OpenStack Dashboard (Horizon)

Horizon auth is failing

Asked by Paul Czarkowski

I've installed Folsom single node on Ubuntu 12.04 based on the instructions here - http://docs.openstack.org/trunk/openstack-compute/install/apt/content/ap_installingfolsomubuntuprecise.html

everything went to plan until it came to the Dashboard. I installed it and can access it via http://server/horizon. However I cannot auth. The user pass from what I understand should be admin/openstack ( i left the default choices for my first run through the install process) If I use that it sits there spinning for quite a while, whereas if I use a bad user/pass it fails right away.

I tried with /etc/openstack-dashboard/local_settings.py completely default, and also with the mysql backend DATABASES = section ( as described in another section of howto I found ). Both give the same results.

this is my apache error.log when I purposefully use a bad password :

[Wed Oct 10 01:57:24 2012] [error] DEBUG:openstack_auth.backend:Beginning user authentication for user "aa".
[Wed Oct 10 01:57:25 2012] [error] Request returned failure status.
[Wed Oct 10 01:57:25 2012] [error] None
[Wed Oct 10 01:57:25 2012] [error] Request returned failure status.
[Wed Oct 10 01:57:25 2012] [error] Traceback (most recent call last):
[Wed Oct 10 01:57:25 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/client.py", line 155, in _cs_request
[Wed Oct 10 01:57:25 2012] [error] **kwargs)
[Wed Oct 10 01:57:25 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/client.py", line 135, in request
[Wed Oct 10 01:57:25 2012] [error] raise exceptions.from_response(resp, body)
[Wed Oct 10 01:57:25 2012] [error] Unauthorized: The request you have made requires authentication. (HTTP 401)

and when I use the right password :
[Wed Oct 10 01:57:44 2012] [error] DEBUG:openstack_auth.backend:Beginning user authentication for user "admin".
[Wed Oct 10 01:57:44 2012] [error] unable to retrieve service catalog with token
[Wed Oct 10 01:57:44 2012] [error] Traceback (most recent call last):
[Wed Oct 10 01:57:44 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 132, in _extract_service_catalog
[Wed Oct 10 01:57:44 2012] [error] endpoint_type='adminURL')
[Wed Oct 10 01:57:44 2012] [error] File "/usr/lib/python2.7/dist-packages/keystoneclient/service_catalog.py", line 62, in url_for
[Wed Oct 10 01:57:44 2012] [error] raise exceptions.EndpointNotFound('Endpoint not found.')
[Wed Oct 10 01:57:44 2012] [error] EndpointNotFound: Endpoint not found.
[Wed Oct 10 01:57:44 2012] [error] DEBUG:openstack_auth.backend:Authentication completed for user "admin".
[Wed Oct 10 01:58:47 2012] [error] \x1b[31;1mUnauthorized: n/a (HTTP 401)\x1b[0m
[Wed Oct 10 01:58:47 2012] [error] Traceback (most recent call last):
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/usage/base.py", line 93, in summarize
[Wed Oct 10 01:58:47 2012] [error] self.usage_list = self.get_usage_list(start, end)
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/usage/base.py", line 128, in get_usage_list
[Wed Oct 10 01:58:47 2012] [error] return api.usage_list(self.request, start, end)
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/horizon/api/nova.py", line 418, in usage_list
[Wed Oct 10 01:58:47 2012] [error] return [Usage(u) for u in novaclient(request).usage.list(start, end, True)]
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/novaclient/v1_1/usage.py", line 35, in list
[Wed Oct 10 01:58:47 2012] [error] "tenant_usages")
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/novaclient/base.py", line 62, in _list
[Wed Oct 10 01:58:47 2012] [error] _resp, body = self.api.client.get(url)
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/novaclient/client.py", line 239, in get
[Wed Oct 10 01:58:47 2012] [error] return self._cs_request(url, 'GET', **kwargs)
[Wed Oct 10 01:58:47 2012] [error] File "/usr/lib/python2.7/dist-packages/novaclient/client.py", line 236, in _cs_request
[Wed Oct 10 01:58:47 2012] [error] raise ex
[Wed Oct 10 01:58:47 2012] [error] Unauthorized: n/a (HTTP 401)

Not really knowing how keystone works I'm throwing darts in the dark, but I managed to find a command to list endpoints, and it shows AdminURL entries...

root@openstack01:/etc/openstack-dashboard# keystone endpoint-list
+----------------------------------+----------+---------------------------------------------+---------------------------------------------+----------------------------------------+
| id | region | publicurl | internalurl | adminurl |
+----------------------------------+----------+---------------------------------------------+---------------------------------------------+----------------------------------------+
| 10f4df46bc464420be8035022a4846d0 | myregion | http://127.0.0.1:9292/v1 | http://127.0.0.1:9292/v1 | http://127.0.0.1:9292/v1 |
| 52545f2fdcf448d0af8700c48ec7646e | myregion | http://127.0.0.1:8774/v2/%(tenant_id)s | http://127.0.0.1:8774/v2/%(tenant_id)s | http://127.0.0.1:8774/v2/%(tenant_id)s |
| 56b37818a4054af89f3e6577644338df | myregion | http://127.0.0.1:8776/v1/%(tenant_id)s | http://127.0.0.1:8776/v1/%(tenant_id)s | http://127.0.0.1:8776/v1/%(tenant_id)s |
| 691820336f17458983c1ce2a4e6d4a23 | myregion | http://127.0.0.1:8080/v1/AUTH_%(tenant_id)s | http://127.0.0.1:8080/v1/AUTH_%(tenant_id)s | http://127.0.0.1:8080/v1 |
| 6fe1cdc51c06453ca094ab1ba8fcc8c5 | myregion | http://127.0.0.1:5000/v2.0 | http://127.0.0.1:5000/v2.0 | http://127.0.0.1:35357/v2.0 |
| c977053af62a4b5ba55c052c058bf2b7 | myregion | http://127.0.0.1:8776/v1/%(tenant_id)s | http://127.0.0.1:8776/v1/%(tenant_id)s | http://127.0.0.1:8776/v1/%(tenant_id)s |
| db4627d4caa24188b46cbb9d716a166a | myregion | http://127.0.0.1:8773/services/Cloud | http://127.0.0.1:8773/services/Cloud | http://127.0.0.1:8773/services/Admin |
| df07ac15db4b4cbb820c6c7aa7a7105e | myregion | http://127.0.0.1:9696/v2 | http://127.0.0.1:9696/v2 | http://127.0.0.1:9696/v2 |
+----------------------------------+----------+---------------------------------------------+---------------------------------------------+----------------------------------------+

I'm kinda stuck and flailing and looking for some guidance as to where to look next.

Question information

Language:
English Edit question
Status:
Solved
For:
OpenStack Dashboard (Horizon) Edit question
Assignee:
No assignee Edit question
Solved by:
Paul Czarkowski
Solved:
Last query:
Last reply:
Revision history for this message
Paul Czarkowski (paulcz) said : 		#1

I rebuilt the server again and used this guide

https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/master/OpenStack_Folsom_Install_Guide_WebVersion.rst

Horizon worked ... so Either I screwed up the keystone user mappings or there's some other minor step in the second guide that wasn't in the first.

There was a problem with Cinder, but I've gone ahead and submitted a bug for that as I was able to work around it.

Revision history for this message
Sina Sadeghi (sina-sa) said : 		#2

I am suffering from the same issue here guys. Any thoughts? I notice in the guide Paul posted they use some shell scripts to populate keystone, I used keystone-init to populate my keystone.