.com | | 823971bd62db441c8aa85726af4e0029 |  demo  |   True  |      demo at example.com      | | 66694ef0feae472f89ca96416234b48f | glance |   True  |                             | +----------------------------------+--------+---------+-----------------------------+    root at controller:/home/shiv# keystone user-role-list +----------------------------------+-------+----------------------------------+----------------------------------+ |                id                |  name |             user_id              |            tenant_id             | +----------------------------------+-------+----------------------------------+----------------------------------+ | df629a49703241ec88c81c5e756da6f5 | admin | 4b5b3e35bf7646c5ab2151f0e641c71e | a574030c4c104b80aee84478388c42c6 | +----------------------------------+-------+----------------------------------+----------------------------------+    root at controller:/home/shiv# keystone tenant-list +----------------------------------+---------+---------+ |                id                |   name  | enabled | +----------------------------------+---------+---------+ | a574030c4c104b80aee84478388c42c6 |  admin  |   True  | | 67aba69109bc4505a119693676324d90 |   demo  |   True  | | a7a4647b7a0c459f87cdef7357edf0ba | service |   True  | +----------------------------------+---------+---------+    root at controller:/home/shiv# keystone user-get glance +----------+----------------------------------+ | Property |              Value               | +----------+----------------------------------+ |  email   |                                  | | enabled  |               True               | |    id    | 66694ef0feae472f89ca96416234b48f | |   name   |              glance              | | username |              glance              | +----------+----------------------------------+       root at controller:/home/shiv# keystone endpoint-list +----------------------------------+-----------+-----------------------------+-----------------------------+------------------------------+----------------------------------+ |                id                |   region  |          publicurl          |         internalurl         |           adminurl           |            service_id            | +----------------------------------+-----------+-----------------------------+-----------------------------+------------------------------+----------------------------------+ | 26f2fe4829d847a685519f6a8a24e7e3 | regionOne |http://controller:5000/v2.0 | http://controller:5000/v2.0 | http://controller:35357/v2.0 | 56df0a2a6d254c23b50939c747bdad28 | | 7770dbe6f8b34613a72c2d6a04aef58d | regionOne |    http://controller:9292   |    http://controller:9292   |    http://controller:9292    | b705791276b64727aa598b13457fa847 |    root at controller:/home/shiv# keystone service-list +----------------------------------+----------+----------+-------------------------+ |                id                |   name   |   type   |       description       | +----------------------------------+----------+----------+-------------------------+ | b705791276b64727aa598b13457fa847 |  glance  |  image   | Openstack Image Service | | 56df0a2a6d254c23b50939c747bdad28 | keystone | identity |    Openstack Identity   | +----------------------------------+----------+----------+-------------------------+    root at controller:/home/shiv# keystone service-get glance +-------------+----------------------------------+ |   Property  |              Value               | +-------------+----------------------------------+ | description |     Openstack Image Service      | |   enabled   |               True               | |      id     | b705791276b64727aa598b13457fa847 | |     name    |              glance              | |     type    |              image               | +-------------+----------------------------------+       Please suggest. api.conf and registry.conf file is attached.    Regards Shiv   
>  



-- 
Eugen Block                             voice   : +49-40-559 51 75
NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
Postfach 61 03 15
D-22423 Hamburg                         e-mail  : eblock at nde.ag

         Vorsitzende des Aufsichtsrates: Angelika Mozdzen
           Sitz und Registergericht: Hamburg, HRB 90934
                   Vorstand: Jens-U. Mozdzen
                    USt-IdNr. DE 814 013 983





More information about the Openstack mailing list