[Openstack] [Horizon][Keystone] Migration to keystone v3

Davide Panarese dpanarese at enter.eu
Fri Sep 28 12:45:39 UTC 2018


@Paul
Yes keystone:5000 is my endpoint.

@Eugen
OPENSTACK_KEYSTONE_URL = "http://%s/v3 <http://%s/v3>" % OPENSTACK_HOST

Still not working. 


Davide Panarese


> On 28 Sep 2018, at 13:50, Eugen Block <eblock at nde.ag> wrote:
> 
> Hi,
> 
> what is your current horizon configuration?
> 
> control:~ # grep KEYSTONE_URL /srv/www/openstack-dashboard/openstack_dashboard/local/local_settings.py
> OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
> 
> Maybe this still configured to v2?
> 
> Regards,
> Eugen
> 
> 
> Zitat von Davide Panarese <dpanarese at enter.eu>:
> 
>> Goodmorning every one,
>> i'm finally approaching migration to keystone v3 but i want to maintain keystone v2 compatibility for all users that have custom scripts for authentication to our openstack.
>> Migration seems to be pretty simple, change endpoint direct into database changing http://keystone:5000/v2.0 to http://keystone:5000 <http://keystone:5000/>; Openstack client have the capability to add /v2.0 or /v3 at the end of url retrieved from catalog.
>> But i'm stuck with horizon dashboard, login works but compute information are not available and error log show:
>> “ Forbidden: You are not authorized to perform the requested action: rescope a scoped token. (HTTP 403)"
>> All other tabs works properly.
>> I think that is a keystone issue but i don't understand why with openstack client works perfectly and with horizon not.
>> Anyone can explain what i missed in migration?
>> 
>> Thanks a lot,
>> Davide Panarese
> 
> 
> 
> 
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> --
> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato non infetto.
> Seguire il link qui sotto per segnalarlo come spam:http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=D389145856.A899A
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20180928/dbf52668/attachment-0001.html>


More information about the Openstack mailing list