You need to be an admin to run this script. On Fri, Aug 08, 2014 at 04:15:17PM -0400, Parisa Heidari wrote: > Hi Steve, > Thanks for your help. I tried either files but in both cases I get the same > error. I copy the output below. It seems that the OS variables are exported > properly. Any help is appreciated. > Here is the output after executing the suggested script: > > #./heat-keystone-setup-domain > INFO (connectionpool:258) Starting new HTTP connection (1): controller > INFO (heat-keystone-setup-domain:71) Creating domain heat > INFO (connectionpool:258) Starting new HTTP connection (1): controller > Traceback (most recent call last): > File "./heat-keystone-setup-domain", line 112, in <module> > main() > File "./heat-keystone-setup-domain", line 74, in main > description=HEAT_DOMAIN_DESCRIPTION) > File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, > in > inner > return func(*args, **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/domains.py", line > 43, > in create > **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 66, in > func > return f(*args, **new_kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 314, in > create > self.key) > File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 142, in > _create > return self._post(url, body, response_key, return_raw) > File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 155, in > _post > resp, body = self.client.post(url, body=body) > File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line > 596, in post > return self._cs_request(url, 'POST', **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line > 582, in _cs_request > return self.request(url, method, **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line > 564, in request > resp = super(HTTPClient, self).request(url, method, **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/baseclient.py", line > 21, > in request > return self.session.request(url, method, **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, > in > inner > return func(*args, **kwargs) > File "/usr/lib/python2.7/dist-packages/keystoneclient/session.py", line 251, > in request > raise exceptions.from_response(resp, method, url) > keystoneclient.apiclient.exceptions.Forbidden: You are not authorized to > perform > the requested action, identity:create_domain. (HTTP 403) > > Thanks, > Parisa > >On 06/08/14 14:32, Anne Gentle wrote: > >> > >> > >> > >> On Tue, Aug 5, 2014 at 9:13 PM, Steve Baker <sbaker [at] redhat > >> <mailto:sbaker [at] redhat>> wrote: > >> > >> On 06/08/14 09:25, Parisa Heidari wrote: > >>> Hi, > >>> I am trying Heat - IceHouse but I cannot even create a tiny VM as > >>> explained > in > >>> the documents > >>> > (http://docs.openstack.org/icehouse/install-guide/install/apt/content/heat-verify.html). > >>> In Heat-engine log file, I saw that "stack-user-domain" ID is not set in > >>> the > >>> heat.conf file. So I modified heat.conf and added admin ID (the one > >>> defined > >>> when Keystone was installed and configured) and its name and password for > >>> stack_user_domain, stack_domain_admin, and stack_domain_admin_password, > >>> respectively. But still stack creation fails and I see in the logs that > >>> "ClientException: The server has either erred or is incapable of > >>> performing > the > >>> requested operation". > >>> > >>> What should be set in heat.conf as stack-user-domain and other > >>> corresponding > >>> variables? should I create a new domain for Heat and how? > >>> > >>> Many thanks, > >>> Parisa > >>> > >> It looks like you need to run the heat-keystone-setup-domain > >> script and copy the resulting snippet into heat.conf > >> > >> > >> > >> Hi Steve, > >> Should that script be part of the install docs? Currently it just > >> says to Create the heat_stack_user role. > >> > >> I can log a doc bug, just want to be clear what it is that's missing. > >> > >We do have https://bugs.launchpad.net/heat/+bug/1326483 for the missing > man page. > > > >For the doc bug, the heat installation instructions need to describe > >when and how to run heat-keystone-setup-domain[1] > >but actually for the icehouse release of heat the script is > >create_heat_domain[2] > > >Having said all that, if the heat domain is not configured there is > >fallback code which reverts to the Havana behaviour of requiring the > >stack launching user be an admin, and _that_ may be the cause of > >Parisa's error above. > > >[1] > >http://git.openstack.org/cgit/openstack/heat/tree/bin/heat-keystone-setup-domain > >[2] > >http://git.openstack.org/cgit/openstack/heat/tree/tools/create_heat_domain?h=stable/icehouse > >
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
