I got the same error and now resolved. You can check if you have pipeline = versionnegotiation authtoken keystone_shim apiv1app
in glance-api and pipeline = authtoken keystone_shim registryapp in glance-registry. Paras. On Thu, Feb 2, 2012 at 4:12 PM, Lillie Ross-CDSR11 <ross.lil...@motorolasolutions.com> wrote: > Still having issues. > > I found a config bug in my Keystone.conf file in the filter pipeline for the > d5_compat modules. However, when I fix the config to match the installation > guide and restart keystone, I get an error message that the d5_compat module > can't be found. My keystone installation is from the ManagedIT PPA. Is this > a bug in the documentation? In the ManagedIT packages? The pipeline for the > ManageIT package is configured as follows: > > [pipeline:admin] > pipeline = > urlrewritefilter > admin_api > > [pipeline:keystone-legacy-auth] > pipeline = > urlrewritefilter > legacy_auth > RAX-KEY-extension > service_api > > versus what is specified in the installation guide. Does this difference > matter? What are the differences? > > Regards, > Ross > > > On Feb 1, 2012, at 10:31 AM, Lillie Ross-CDSR11 wrote: > >> Hi Jay, >> >> Yes, this confused me, however I get the same error using the token I >> generated and added (via the keystone-manage command). To wit: >> >> root@nova:~# keystone-manage token list >> token user expiration tenant >> ------------------------------------------------------------------------------- >> 10111213141516171819 1 2022-01-01 00:00:00 2 >> fa89fb9a-60d2-4921-b12d-6aee1c177823 1 2012-02-01 15:24:33 1 >> b06c5e4e-5e59-4293-aa54-ce6879f11371 2 2012-02-01 15:26:41 1 >> >> where the first token is the long-lived one I supplied during installation. >> Running the glance command yields identical results: >> >> root@nova:~# glance -v -A 10111213141516171819 details >> Failed to show details. Got error: >> Internal Server error: Traceback (most recent call last): >> File "/usr/lib/python2.7/dist-packages/eventlet/wsgi.py", line 336, in >> handle_one_response >> result = self.application(self.environ, start_response) >> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__ >> resp = self.call_func(req, *args, **self.kwargs) >> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func >> return self.func(req, *args, **kwargs) >> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 113, in >> __call__ >> response = req.get_response(self.application) >> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1053, in >> get_response >> application, catch_exc_info=False) >> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1022, in >> call_application >> app_iter = application(self.environ, start_response) >> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__ >> resp = self.call_func(req, *args, **self.kwargs) >> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in call_func >> return self.func(req, *args, **kwargs) >> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 110, in >> __call__ >> response = self.process_request(req) >> File "/usr/lib/python2.7/dist-packages/glance/common/context.py", line 104, >> in process_request >> raise exception.NotAuthorized() >> NotAuthorized: None >> >> Completed in 0.0031 sec. >> >> Interestingly (perhaps) I see nothing in the keystone.log file. In fact, I >> don't even see the keystone log file. Keystone opens to log files named >> 'admin.log' and 'keystone_legacy_auth.log'. Is this right? Also, if I run >> keystone interactively (keystone -v -d) then issue the glance command, I see >> nothing in the keystone window. This doesn't seem right to me, but I'm just >> getting started with keystone integration. >> >> Thanks in advance for any insight... >> >> Regards, >> Ross >> >> On Jan 31, 2012, at 6:48 PM, Jay Pipes wrote: >> >>> On 01/31/2012 06:28 PM, Lillie Ross-CDSR11 wrote: >>>> I'm reinstalling the various Openstack services from packages in the >>>> ManagedIT PPA to pull in the latest Diablo bug fixes. I'm following the >>>> latest directions in the newly release installation guide as I perform >>>> these upgrades >>>> (http://docs.openstack.org/diablo/openstack-compute/install/content/index.html). >>>> >>>> However, I'm having trouble getting Glance to authenticate with >>>> Keystone. All config files have been copied from the examples posted in >>>> the installation guide (and modified accordingly for my admin token, IP >>>> addresses, etc.). Regardless, I continually get the following error >>>> message and stack dump when trying to verify the Glance/Keystone >>>> integration: >>>> >>>> Step 1: Grab a token >>>> >>>> # curl -d '{"auth": {"tenantName": "default", >>>> "passwordCredentials":{"username": "admin", "password": "admin"}}}' -H >>>> "Content-type: application/json" http://173.23.181.1:35357/v2.0/tokens | >>>> python -mjson.tool >>>> >>>> ... >>>> "token": { >>>> "expires": "2012-02-01T15:24:33", >>>> "id": "fa89fb9a-60d2-4921-b12d-6aee1c177823", >>>> "tenant": { >>>> "id": "1", >>>> "name": "default" >>>> } >>>> } >>> >>> You're going to want to grab a long-lived token (sometimes called a service >>> token) to use for the Glance API <-> Glance Registry connection. This >>> service token should be used in the glance-registry.conf file. >>> >>> In glance-registry.conf, you'll see a section looking like this: >>> >>> [filter:authtoken] >>> paste.filter_factory = keystone.middleware.auth_token:filter_factory >>> service_protocol = http >>> service_host = 127.0.0.1 >>> service_port = 5000 >>> auth_host = 127.0.0.1 >>> auth_port = 35357 >>> auth_protocol = http >>> auth_uri = http://127.0.0.1:5000/ >>> admin_token = 999888777666 >>> >>> Replace admin_token = 999888777666 with the relevant long-lived service >>> token. >>> >>> Cheers! >>> -jay >>> >>> >>>> Step 2: Try a Glance command >>>> >>>> # glance details -A fa89fb9a-60d2-4921-b12d-6aee1c177823 >>>> Failed to show details. Got error: >>>> Internal Server error: Traceback (most recent call last): >>>> File "/usr/lib/python2.7/dist-packages/eventlet/wsgi.py", line 336, in >>>> handle_one_response >>>> result = self.application(self.environ, start_response) >>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__ >>>> resp = self.call_func(req, *args, **self.kwargs) >>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in >>>> call_func >>>> return self.func(req, *args, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 113, >>>> in __call__ >>>> response = req.get_response(self.application) >>>> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1053, in >>>> get_response >>>> application, catch_exc_info=False) >>>> File "/usr/lib/python2.7/dist-packages/webob/request.py", line 1022, in >>>> call_application >>>> app_iter = application(self.environ, start_response) >>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 147, in __call__ >>>> resp = self.call_func(req, *args, **self.kwargs) >>>> File "/usr/lib/python2.7/dist-packages/webob/dec.py", line 208, in >>>> call_func >>>> return self.func(req, *args, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 110, >>>> in __call__ >>>> response = self.process_request(req) >>>> File "/usr/lib/python2.7/dist-packages/glance/common/context.py", line >>>> 104, in process_request >>>> raise exception.NotAuthorized() >>>> NotAuthorized: None >>>> >>>> From the Glance api.log file we see the following (with the traceback >>>> identical to above removed): >>>> >>>> 2012-01-31 17:14:30 DEBUG [glance.api.middleware.version_negotiation] >>>> Processing request: GET /v1/images/detail Accept: >>>> 2012-01-31 17:14:30 DEBUG [glance.api.middleware.version_negotiation] >>>> Matched versioned URI. Version: 1.0 >>>> 2012-01-31 17:14:30 DEBUG [eventlet.wsgi.server] Traceback (most recent >>>> call last): >>>> ? (traceback removed) >>>> 2012-01-31 17:14:30 DEBUG [eventlet.wsgi.server] 127.0.0.1 - - >>>> [31/Jan/2012 17:14:30] "GET /v1/images/detail?limit=10 HTTP/1.1" 500 >>>> 1528 0.001163 >>>> >>>> This is probably a config blunder on my part, but I've poured over the >>>> config files numerous times. Regardless, I've attached the glance-api >>>> and registry conf files. >>>> >>>> Any suggestions? >>>> >>>> Regards, >>>> Ross >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Mailing list: https://launchpad.net/~openstack >>>> Post to : openstack@lists.launchpad.net >>>> Unsubscribe : https://launchpad.net/~openstack >>>> More help : https://help.launchpad.net/ListHelp >>> >>> _______________________________________________ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >>> >>> >> > > > > > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp