[Openstack] Can I authenticate a Kilo service against an Icehouse identity server?

Nasir Mahmood nasir.mahmood at gmail.com
Mon May 9 18:54:41 UTC 2016


What changes you made in your wrapper of env variables or something else?
On May 9, 2016 11:13 PM, "Gustavo Randich" <gustavo.randich at gmail.com>
wrote:

> solved; I was hitting this bug:
> https://bugs.launchpad.net/keystone/+bug/1343579
>
> :)
>
>
> On Mon, May 9, 2016 at 2:24 PM, Gustavo Randich <gustavo.randich at gmail.com
> > wrote:
>
>> ok here is a little more log detail...
>>
>> 2016-05-09 13:18:53.246 8014 INFO eventlet.wsgi.server [-] (8014)
>> accepted ('10.181.0.6', 35939)
>> 2016-05-09 13:18:53.253 8014 DEBUG keystoneclient.session [-] REQ: curl
>> -g -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
>> https://icehouse-api:35357 -H "Accept: application/json" -H "User-Agent:
>> python-keystoneclient" _http_log_request
>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
>> 2016-05-09 13:18:53.352 8014 DEBUG keystoneclient.session [-] RESP: [300]
>> content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
>> Mon, 09 May 2016 17:18:53 GMT content-type: application/json
>> x-distribution: Ubuntu
>> RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
>> "2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
>> "type": "application/vnd.openstack.identity-v3+json"}, {"base":
>> "application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
>> "id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/",
>> "rel": "self"}]}]}}
>>  _http_log_response
>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
>> 2016-05-09 13:18:53.353 8014 DEBUG keystoneclient.auth.identity.v3 [-]
>> Making authentication request to
>> https://icehouse-api:35357/v3/auth/tokens get_auth_ref
>> /usr/lib/python2.7/dist-packages/keystoneclient/auth/identity/v3.py:125
>> 2016-05-09 13:18:53.549 8014 DEBUG keystoneclient.session [-] REQ: curl
>> -g -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
>> https://icehouse-api:35357/ -H "Accept: application/json" -H
>> "User-Agent: python-keystoneclient" _http_log_request
>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
>> 2016-05-09 13:18:53.574 8014 DEBUG keystoneclient.session [-] RESP: [300]
>> content-length: 350 vary: X-Auth-Token server: Apache/2.4.7 (Ubuntu) date:
>> Mon, 09 May 2016 17:18:53 GMT content-type: application/json
>> x-distribution: Ubuntu
>> RESP BODY: {"versions": {"values": [{"status": "stable", "updated":
>> "2013-03-06T00:00:00Z", "media-types": [{"base": "application/json",
>> "type": "application/vnd.openstack.identity-v3+json"}, {"base":
>> "application/xml", "type": "application/vnd.openstack.identity-v3+xml"}],
>> "id": "v3.0", "links": [{"href": "https://icehouse-api:35357/v3/",
>> "rel": "self"}]}]}}
>>  _http_log_response
>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:223
>> 2016-05-09 13:18:53.575 8014 WARNING keystonemiddleware.auth_token [-]
>> Authorization failed for token
>> 2016-05-09 13:18:53.576 8014 INFO eventlet.wsgi.server [-] 10.181.0.6 - -
>> [09/May/2016 13:18:53] "GET /v2/ceaa212d5fe949d4b0319d28e8872ff0/volumes
>> HTTP/1.1" 401 261 0.327230
>>
>>
>> On Mon, May 9, 2016 at 1:56 PM, Gustavo Randich <
>> gustavo.randich at gmail.com> wrote:
>>
>>> Hi,
>>>
>>> Is it possible to integrate python-keystoneclient as of Kilo release
>>> (1.2.0) with keystone Icehouse (2014.1)?
>>>
>>> Specifically, I'm trying to make cinder-api (Kilo) authenticate against
>>> an Icehouse keystone server, but the following appears in the log:
>>>
>>> 2016-05-09 12:55:06.846 7623 INFO eventlet.wsgi.server [-] (7623)
>>> accepted ('10.181.0.6', 35909)
>>>
>>> 2016-05-09 12:55:06.851 7623 DEBUG keystoneclient.session [-] REQ: curl
>>> -g -i --cacert "/etc/ssl/certs/cgp-cert.pem" -X GET
>>> https://icehouse-api:35357 -H "Accept: application/json" -H
>>> "User-Agent: python-keystoneclient" _http_log_request
>>> /usr/lib/python2.7/dist-packages/keystoneclient/session.py:195
>>>
>>> 2016-05-09 12:55:06.866 7623 WARNING
>>> keystoneclient.auth.identity.generic.base [-] Discovering versions from the
>>> identity service failed when creating the password plugin. Attempting to
>>> determine version from URL.
>>>
>>> 2016-05-09 12:55:06.867 7623 WARNING keystonemiddleware.auth_token [-]
>>> Authorization failed for token
>>>
>>> 2016-05-09 12:55:06.868 7623 INFO eventlet.wsgi.server [-] 10.181.0.6 -
>>> - [09/May/2016 12:55:06] "GET /v2//volumes/detail HTTP/1.1" 401 261 0.019666
>>>
>>>
>>> Thanks!
>>>
>>>
>>
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160509/88120cd2/attachment.html>


More information about the Openstack mailing list