Authentication required, Glance whit Keystone

Asked by Daniel Nunez E.

Hi

I use Auth-Token with User and password when whit keystone and glance.

i have this tenants, users and roles

root@d1:~# keystone --token 0123456789 --endpoint http://d1:35357/v2.0 tenant-list
+----------------------------------+----------+---------+
| id | name | enabled |
+----------------------------------+----------+---------+
| 493415f4c05c481bb5987ca5d09dcfce | servicio | True |
| 68926cab8fdc47ff8fd21696b7c80a8f | ubuntu | True |
| dc68f8dc805e465a829e13e4fcb7a461 | default | True |
+----------------------------------+----------+---------+
root@d1:~# keystone --token 0123456789 --endpoint http://d1:35357/v2.0 user-list
+----------------------------------+---------+----------------+---------------+
| id | enabled | email | name |
+----------------------------------+---------+----------------+---------------+
| 4f42b01789a24477a4c0ca88c3cfa209 | True | None | Administrador |
| 95cd8682a92b4bc8946c6becb37e064c | True | None | nova |
| d00af1cf662f4b0b8193f2be4a1f6a65 | True | None | ec2 |
| e2d46ee3f1474c5abb9c2825cda36b70 | True | None | glance |
| ef6903d2258a4336aa44136a2049875d | True | root@localhost | admin |
+----------------------------------+---------+----------------+---------------+
root@d1:~# keystone --token 0123456789 --endpoint http://d1:35357/v2.0 role-list
+----------------------------------+---------------+
| id | name |
+----------------------------------+---------------+
| 6864f147697345d08233a0b22d38ca0c | administrador |
+----------------------------------+---------------+

the relation are between the user Administrador, role administrador and tenant servicio.

root@d1:~# keystone --token 0123456789 --endpoint http://d1:35357/v2.0 user-role-add --user 4f42b01789a24477a4c0ca88c3cfa209 --tenant_id 493415f4c05c481bb5987ca5d09dcfce --role 6864f147697345d08233a0b22d38ca0c

the fiter auth token in /etc/glance/glance-api-paste.ini and /glance-registry-paste.ini are:

[filter:authtoken]
paste.filter_factory = keystone.middleware.auth_token:filter_factory
#service_protocol = http
#service_host = 127.0.0.1
#service_port = 5000
auth_host = 127.0.0.1
auth_port = 35357
auth_protocol = http
#auth_token = 0123456789
#auth_uri = http://127.0.0.1:5000/
#admin_tenant_name = default
admin_user = Administrador
admin_password = daniel

and the error is

root@d1:~# glance -I Administrador -K daniel index --deb
Traceback (most recent call last):
  File "/usr/bin/glance", line 1040, in <module>
    result = command(options, args)
  File "/usr/bin/glance", line 63, in wrapper
    ret = func(*args, **kwargs)
  File "/usr/bin/glance", line 551, in images_index
    print_header=True)
  File "/usr/bin/glance", line 497, in _images_index
    images = client.get_images(**parameters)
  File "/usr/lib/python2.7/dist-packages/glance/client.py", line 60, in get_images
    res = self.do_request("GET", "/images", params=params)
  File "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 61, in wrapped
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 420, in do_request
    headers=headers)
  File "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 75, in wrapped
    return func(self, method, url, body, headers)
  File "/usr/lib/python2.7/dist-packages/glance/common/client.py", line 539, in _do_request
    raise exception.NotAuthenticated(res.read())
glance.common.exception.NotAuthenticated: You are not authenticated.
Details: 401 Unauthorized

This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.

 Authentication required

I dont understand where the error is? i use the correct credentials? the configuration files are fine?

please help me.

Att

Daniel N

Question information

Language:
English Edit question
Status:
Expired
For:
OpenStack Identity (keystone) Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Launchpad Janitor (janitor) said :
#1

This question was expired because it remained in the 'Open' state without activity for the last 15 days.