I run it as 'root'. >You need to be an admin to run this script.
>On Fri, Aug 08, 2014 at 04:15:17PM -0400, Parisa Heidari wrote: >> Hi Steve, >> Thanks for your help. I tried either files but in both cases I get the same >> error. I copy the output below. It seems that the OS variables are exported >> properly. Any help is appreciated. >> Here is the output after executing the suggested script: >> >> #./heat-keystone-setup-domain >> INFO (connectionpool:258) Starting new HTTP connection (1): controller >> INFO (heat-keystone-setup-domain:71) Creating domain heat >> INFO (connectionpool:258) Starting new HTTP connection (1): controller >> Traceback (most recent call last): >> File "./heat-keystone-setup-domain", line 112, in <module> >> main() >> File "./heat-keystone-setup-domain", line 74, in main >> description=HEAT_DOMAIN_DESCRIPTION) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in >> inner >> return func(*args, **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/v3/domains.py", line 43, >> in create >> **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 66, in >> func >> return f(*args, **new_kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 314, in >> create >> self.key) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 142, in >> _create >> return self._post(url, body, response_key, return_raw) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/base.py", line 155, in >> _post >> resp, body = self.client.post(url, body=body) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line >> 596, in post >> return self._cs_request(url, 'POST', **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line >> 582, in _cs_request >> return self.request(url, method, **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line >> 564, in request >> resp = super(HTTPClient, self).request(url, method, **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/baseclient.py", line 21, >> in request >> return self.session.request(url, method, **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/utils.py", line 318, in >> inner >> return func(*args, **kwargs) >> File "/usr/lib/python2.7/dist-packages/keystoneclient/session.py", line 251, >> in request >> raise exceptions.from_response(resp, method, url) >> keystoneclient.apiclient.exceptions.Forbidden: You are not authorized to perform >> the requested action, identity:create_domain. (HTTP 403) >> >> Thanks, >> Parisa >> >On 06/08/14 14:32, Anne Gentle wrote: >> >> >> >> >> >> >> >> On Tue, Aug 5, 2014 at 9:13 PM, Steve Baker <sbaker [at] redhat >> >> <mailto:sbaker [at] redhat>> wrote: >> >> >> >> On 06/08/14 09:25, Parisa Heidari wrote: >> >>> Hi, >> >>> I am trying Heat - IceHouse but I cannot even create a tiny VM as explained >> in >> >>> the documents >> >>> >> (http://docs.openstack.org/icehouse/install-guide/install/apt/content/heat-verify.html). >> >>> In Heat-engine log file, I saw that "stack-user-domain" ID is not set in the >> >>> heat.conf file. So I modified heat.conf and added admin ID (the one defined >> >>> when Keystone was installed and configured) and its name and password for >> >>> stack_user_domain, stack_domain_admin, and stack_domain_admin_password, >> >>> respectively. But still stack creation fails and I see in the logs that >> >>> "ClientException: The server has either erred or is incapable of performing >> the >> >>> requested operation". >> >>> >> >>> What should be set in heat.conf as stack-user-domain and other corresponding >> >>> variables? should I create a new domain for Heat and how? >> >>> >> >>> Many thanks, >> >>> Parisa >> >>> >> >> It looks like you need to run the heat-keystone-setup-domain >> >> script and copy the resulting snippet into heat.conf >> >> >> >> >> >> >> >> Hi Steve, >> >> Should that script be part of the install docs? Currently it just >> >> says to Create the heat_stack_user role. >> >> >> >> I can log a doc bug, just want to be clear what it is that's missing. >> >> >> >We do have https://bugs.launchpad.net/heat/+bug/1326483 for the missing >> man page. >> > >> >For the doc bug, the heat installation instructions need to describe >> >when and how to run heat-keystone-setup-domain[1] >> >but actually for the icehouse release of heat the script is >> >create_heat_domain[2] >> >> >Having said all that, if the heat domain is not configured there is >> >fallback code which reverts to the Havana behaviour of requiring the >> >stack launching user be an admin, and _that_ may be the cause of >> >Parisa's error above. >> >> >[1] >> >http://git.openstack.org/cgit/openstack/heat/tree/bin/heat-keystone-setup-domain >> >[2] >> >http://git.openstack.org/cgit/openstack/heat/tree/tools/create_heat_domain?h=stable/icehouse >> >> _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
