OpenStack Compute (nova)

ERROR: Policy doesn't allow compute_extension:services to be performed. (HTTP 403) (Request-ID: req-47b04f9c-07ae-4352-9f48-1073907175bf)

Asked by Antonio Tirri

I installed OpenStack through DevStack.

When I try to type the nova service-list command, I obtain the following error:

stack@controllerubuntuvirtualbox:~/devstack$ source openrc
stack@controllerubuntuvirtualbox:~/devstack$ source stackrc
stack@controllerubuntuvirtualbox:~/devstack$ nova service-list
ERROR: Policy doesn't allow compute_extension:services to be performed. (HTTP 403) (Request-ID: req-47b04f9c-07ae-4352-9f48-1073907175bf)

How is it possible to solve the problem?

Question information

Language:
English Edit question
Status:
Answered
For:
OpenStack Compute (nova) Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Keith Tobin (keith-tobin) said : 		#1

It seems that you are not authorised to get the service-list, this would happen if the user configured by openerc is not a admin. Can you check that the user is a admin. Figure what user openrc is using and use keystone cli to ge the user roles.

To get the user openrc as configured run,

ecgo $USERNAME

This wil give you the username you are using

Then use keystone cli to figure if user has admin roles by getting a list of roles

http://docs.openstack.org/cli/quick-start/content/keystone_client.html#keystone_client_commands

Revision history for this message
Alfred Shen (alfredcs) said : 		#2

Another possibility is to check /etc/nova/policy.jason to make this file is correct. Default one should work just fine.

Can you help with this problem?

Provide an answer of your own, or ask Antonio Tirri for more information if necessary.

To post a message you must log in.