OpenStack Identity (keystone)

tenant-create An unexpected error

Asked by Marcos Lobo

Hi everyone,

I modified the configuration file (keystone.conf) on Havana 2 as follows:

- The user authentication (identity) is pointing to an LDAP served with SSL. This (I think) is properly configured.
- The rest of the configuration is pointing to another machine in which it is installed Openstack with packstack (not quantum).

I can run without any problem online commands as:

$ keystone --insecure role-create --name admin
$ keystone --insecure user-list
$ curl --insecure -H "X-Auth-Token:THETOKEN" -H "Content-type: application/json" -d '{"group": {"description": "grupo 1", "domain_id": "default", "name": "grupo1"}}' https://localhost:35357/v3/groups

Having explained this, my problem is this:

When I run this command:

$ keystone --insecure tenant-create --name admin --enabled true

The server answers:

An unexpected error prevented the server from fulfilling your request. {'info': '00002095: SvcErr: DSID-032A0B24, problem 5012 (DIR_ERROR), data 8350\n', 'desc': 'Operations error'} (HTTP 500)

And the content of the log is as follows:

2013-08-30 14:39:35.907 21155 DEBUG routes.middleware [-] Matched POST /tenants __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:100
2013-08-30 14:39:35.909 21155 DEBUG routes.middleware [-] Route path: '{path_info:.*}', defaults: {'controller': <keystone.contrib.s3.core.S3Extension object at 0x3d70490>} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:102
2013-08-30 14:39:35.909 21155 DEBUG routes.middleware [-] Match dict: {'controller': <keystone.contrib.s3.core.S3Extension object at 0x3d70490>, 'path_info': '/tenants'} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:103
2013-08-30 14:39:35.909 21155 DEBUG routes.middleware [-] Matched POST /tenants __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:100
2013-08-30 14:39:35.909 21155 DEBUG routes.middleware [-] Route path: '{path_info:.*}', defaults: {'controller': <keystone.contrib.admin_crud.core.CrudExtension object at 0x3d5bed0>} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:102
2013-08-30 14:39:35.910 21155 DEBUG routes.middleware [-] Match dict: {'controller': <keystone.contrib.admin_crud.core.CrudExtension object at 0x3d5bed0>, 'path_info': '/tenants'} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:103
2013-08-30 14:39:35.910 21155 DEBUG routes.middleware [-] Matched POST /tenants __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:100
2013-08-30 14:39:35.910 21155 DEBUG routes.middleware [-] Route path: '/tenants', defaults: {'action': u'create_project', 'controller': <keystone.identity.controllers.Tenant object at 0x3d5bdd0>} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:102
2013-08-30 14:39:35.910 21155 DEBUG routes.middleware [-] Match dict: {'action': u'create_project', 'controller': <keystone.identity.controllers.Tenant object at 0x3d5bdd0>} __call__ /usr/lib/python2.6/site-packages/routes/middleware.py:103
2013-08-30 14:39:35.945 21155 ERROR keystone.common.wsgi [-] {'info': '00002095: SvcErr: DSID-032A0B24, problem 5012 (DIR_ERROR), data 8350\n', 'desc': 'Operations error'}
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi Traceback (most recent call last):
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 237, in __call__
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi result = method(context, **params)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/identity/controllers.py", line 102, in create_project
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi self._normalize_domain_id(context, tenant_ref))
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 411, in create_project
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return self.assignment_api.create_project(tenant_id, tenant)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 44, in _wrapper
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return f(*args, **kw)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/assignment/backends/ldap.py", line 82, in create_project
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return self._set_default_domain(self.project.create(data))
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/assignment/backends/ldap.py", line 285, in create
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return super(ProjectApi, self).create(data)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 691, in create
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return super(EnabledEmuMixIn, self).create(values)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 325, in create
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi conn.add_s(self._id_to_dn(values['id']), attrs)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 523, in add_s
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return self.conn.add_s(dn, ldap_attrs)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 194, in add_s
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi return self.result(msgid,all=1,timeout=self.timeout)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 436, in result
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 440, in result2
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 446, in result3
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 96, in _ldap_call
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi result = func(*args,**kwargs)
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi OPERATIONS_ERROR: {'info': '00002095: SvcErr: DSID-032A0B24, problem 5012 (DIR_ERROR), data 8350\n', 'desc': 'Operations error'}
2013-08-30 14:39:35.945 21155 TRACE keystone.common.wsgi
2013-08-30 14:39:35.947 21155 INFO access [-] 127.0.0.1 - - [30/Aug/2013:12:39:35 +0000] "POST https://localhost:35357/v2.0/tenants HTTP/1.0" 500 255

¿What is the problem?

Thank you.

Question information

Language:
English Edit question
Status:
Solved
For:
OpenStack Identity (keystone) Edit question
Assignee:
No assignee Edit question
Solved by:
Marcos Lobo
Solved:
Last query:
Last reply:
Revision history for this message
Marcos Lobo (marcos-fermin-lobo) said : 		#1

Hi,

I found the problem.

In keystone.conf I was this:

tenant_name_attribute = member

And the correct value is:

tenant_name_attribute = displayName

Best regard,
Marcos.