[Openstack] [Horizon][Keystone] Migration to keystone v3

Eugen Block eblock at nde.ag
Fri Sep 28 12:52:24 UTC 2018


Since nova-compute reports that failure, what is your auth_url in  
/etc/nova/nova.conf in the [placement] section?



Zitat von Davide Panarese <dpanarese at enter.eu>:

> @Paul
> Yes keystone:5000 is my endpoint.
>
> @Eugen
> OPENSTACK_KEYSTONE_URL = "http://%s/v3 <http://%s/v3>" % OPENSTACK_HOST
>
> Still not working.
>
>
> Davide Panarese
>
>
>> On 28 Sep 2018, at 13:50, Eugen Block <eblock at nde.ag> wrote:
>>
>> Hi,
>>
>> what is your current horizon configuration?
>>
>> control:~ # grep KEYSTONE_URL  
>> /srv/www/openstack-dashboard/openstack_dashboard/local/local_settings.py
>> OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
>>
>> Maybe this still configured to v2?
>>
>> Regards,
>> Eugen
>>
>>
>> Zitat von Davide Panarese <dpanarese at enter.eu>:
>>
>>> Goodmorning every one,
>>> i'm finally approaching migration to keystone v3 but i want to  
>>> maintain keystone v2 compatibility for all users that have custom  
>>> scripts for authentication to our openstack.
>>> Migration seems to be pretty simple, change endpoint direct into  
>>> database changing http://keystone:5000/v2.0 to  
>>> http://keystone:5000 <http://keystone:5000/>; Openstack client  
>>> have the capability to add /v2.0 or /v3 at the end of url  
>>> retrieved from catalog.
>>> But i'm stuck with horizon dashboard, login works but compute  
>>> information are not available and error log show:
>>> “ Forbidden: You are not authorized to perform the requested  
>>> action: rescope a scoped token. (HTTP 403)"
>>> All other tabs works properly.
>>> I think that is a keystone issue but i don't understand why with  
>>> openstack client works perfectly and with horizon not.
>>> Anyone can explain what i missed in migration?
>>>
>>> Thanks a lot,
>>> Davide Panarese
>>
>>
>>
>>
>> _______________________________________________
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>> --
>> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato  
>> non infetto.
>> Seguire il link qui sotto per segnalarlo come  
>> spam:http://mx01.enter.it/cgi-bin/learn-msg.cgi?id=D389145856.A899A
>>
>>






More information about the Openstack mailing list