RESOLVED: glance index "Invalid OpenStack Identity credentials."

Asked by varada on 2013-03-06

I am getting this error past 2 days..I cloned to grizzly as of today..but still could not get rid of this error.

root@lab1:~# glance index
ID Name Disk Format Container Format Size
------------------------------------ ------------------------------ -------------------- -------------------- --------------
Request returned failure status.
Invalid OpenStack Identity credentials.
root@lab1:~# glance --debug index
ID Name Disk Format Container Format Size
------------------------------------ ------------------------------ -------------------- -------------------- --------------
curl -i -X GET -H 'X-Auth-Token: 21fa7ec5fdf544feb4750ad8dda9dff3' -H 'Content-Type: application/json' -H 'User-Agent: python-glanceclient' http://206.16.136.20:9292/v1/images/detail?limit=10

HTTP/1.1 401 Unauthorized
date: Wed, 06 Mar 2013 21:28:01 GMT
content-length: 276
content-type: text/plain; charset=UTF-8
www-authenticate: Keystone uri='http://172.16.30.90:35357'

401 Unauthorized

This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.

 Authentication required

Request returned failure status.
Invalid OpenStack Identity credentials.
root@lab1:~#
-----------------
root@lab1:~# tail -f /var/log/keystone/keystone.log

2013-03-06 16:28:01 INFO [sqlalchemy.engine.base.Engine] SELECT user_project_metadata.user_id AS user_project_metadata_user_id, user_project_metadata.project_id AS user_project_metadata_project_id, user_project_metadata.data AS user_project_metadata_data
FROM user_project_metadata
WHERE user_project_metadata.user_id = %s
2013-03-06 16:28:01 INFO [sqlalchemy.engine.base.Engine] ('775ac11c706c40529cf00321d2979885',)
2013-03-06 16:28:01 WARNING [keystone.common.wsgi] Authorization failed. Invalid project from 172.16.30.90
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] ******************** RESPONSE HEADERS ********************
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] Vary = X-Auth-Token
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] Content-Type = application/json
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] Content-Length = 81
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi]
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] ******************** RESPONSE BODY ********************
2013-03-06 16:28:01 DEBUG [keystone.common.wsgi] {"error": {"message": "Invalid project", "code": 401, "title": "Not Authorized"}}
2013-03-06 16:28:01 INFO [access] 172.16.30.90 - - [06/Mar/2013:21:28:01 +0000] "POST http://172.16.30.90:35357/v2.0/tokens HTTP/1.0" 401 81
2013-03-06 16:28:01 DEBUG [eventlet.wsgi.server] 172.16.30.90 - - [06/Mar/2013 16:28:01] "POST /v2.0/tokens HTTP/1.1" 401 221 0.041076

--------------------------------
Appreciate any insight..thanks in advance.
-Varada

Question information

Language:
English Edit question
Status:
Solved
For:
Glance Edit question
Assignee:
No assignee Edit question
Solved by:
varada
Solved:
2013-03-06
Last query:
2013-03-06
Last reply:
varada (varadaa) said : #1

RESOLVED:

I used sample_data.sh script to populate tables and such..but it did not create all necessary admin roles for the users. I compared SQLDB data from respective table (user_project_metadata) with 'keystone' data. I had to do several 'keystone user-role-add' commands to 'admin' user. That resolved the issue.