2016-04-27 12:43 GMT+02:00 Dhvanan Shah <[email protected]>: > keystone --debug user-list gives this: > > /usr/lib/python2.7/site-packages/keystoneclient/shell.py:65: > DeprecationWarning: The keystone CLI is deprecated in favor of > python-openstackclient. For a Python library, continue using > python-keystoneclient. > 'python-keystoneclient.', DeprecationWarning) > DEBUG:keystoneclient.auth.identity.v2:Making authentication request to > http://10.16.37.221:5000/v2.0/tokens > INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection > (1): proxy.serc.iisc.ernet.in
After taking another look, this line looks suspicous, where does this proxy get configured? It seems like it might be blocking access to your keystone service. What is the output if you do a "curl http://10.16.37.221:5000/v2.0";? > DEBUG:requests.packages.urllib3.connectionpool:"POST > http://10.16.37.221:5000/v2.0/tokens HTTP/1.1" 403 3370 > DEBUG:keystoneclient.session:Request returned failure status: 403 > Authorization Failed: Forbidden (HTTP 403) > > nova --debug user list gives this: > > DEBUG (session:195) REQ: curl -g -i -X GET http://10.16.37.221:5000/v2.0 -H > "Accept: application/json" -H "User-Agent: python-keystoneclient" > INFO (connectionpool:203) Starting new HTTP connection (1): > proxy.serc.iisc.ernet.in > DEBUG (connectionpool:383) "GET http://10.16.37.221:5000/v2.0 HTTP/1.1" 403 > 3275 > DEBUG (session:224) RESP: > DEBUG (session:396) Request returned failure status: 403 > WARNING (base:133) Discovering versions from the identity service failed > when creating the password plugin. Attempting to determine version from URL. > DEBUG (v2:76) Making authentication request to > http://10.16.37.221:5000/v2.0/tokens > DEBUG (connectionpool:383) "POST http://10.16.37.221:5000/v2.0/tokens > HTTP/1.1" 403 3370 > DEBUG (session:396) Request returned failure status: 403 > DEBUG (shell:914) Forbidden (HTTP 403) > Forbidden: Forbidden (HTTP 403) > ERROR (Forbidden): Forbidden (HTTP 403) __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
