I’ve been building a new OpenStack lab (Kilo) manually to get a feel for the changes – last time I did much with OpenStack it was on Grizzly. Most of the components are broadly similar, with improvements generally speaking, but getting Cinder proved to be a lot more work then anticipated.
Basically it just wouldn’t work – due to authentication failures. I checked and rechecked the passwords, followed the guide to the letter, and nothing:
2015-06-29 17:03:04.394 4639 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not build auth context. process_request /usr/lib/python2.7/dist-packages/keystone/middleware/core.py:229 2015-06-29 17:03:04.395 4639 INFO keystone.common.wsgi [-] GET /? 2015-06-29 17:03:04.396 4639 INFO eventlet.wsgi.server [-] 10.68.3.29 - - [29/Jun/2015 17:03:04] "GET /v2.0/ HTTP/1.1" 200 579 0.002657 2015-06-29 17:03:04.399 4639 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not build auth context. process_request /usr/lib/python2.7/dist-packages/keystone/middleware/core.py:229 2015-06-29 17:03:04.400 4639 INFO keystone.common.wsgi [-] POST /tokens? 2015-06-29 17:03:04.507 4639 INFO eventlet.wsgi.server [-] 10.68.3.29 - - [29/Jun/2015 17:03:04] "POST /v2.0/tokens HTTP/1.1" 200 2764 0.108216 2015-06-29 17:03:04.513 4634 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not build auth context. process_request /usr/lib/python2.7/dist-packages/keystone/middleware/core.py:229 2015-06-29 17:03:04.515 4634 INFO keystone.common.wsgi [-] POST /tokens? 2015-06-29 17:03:04.523 4634 WARNING keystone.common.wsgi [-] Authorization failed. Invalid user / password (Disable debug mode to suppress these details.) (Disable debug mode to suppress these details.) from 10.68.3.29
Eventually, more in hope then expectation, I used the keystone_authtoken config block from glance, rather then the config guide, and we were in business – very frustrating day but got there in the end.
[keystone_authtoken] identity_uri = http://openstack-mgmt:35357 admin_tenant_name = Services admin_user = cinder admin_password = notcinder
If I had the auth_uri parameter configured it just wouldn’t work, and I’m beyond caring why at this point!
