The patch to address this issue in the installation guide hasn't merged yet. In the wsgi-keystone.conf file, you need to add "group=keystone" to both WSGIDaemonProcess options and then restart Apache.
On Mon, May 25, 2015 at 9:14 PM, BYEONG-GI KIM <kimbyeon...@gmail.com> wrote: > I just followed the installation guide, > http://docs.openstack.org/kilo/install-guide/install/yum/content/keystone-install.html, > and if the 'usermod -a -G keystone apache' is for what you mentioned, yes, > I did. > > Am I missing something? > > > 2015-05-26 10:32 GMT+09:00 Matt Kassawara <mkassaw...@gmail.com>: > >> Starting the keystone service simply enables Eventlet, a library >> deprecated in Kilo in favor of the Apache HTTP server. I'd call it a >> workaround rather than a valid solution. Did you try adding the group to >> the WSGI configuration? >> >> On Mon, May 25, 2015 at 8:04 PM, BYEONG-GI KIM <kimbyeon...@gmail.com> >> wrote: >> >>> Hello. >>> >>> I also met same problem and I solved it via following: >>> >>> >>> https://ask.openstack.org/en/question/66833/kilo-on-centos7-keystone-throws-http-500-except-when-using-os_token/ >>> >>> 1. Stop httpd.service >>> 2. Start openstack-keystone.service >>> >>> Then the command 'openstack service create --name keystone --description >>> "OpenStack Identity" identity' finally worked. But, I'm now confusing this >>> is a good solution for the error because Jose said "*Take into account >>> that in Kilo keystone service as an stand alone server as been deprecated >>> for security reasons so you don't need to start it. In Kilo is the http >>> server in charge of port listening and keystone behaves like as a wsgi >>> script.*" on the above link. >>> >>> I'm not sure that I can successfully install all the openstack >>> components after this makeshift. >>> >>> Best regards >>> >>> Byeong-Gi KIM >>> >>> >>> 2015-05-25 19:40 GMT+09:00 <mich...@tropyx.com>: >>> >>>> >>>> >>>> There's definitely something weird going on.... now we're trying SLES >>>> and getting the same error. >>>> >>>> >>>> >>>> This is the keystone-error.log (apache) >>>> >>>> >>>> >>>> 2015-05-25 05:36:00.029253 mod_wsgi (pid=13432, >>>> process='keystone-admin', application=''): Loading WSGI script >>>> '/srv/www/cgi-bin/keystone/admin'. >>>> 2015-05-25 05:36:00.029822 mod_wsgi (pid=13432): Target WSGI script >>>> '/srv/www/cgi-bin/keystone/admin' cannot be loaded as Python module. >>>> 2015-05-25 05:36:00.029875 mod_wsgi (pid=13432): Exception occurred >>>> processing WSGI script '/srv/www/cgi-bin/keystone/admin'. >>>> 2015-05-25 05:36:00.029937 Traceback (most recent call last): >>>> 2015-05-25 05:36:00.029993 File "/srv/www/cgi-bin/keystone/admin", >>>> line 25, in <module> >>>> 2015-05-25 05:36:00.030064 application = >>>> wsgi_server.initialize_application(name) >>>> 2015-05-25 05:36:00.030124 File >>>> "/usr/lib/python2.7/site-packages/keystone/server/wsgi.py", line 38, in >>>> initialize_application >>>> 2015-05-25 05:36:00.030178 common.configure() >>>> 2015-05-25 05:36:00.030219 File >>>> "/usr/lib/python2.7/site-packages/keystone/server/common.py", line 28, in >>>> configure >>>> 2015-05-25 05:36:00.030264 config.configure() >>>> 2015-05-25 05:36:00.030304 File >>>> "/usr/lib/python2.7/site-packages/keystone/common/config.py", line 1103, in >>>> configure >>>> 2015-05-25 05:36:00.030342 help='Do not monkey-patch threading >>>> system modules.')) >>>> 2015-05-25 05:36:00.030371 File >>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1794, in >>>> __inner >>>> 2015-05-25 05:36:00.030405 result = f(self, *args, **kwargs) >>>> 2015-05-25 05:36:00.030429 File >>>> "/usr/lib/python2.7/site-packages/oslo_config/cfg.py", line 1967, in >>>> register_cli_opt >>>> 2015-05-25 05:36:00.030454 raise ArgsAlreadyParsedError("cannot >>>> register CLI option") >>>> 2015-05-25 05:36:00.030495 ArgsAlreadyParsedError: arguments already >>>> parsed: cannot register CLI option >>>> 2015-05-25 05:36:00.030671 AH00690: no acceptable variant: >>>> /usr/share/apache2/error/HTTP_INTERNAL_SERVER_ERROR.html.var >>>> >>>> >>>> >>>> Does that give anyone a clue as to what is going wrong? >>>> >>>> >>>> >>>> Here's our Apache-Keystone-WSGI config: >>>> >>>> >>>> >>>> Listen 5000 >>>> Listen 35357 >>>> >>>> <VirtualHost *:5000> >>>> WSGIDaemonProcess keystone-public processes=5 threads=1 >>>> user=keystone display-name=%{GROUP} >>>> WSGIProcessGroup keystone-public >>>> WSGIScriptAlias / /srv/www/cgi-bin/keystone/main >>>> WSGIApplicationGroup %{GLOBAL} >>>> WSGIPassAuthorization On >>>> ErrorLogFormat "%{cu}t %M" >>>> LogLevel info >>>> ErrorLog /var/log/apache2/keystone-error.log >>>> CustomLog /var/log/apache2/keystone-access.log combined >>>> </VirtualHost> >>>> >>>> <VirtualHost *:35357> >>>> WSGIDaemonProcess keystone-admin processes=5 threads=1 >>>> user=keystone display-name=%{GROUP} >>>> WSGIProcessGroup keystone-admin >>>> WSGIScriptAlias / /srv/www/cgi-bin/keystone/admin >>>> WSGIApplicationGroup %{GLOBAL} >>>> WSGIPassAuthorization On >>>> ErrorLogFormat "%{cu}t %M" >>>> LogLevel info >>>> ErrorLog /var/log/apache2/keystone-error.log >>>> CustomLog /var/log/apache2/keystone-access.log combined >>>> </VirtualHost> >>>> >>>> >>>> >>>> Thanks in advance. >>>> >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Mailing list: >>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>>> Post to : openstack@lists.openstack.org >>>> Unsubscribe : >>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>>> >>>> >>> >>> _______________________________________________ >>> Mailing list: >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>> Post to : openstack@lists.openstack.org >>> Unsubscribe : >>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack >>> >>> >> >
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
