Thank you all, I have solved by re-configure last 3 step in https://docs.openstack.org/ocata/install-guide-ubuntu/keystone-users.html by adding 'sudo', then it works.
It seems that I miss some step... Thank you! 2017-03-13 10:16 GMT+08:00 Mohit . <workonopenst...@gmail.com>: > Hello Sam, > > Hope you must have bootstrapped keystone with the correct password > ADMIN_PASS > > keystone-manage bootstrap --bootstrap-password ADMIN_PASS \ > --bootstrap-admin-url http://controller:35357/v3/ \ > --bootstrap-internal-url http://controller:5000/v3/ \ > --bootstrap-public-url http://controller:5000/v3/ \ > --bootstrap-region-id RegionOne > > Thanks > Mohit. > On 13 Mar 2017 07:38, "Chris Suttles" <sutt...@gmail.com> wrote: > >> The OS_PROJECT variable should probably still be admin. >> >> I urge you to consider following the guide verbatim, and customizing once >> you are done. >> >> -Chris >> >> On Mar 12, 2017, at 6:32 PM, Sam <batmanu...@gmail.com> wrote: >> >> Thank you, but which one is incorrect? >> >> All my passwd is set to 'gateway', and I use 'gateway' username not >> 'admin' or 'openstack'. >> >> And in https://docs.openstack.org/ocata/install-guide-ubuntu/key >> stone-install.html this step, I set every thing as doc said except env >> as bellow, but event I set env as doc said(which set OS_USERNAME=admin), I >> also got errors as bellow. >> >> So how to do.... >> >> 2017-03-12 23:01 GMT+08:00 Chris Suttles <sutt...@gmail.com>: >> >>> Your env looks incorrect to me. Take a look here for setting those vars >>> correctly: >>> >>> https://docs.openstack.org/ocata/install-guide-ubuntu/keysto >>> ne-install.html >>> >>> It's crucial that you set those variables to the same information you >>> provide to keystone in the steps listed there. >>> >>> On Sun, Mar 12, 2017 at 6:35 AM, Sam <batmanu...@gmail.com> wrote: >>> >>>> Hi all, >>>> >>>> I'm installing openstack ocata version, in this step: >>>> https://docs.openstack.org/ocata/install-guide-ubuntu/keysto >>>> ne-users.html >>>> I got error while run 'openstack' command: >>>> Unauthorized: The request you have made requires authentication. (HTTP >>>> 401) (Request-ID: req-1ee39bdd-03b8-4ea8-9432-d027f91c131a) >>>> >>>> My env is: >>>> export OS_USERNAME=gateway >>>> export OS_PASSWORD=gateway >>>> export OS_PROJECT_NAME=gateway >>>> export OS_USER_DOMAIN_NAME=Default >>>> export OS_PROJECT_DOMAIN_NAME=Default >>>> export OS_AUTH_URL=http://controller:35357/v3 >>>> export OS_IDENTITY_API_VERSION=3 >>>> >>>> >>>> detail error is as bellow, does that mean my env is wrong? Thank you! >>>> >>>> gateway@gateway-virtual-machine:~$ openstack project create --domain >>>> default --description "Service Project" service >>>> The request you have made requires authentication. (HTTP 401) >>>> (Request-ID: req-cf395e9a-a69f-4a71-9f08-26cb149cb7bd) >>>> gateway@gateway-virtual-machine:~$ openstack project create --domain >>>> default --description "Service Project" service --debug >>>> START with options: [u'project', u'create', u'--domain', u'default', >>>> u'--description', u'Service Project', u'service', u'--debug'] >>>> options: Namespace(access_key='', access_secret='***', >>>> access_token='***', access_token_endpoint='', access_token_type='', >>>> auth_type='', auth_url='http://controller:35357/v3', cacert=None, >>>> cert='', client_id='', client_secret='***', cloud='', code='', >>>> consumer_key='', consumer_secret='***', debug=True, >>>> default_domain='default', default_domain_id='', default_domain_name='', >>>> deferred_help=False, discovery_endpoint='', domain_id='', domain_name='', >>>> endpoint='', identity_provider='', identity_provider_url='', insecure=None, >>>> interface='', key='', log_file=None, old_profile=None, openid_scope='', >>>> os_beta_command=False, os_compute_api_version='', >>>> os_identity_api_version='3', os_image_api_version='', >>>> os_network_api_version='', os_object_api_version='', os_project_id=None, >>>> os_project_name=None, os_volume_api_version='', passcode='', >>>> password='***', profile=None, project_domain_id='', >>>> project_domain_name='Default', project_id='', project_name='gateway', >>>> protocol='', redirect_uri='', region_name='', timing=False, token='***', >>>> trust_id='', url='', user_domain_id='', user_domain_name='Default', >>>> user_id='', username='gateway', verbose_level=3, verify=None) >>>> Auth plugin password selected >>>> auth_config_hook(): {'auth_type': 'password', 'beta_command': False, >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'cacert': None, 'auth_url': 'http://controller:35357/v3', >>>> u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', >>>> 'networks': [], u'image_api_version': u'2', 'verify': True, >>>> u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': >>>> 'gateway', u'container_infra_api_version': u'1', 'verbose_level': 3, >>>> 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', >>>> 'auth': {'user_domain_name': 'Default', 'project_name': 'gateway', >>>> 'project_domain_name': 'Default'}, 'default_domain': 'default', >>>> u'container_api_version': u'1', u'image_api_use_tasks': False, >>>> u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', >>>> 'timing': False, 'password': '***', u'application_catalog_api_version': >>>> u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', >>>> 'deferred_help': False, u'identity_api_version': '3', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'status': u'active', 'debug': True, u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> defaults: {u'auth_type': 'password', u'status': u'active', >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'api_timeout': None, u'baremetal_api_version': u'1', u'image_api_version': >>>> u'2', u'container_infra_api_version': u'1', u'metering_api_version': >>>> u'2', u'image_api_use_tasks': False, u'floating_ip_source': u'neutron', >>>> u'orchestration_api_version': u'1', 'cacert': None, u'network_api_version': >>>> u'2', u'message': u'', u'image_format': u'qcow2', >>>> u'application_catalog_api_version': u'1', u'key_manager_api_version': >>>> u'v1', 'verify': True, u'identity_api_version': u'2.0', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'container_api_version': u'1', u'dns_api_version': u'2', >>>> u'object_store_api_version': u'1', u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> cloud cfg: {'auth_type': 'password', 'beta_command': False, >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'cacert': None, 'auth_url': 'http://controller:35357/v3', >>>> u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', >>>> 'networks': [], u'image_api_version': u'2', 'verify': True, >>>> u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': >>>> 'gateway', u'container_infra_api_version': u'1', 'verbose_level': 3, >>>> 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', >>>> 'auth': {'user_domain_name': 'Default', 'project_name': 'gateway', >>>> 'project_domain_name': 'Default'}, 'default_domain': 'default', >>>> u'container_api_version': u'1', u'image_api_use_tasks': False, >>>> u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', >>>> 'timing': False, 'password': '***', u'application_catalog_api_version': >>>> u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', >>>> 'deferred_help': False, u'identity_api_version': '3', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'status': u'active', 'debug': True, u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> compute API version 2, cmd group openstack.compute.v2 >>>> network API version 2, cmd group openstack.network.v2 >>>> image API version 2, cmd group openstack.image.v2 >>>> volume API version 2, cmd group openstack.volume.v2 >>>> identity API version 3, cmd group openstack.identity.v3 >>>> object_store API version 1, cmd group openstack.object_store.v1 >>>> neutronclient API version 2, cmd group openstack.neutronclient.v2 >>>> Auth plugin password selected >>>> auth_config_hook(): {'auth_type': 'password', 'beta_command': False, >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'cacert': None, 'auth_url': 'http://controller:35357/v3', >>>> u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', >>>> 'networks': [], u'image_api_version': u'2', 'verify': True, >>>> u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': >>>> 'gateway', u'container_infra_api_version': u'1', 'verbose_level': 3, >>>> 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', >>>> 'auth': {'user_domain_name': 'Default', 'project_name': 'gateway', >>>> 'project_domain_name': 'Default'}, 'default_domain': 'default', >>>> u'container_api_version': u'1', u'image_api_use_tasks': False, >>>> u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', >>>> 'timing': False, 'password': '***', u'application_catalog_api_version': >>>> u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', >>>> 'deferred_help': False, u'identity_api_version': '3', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'status': u'active', 'debug': True, u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> Auth plugin password selected >>>> auth_config_hook(): {'auth_type': 'password', 'beta_command': False, >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'cacert': None, 'auth_url': 'http://controller:35357/v3', >>>> u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', >>>> 'networks': [], u'image_api_version': u'2', 'verify': True, >>>> u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': >>>> 'gateway', u'container_infra_api_version': u'1', 'verbose_level': 3, >>>> 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', >>>> 'auth': {'user_domain_name': 'Default', 'project_name': 'gateway', >>>> 'project_domain_name': 'Default'}, 'default_domain': 'default', >>>> u'container_api_version': u'1', u'image_api_use_tasks': False, >>>> u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', >>>> 'timing': False, 'password': '***', u'application_catalog_api_version': >>>> u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', >>>> 'deferred_help': False, u'identity_api_version': '3', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'status': u'active', 'debug': True, u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> command: project create -> openstackclient.identity.v3.pr >>>> oject.CreateProject >>>> Auth plugin password selected >>>> auth_config_hook(): {'auth_type': 'password', 'beta_command': False, >>>> u'compute_api_version': u'2', 'key': None, u'database_api_version': u'1.0', >>>> 'cacert': None, 'auth_url': 'http://controller:35357/v3', >>>> u'network_api_version': u'2', u'message': u'', u'image_format': u'qcow2', >>>> 'networks': [], u'image_api_version': u'2', 'verify': True, >>>> u'dns_api_version': u'2', u'object_store_api_version': u'1', 'username': >>>> 'gateway', u'container_infra_api_version': u'1', 'verbose_level': 3, >>>> 'region_name': '', 'api_timeout': None, u'baremetal_api_version': u'1', >>>> 'auth': {'user_domain_name': 'Default', 'project_name': 'gateway', >>>> 'project_domain_name': 'Default'}, 'default_domain': 'default', >>>> u'container_api_version': u'1', u'image_api_use_tasks': False, >>>> u'floating_ip_source': u'neutron', u'orchestration_api_version': u'1', >>>> 'timing': False, 'password': '***', u'application_catalog_api_version': >>>> u'1', u'key_manager_api_version': u'v1', u'metering_api_version': u'2', >>>> 'deferred_help': False, u'identity_api_version': '3', >>>> u'volume_api_version': u'2', 'cert': None, u'secgroup_source': u'neutron', >>>> u'status': u'active', 'debug': True, u'interface': None, >>>> u'disable_vendor_agent': {}} >>>> Using auth plugin: password >>>> Using parameters {'username': 'gateway', 'project_name': 'gateway', >>>> 'user_domain_name': 'Default', 'auth_url': 'http://controller:35357/v3', >>>> 'password': '***', 'project_domain_name': 'Default'} >>>> Get auth_ref >>>> REQ: curl -g -i -X GET http://controller:35357/v3 -H "Accept: >>>> application/json" -H "User-Agent: osc-lib/1.3.0 keystoneauth1/2.18.0 >>>> python-requests/2.12.4 CPython/2.7.12" >>>> Starting new HTTP connection (1): controller >>>> http://controller:35357 "GET /v3 HTTP/1.1" 200 250 >>>> RESP: [200] Date: Sun, 12 Mar 2017 07:42:13 GMT Server: Apache/2.4.18 >>>> (Ubuntu) Vary: X-Auth-Token X-Distribution: Ubuntu x-openstack-request-id: >>>> req-a5985b14-797e-4269-88bb-c2a7147742db Content-Length: 250 >>>> Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: >>>> application/json >>>> RESP BODY: {"version": {"status": "stable", "updated": >>>> "2017-02-22T00:00:00Z", "media-types": [{"base": "application/json", >>>> "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.8", >>>> "links": [{"href": "http://controller:35357/v3/";, "rel": "self"}]}} >>>> >>>> GET call to None for http://controller:35357/v3 used request id >>>> req-a5985b14-797e-4269-88bb-c2a7147742db >>>> Making authentication request to http://controller:35357/v3/auth/tokens >>>> http://controller:35357 "POST /v3/auth/tokens HTTP/1.1" 401 114 >>>> Request returned failure status: 401 >>>> The request you have made requires authentication. (HTTP 401) >>>> (Request-ID: req-1ee39bdd-03b8-4ea8-9432-d027f91c131a) >>>> Traceback (most recent call last): >>>> File "/usr/lib/python2.7/dist-packages/cliff/app.py", line 393, in >>>> run_subcommand >>>> self.prepare_to_run_command(cmd) >>>> File "/usr/lib/python2.7/dist-packages/openstackclient/shell.py", >>>> line 198, in prepare_to_run_command >>>> return super(OpenStackShell, self).prepare_to_run_command(cmd) >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/shell.py", line 457, >>>> in prepare_to_run_command >>>> self.client_manager.auth_ref >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/clientmanager.py", >>>> line 215, in auth_ref >>>> self._auth_ref = self.auth.get_auth_ref(self.session) >>>> File >>>> "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", >>>> line 198, in get_auth_ref >>>> return self._plugin.get_auth_ref(session, **kwargs) >>>> File >>>> "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/v3/base.py", >>>> line 167, in get_auth_ref >>>> authenticated=False, log=False, **rkwargs) >>>> File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", >>>> line 766, in post >>>> return self.request(url, 'POST', **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/session.py", line 40, >>>> in request >>>> resp = super(TimingSession, self).request(url, method, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/positional/__init__.py", line >>>> 101, in inner >>>> return wrapped(*args, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", >>>> line 655, in request >>>> raise exceptions.from_response(resp, method, url) >>>> Unauthorized: The request you have made requires authentication. (HTTP >>>> 401) (Request-ID: req-1ee39bdd-03b8-4ea8-9432-d027f91c131a) >>>> clean_up CreateProject: The request you have made requires >>>> authentication. (HTTP 401) (Request-ID: req-1ee39bdd-03b8-4ea8-9432-d0 >>>> 27f91c131a) >>>> Traceback (most recent call last): >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/shell.py", line 135, >>>> in run >>>> ret_val = super(OpenStackShell, self).run(argv) >>>> File "/usr/lib/python2.7/dist-packages/cliff/app.py", line 279, in >>>> run >>>> result = self.run_subcommand(remainder) >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/shell.py", line 180, >>>> in run_subcommand >>>> ret_value = super(OpenStackShell, self).run_subcommand(argv) >>>> File "/usr/lib/python2.7/dist-packages/cliff/app.py", line 393, in >>>> run_subcommand >>>> self.prepare_to_run_command(cmd) >>>> File "/usr/lib/python2.7/dist-packages/openstackclient/shell.py", >>>> line 198, in prepare_to_run_command >>>> return super(OpenStackShell, self).prepare_to_run_command(cmd) >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/shell.py", line 457, >>>> in prepare_to_run_command >>>> self.client_manager.auth_ref >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/clientmanager.py", >>>> line 215, in auth_ref >>>> self._auth_ref = self.auth.get_auth_ref(self.session) >>>> File >>>> "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/generic/base.py", >>>> line 198, in get_auth_ref >>>> return self._plugin.get_auth_ref(session, **kwargs) >>>> File >>>> "/usr/lib/python2.7/dist-packages/keystoneauth1/identity/v3/base.py", >>>> line 167, in get_auth_ref >>>> authenticated=False, log=False, **rkwargs) >>>> File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", >>>> line 766, in post >>>> return self.request(url, 'POST', **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/osc_lib/session.py", line 40, >>>> in request >>>> resp = super(TimingSession, self).request(url, method, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/positional/__init__.py", line >>>> 101, in inner >>>> return wrapped(*args, **kwargs) >>>> File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", >>>> line 655, in request >>>> raise exceptions.from_response(resp, method, url) >>>> Unauthorized: The request you have made requires authentication. (HTTP >>>> 401) (Request-ID: req-1ee39bdd-03b8-4ea8-9432-d027f91c131a) >>>> >>>> END return value: 1 >>>> >>>> >>>> _______________________________________________ >>>> Mailing list: http://lists.openstack.org/cgi >>>> -bin/mailman/listinfo/openstack >>>> Post to : openstack@lists.openstack.org >>>> Unsubscribe : http://lists.openstack.org/cgi >>>> -bin/mailman/listinfo/openstack >>>> >>>> >>> >> >> _______________________________________________ >> Mailing list: http://lists.openstack.org/cgi >> -bin/mailman/listinfo/openstack >> Post to : openstack@lists.openstack.org >> Unsubscribe : http://lists.openstack.org/cgi >> -bin/mailman/listinfo/openstack >> >>
_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
