OpenStack Dashboard (Horizon)

horizon doesn't work with keystoneclient?

Asked by junlun fan

i install horizon and keystone on the same server.Keystone works fine if i use the python-keystoneclient just as follows:
# keystone --os-username admin --os-password=keystone --os-tenant-name admin --os-auth-url=http://172.20.9.1:35357/v2.0 user-list
+----------------------------------+---------+---------+------------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+------------------+
| 2c2e86783c82412b9caec35ff8098c09 | admin | True | <email address hidden> |
| 33024148420146e69b3b6a6ccd800827 | nova | True | <email address hidden> |
| 79b66cb8fd9e44cc9e1ea5c5ab9a9baf | quantum | True | <email address hidden> |
| 919c474d8faa4f25ab5e433be92f4625 | demo | True | <email address hidden> |
| aabde8d2778544bd93784ae713501189 | glance | True | <email address hidden> |
+----------------------------------+---------+---------+------------------+

#keystone --os-username demo --os-password=keystone --os-auth-url=http://172.20.9.1:5000/v2.0 token-get
+----------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Property | Value |
+----------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| expires | 2012-10-27T06:57:40Z |
| id | MIICNgYJKoZIhvcNAQcCoIICJzCCAiMCAQExCTAHBgUrDgMCGjCCAQ8GCSqGSIb3DQEHAaCCAQAEgf17ImFjY2VzcyI6IHsidG9rZW4iOiB7Imlzc3VlZF9hdCI6ICIwNjo1Nzo0MC44NTkwNTEiLCAiZXhwaXJlcyI6ICIyMDEyLTEwLTI3VDA2OjU3OjQwWiIsICJpZCI6ICJwbGFjZWhvbGRlciJ9LCAic2VydmljZUNhdGFsb2ciOiB7fSwgInVzZXIiOiB7InVzZXJuYW1lIjogImRlbW8iLCAicm9sZXNfbGlua3MiOiBbXSwgImlkIjogIjkxOWM0NzRkOGZhYTRmMjVhYjVlNDMzYmU5MmY0NjI1IiwgInJvbGVzIjogW10sICJuYW1lIjogImRlbW8ifX19MYH-MIH8AgEBMFwwVzELMAkGA1UEBhMCVVMxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMFVW5zZXQxGDAWBgNVBAMTD3d3dy5leGFtcGxlLmNvbQIBATAHBgUrDgMCGjANBgkqhkiG9w0BAQEFAASBgHE4j8tMsCJqZ38ztCmGUlZQ5XBDoIR-9zrgq7ThkkoHehCykeuLOMdtcIYYmip2NQgWPhW4h6GIrZKMjzXRc8T3u2Y84GSfPOaxmOE0kxBYqPwkC-CLXInpkTPZEYZpqZag32MxpCjaopjl9mTAonlVVRgzige9vRFu8vh3GERl |
| user_id | 919c474d8faa4f25ab5e433be92f4625 |
+----------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

yet after i install horizon and the web shows "An error occurred authenticating. Please try again later" when i set the local_setting.py "OPENSTACK_KEYSTONE_URL=http://172.20.9.1:5000/v2.0/",very weird.

the horizon branch is stable\folsom and python-keystoneclient is of master version. I believe that the trouble must be the communication between horizon and python-keystoneclient,but i don't know how to solve it ,any one has the same situations?

Question information

Language:
English Edit question
Status:
Answered
For:
OpenStack Dashboard (Horizon) Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Gabriel Hurley (gabriel-hurley) said : 		#1

Given the ID of that token, I'm guessing you have PKI tokens enabled in Keystone. I just discovered a couple days ago that due to the length of the token the PKI tokens break Horizon's session storage. The bug is reported here: https://bugs.launchpad.net/horizon/+bug/1071865

A fix is in the works but may take a little while because it will involve adding a new API route to Keystone.

For now, you can disable the PKI mechanisms in Keystone to continue using Horizon.

Can you help with this problem?

Provide an answer of your own, or ask junlun fan for more information if necessary.

To post a message you must log in.