Re: [Openstack] [quantum] Bridge mapping and private networks, to many GRE tunnel endpoints

2013-03-08 Thread Robert van Leeuwen
>GRE tunnels are created between all the openstack nodes for the private >networks >I'm not sure what decides which IP's should be in the GRE mesh network but >ip's from the Quantum bridge mapped > networks are also added. Problem solved, The local_ip in ovs_quantum_plugin.ini is used. Puppet

[Openstack] Regarding openstack metering

2013-03-08 Thread Aru s
Hi, I am new to openstack and looking for the metering tools. I read about the ceilometer, but not found any proper documentation for this. Please help me understand regarding the available metering tools. Regards, Arumon ___ Mailing list: https://launc

[Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
Hi folks, I get the following error message while running nova image-list. [root@RLD1OPST01 ~]# nova image-list ERROR: Malformed request url (HTTP 400) (Request-ID: req-96acb3fd-3fbe-4f71-ba5f-8d143f1da502) But #glance index works fine. [root@RLD1OPST01 ~]# glance index ID

Re: [Openstack] Error uploading large objects(>1G) on swift

2013-03-08 Thread Shashank Sahni
Hi, Here is a detailed overview of my setup. Two machines(each 4G RAM and one 2TB disk) 1. Configured as proxy + storage 2. Configured as storage I followed the folsom object storage administrator guide and created ring partitions using the following commands. # swift-ring-builder accou

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
Services nova-compute, nova-api, nova-scheduler, nova-network are running fine. Still am facing this issue. I can't proceed from here. Please help On Fri, Mar 8, 2013 at 4:46 PM, Ashutosh Narayan wrote: > Hi folks, > > I get the following error message while running nova image-list. > > [root@RL

Re: [Openstack] nova image-list error

2013-03-08 Thread Sylvain Bauza
Could you please tell us : - your credentials (except password of course) - 'keystone endpoint-list' - 'keystone service-list' It seems like you're requesting a wrong API. Is 'nova list' working btw ? -Sylvain Le 08/03/2013 12:56, Ashutosh Narayan a écrit : Services nova-compute, nova-api,

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
Hi Sylvain, Here is the content of ketstonerc file : [root@RLD1OPST01 ~]# cat keystonerc export OS_USERNAME=admin export OS_PASSWORD=x export OS_TENANT_NAME=demo export OS_AUTH_URL=http://192.168.105.61:35357/v2.0 keystone endpoint-list throws : [root@RLD1OPST01 ~]# keystone endpoint-list +

[Openstack] [Swift] File Upload Problems after Upgrade

2013-03-08 Thread Heiko Krämer
Hi Guys, I've upgraded my swift setup (2 Storage Nodes and 2 Proxy Nodes) from 1.4.6 to 1.7.6. It was upgraded without errors and i've followed this guides: https://lists.launchpad.net/openstack/msg16188.html https://wiki.openstack.org/wiki/ReleaseNotes/Folsom#OpenStack_Object_Storage_.28Swift.29

Re: [Openstack] Regarding openstack metering

2013-03-08 Thread Doug Hellmann
Hi, Arumon, You will find the ceilometer documentation at http://docs.openstack.org/developer/ceilometer/ There are some basic installation and configuration instructions, as well as an architectural overview. Please do not hesitate to ask questions, so we can expand and improve what is documente

Re: [Openstack] nova image-list error

2013-03-08 Thread Sylvain Bauza
https://answers.launchpad.net/nova/+faq/2004 Make sure auth_strategy = keystone is defined in nova.conf -Sylvain Le 08/03/2013 13:21, Ashutosh Narayan a écrit : Hi Sylvain, Here is the content of ketstonerc file : [root@RLD1OPST01 ~]# cat keystonerc export OS_USERNAME=admin export OS_PASSWOR

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
I have auth_strategy = keystone defined in nova.conf. Tenant ID is also set for the same. Any changes I need to do here ? What else should I see ? On Fri, Mar 8, 2013 at 6:30 PM, Sylvain Bauza wrote: > https://answers.launchpad.net/nova/+faq/2004 > > Make sure auth_strategy = keystone is define

Re: [Openstack] grizzly on ubuntu precise: error starting glance-api (duplicate option: log-format)

2013-03-08 Thread Olivier Archer
2013/3/8 Olivier Archer : > 2013/3/7 Kieran Spear : >> I've seen this before. My problem was an out of date >> /etc/glance/glance-api-paste.ini: >> >> [filter:authtoken] >> paste.filter_factory = keystone.middleware.auth_token:filter_factory >> >> Changing it to: >> >> [filter:authtoken] >> paste.f

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
As per point number '2' 2) Check that the tenant ID in the request matches the tenant you are authenticated under mentioned in the link you sent where can I verify this ? On Fri, Mar 8, 2013 at 6:45 PM, Ashutosh Narayan wrote: > I have auth_strategy = keystone defined in nova.conf. > > Tenant ID

[Openstack] grizzly on ubuntu precise: auth error using glance index

2013-03-08 Thread Olivier Archer
Hi, From the documentation here : http://docs.openstack.org/trunk/openstack-compute/install/apt/content/ap_installinggrizzlyubuntuprecise.html I've got problems with 'glance index' : # glance index Authorization Failed: Unable to communicate with identity service: {"error": {"message": "An unexp

Re: [Openstack] grizzly on ubuntu precise: auth error using glance index

2013-03-08 Thread Heiko Krämer
Hi Oliver, think this will solve your problem In /etc/keystone/keystone.conf [signing] token_format = UUID #certfile = /etc/keystone/ssl/certs/signing_cert.pem #keyfile = /etc/keystone/ssl/private/signing_key.pem #ca_certs = /etc/keystone/ssl/certs/ca.pem #key_size = 1024 #valid_days = 3650 #ca_

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
Hi Sylvain, I followed this linkto set Nova Compute service Here is the command I ran earlier to set it : [root@RLD1OPST01 ~]# keystone --token 58e7c511e8e6ad09be56 --endpoint http://192.

Re: [Openstack] grizzly on ubuntu precise: auth error using glance index

2013-03-08 Thread Olivier Archer
Hi Heiko, So i removed /etc/keystone/ssl created by 'keystone-manage pki-setup', because using UUID seem easiest to me. But the probem is still the same for me (Request returned failure status). Greeting, 2013/3/8 Heiko Krämer : > Hi Oliver, > > think this will solve your problem > > In /etc/k

Re: [Openstack] grizzly on ubuntu precise: auth error using glance index

2013-03-08 Thread Olivier Archer
2013/3/8 Olivier Archer : > Hi, > From the documentation here : > http://docs.openstack.org/trunk/openstack-compute/install/apt/content/ap_installinggrizzlyubuntuprecise.html > > I've got problems with 'glance index' : > # glance index > Authorization Failed: Unable to communicate with identity s

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
Hi Sylvain, I was able to resolve this issue. I edited nova.conf file and checked relevant services were up or not. It showed the desired output. Thank you, On Fri, Mar 8, 2013 at 7:30 PM, Ashutosh Narayan wrote: > Hi Sylvain, > > I followed this > link

[Openstack] Need clarification for the official folsom deployment on fedora

2013-03-08 Thread Rain Li
Hi, all, I am following the official guide for installation and deploying openstack folsom on fedora: http://docs.openstack.org/folsom/openstack-compute/install/yum/content/, can someone please clarify my mind? 1, The controller has one NIC with ip 192.168.206.130, this is within the management n

Re: [Openstack] nova image-list error

2013-03-08 Thread Ashutosh Narayan
On Fri, Mar 8, 2013 at 9:27 PM, Sylvain Bauza wrote: > Glad to hear that. > > Do that mean you forgot to restart nova-* ? > Yes, nova-* services after making changes to the configuration files. > > -Sylvain > > Le 08/03/2013 15:54, Ashutosh Narayan a écrit : > > Hi Sylvain, > > I was able to re

[Openstack] quantum-agent-setup: command not found

2013-03-08 Thread Aru s
Hi, I have installed "openstack-quantum-openvswitch" on my compute host. When try to enable the agent i am getting the below error. Am i missing any packages to install? Please suggest. #quantum-agent-setup --plugin openvswitch -bash: quantum-agent-setup: command not found Regards, Arumon __

Re: [Openstack] Grizzly Cinder Volume API vs. Nova os-volumes api

2013-03-08 Thread thingee
Hi James, Cinder v1 API will be supported in the G release. I've also started updating Cinder's release notes in regards to the API. https://wiki.openstack.org/wiki/ReleaseNotes/Grizzly#OpenStack_Block_Storage_.28Cinder.29 Thanks, Mike Perez On Thursday, March 7, 2013, Gu, James wrote: > Hi

[Openstack] nova-manage service list issues

2013-03-08 Thread Ashutosh Narayan
Hi folks, I am following these instructions but the State of *nova-manage service list* shows XXX which means there is some issue in time synchronization with NTP. All the services are running on

[Openstack] Multiple quantum L3 agents in Folsom

2013-03-08 Thread Jānis Ģeņģeris
Hello, I'm trying to run two Quantum L3 agents where each of them handles different external network which is attached to separate router. Depending on which agent was started as last, it clears all interfaces on the router that is handled by first L3 agent. I have the following configs for agent

[Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Sylvain Bauza
Hi, I recently observed a strange behaviour with L3 Quantum routing (Openvswitch setup with Provider Router). A simple curl to an external website is sometimes failing due to packet size : 192.168.10.3 > X.X.X.X: ICMP 192.168.10.3 unreachable - need to frag (mtu 1454), length 556 IP

[Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
Hi All, I have two nodes (test1 and test2) that I am trying to set up in a highly available configuration. During the setup process I tried running "nova-manage service list" on both nodes. It worked fine on test2, but fails on test1 even though I can connect to the database with the mysql clie

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Jay Pipes
On 03/08/2013 12:19 PM, Samuel Winchenbach wrote: > Hi All, > > I have two nodes (test1 and test2) that I am trying to set up in a > highly available configuration. > > During the setup process I tried running "nova-manage service list" on > both nodes. It worked fine on test2, but fails on tes

Re: [Openstack] [Heat] Problem with visit 169.254.169.254 from VM

2013-03-08 Thread Clint Byrum
Excerpts from 蒋闻天's message of 2013-03-06 17:09:57 -0800: > Hi everyone, I have a problem when i use devstack to test heat and quantum. > This is my localrc > > DATABASE_PASSWORD=nova > RABBIT_PASSWORD=nova > SERVICE_TOKEN=nova > SERVICE_PASSWORD=nova > ADMIN_PASSWORD=nova > SCREEN_LOGDIR=/var/log

[Openstack] Keystone V3 Policy Resource Question

2013-03-08 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
Hello, I have been testing the new Policy APIs and looking at the policy table in the Keystone database. When I consider the OpenStack services including Keystone, I find that they all use a policy.json file stored on the file system. So my question is how is this new Keystone policy feature

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Aaron Rosen
Hi Sylvain, This seems very odd to me. The reason this should happen is if your client is sending packets with the DF (don't fragment) bit set in the TCP header of the packets you are sending. I'd confirm that your version of 'curl' is doing this (which it should definitely not do!). What should

Re: [Openstack] grizzly on ubuntu precise: auth error using glance index

2013-03-08 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
What does your keystone.conf file have for the following sections? [signing] #token_format = UUID token_format = PKI certfile = /etc/keystone/ssl/certs/signing_cert.pem keyfile = /etc/keystone/ssl/private/signing_key.pem ca_certs = /etc/keystone/ssl/certs/ca.pemkey_size = 1024 valid_days = 3650 ca

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
Sorry, that must have been a copy and paste error. Here is what I actually ran: http://paste2.org/p/3084996 On Fri, Mar 8, 2013 at 12:40 PM, Jay Pipes wrote: > On 03/08/2013 12:19 PM, Samuel Winchenbach wrote: > > Hi All, > > > > I have two nodes (test1 and test2) that I am trying to set up i

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Jay Pipes
What does this show? mysql -hmysql-ha -unova -p -e"SELECT User, Host, Password FROM mysql.user" -jay On 03/08/2013 01:46 PM, Samuel Winchenbach wrote: > Sorry, that must have been a copy and paste error. Here is what I > actually ran: > > http://paste2.org/p/3084996 > > > On Fri, Mar 8, 2013

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
root@test1:/var/log# mysql -hmysql-ha -unova -p -e"SELECT User, Host, Password FROM mysql.user;" ERROR 1142 (42000) at line 1: SELECT command denied to user 'nova'@'test1' for table 'user' On Fri, Mar 8, 2013 at 2:06 PM, Jay Pipes wrote: > What does this show? >

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
Here are my grants. I don't know if this helps, but I did verify that the password was identical for each grant: http://paste2.org/p/3085361 On Fri, Mar 8, 2013 at 2:17 PM, Samuel Winchenbach wrote: > root@test1:/var/log# mysql -hmysql-ha -unova -p > -e"SELECT

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Rick Jones
On 03/08/2013 09:55 AM, Aaron Rosen wrote: Hi Sylvain, This seems very odd to me. The reason this should happen is if your client is sending packets with the DF (don't fragment) bit set in the TCP header of the packets you are sending. I'd confirm that your version of 'curl' is doing this (whi

[Openstack] Failed to log into dashboard

2013-03-08 Thread Mohammed Amine SAYA
Hi all, I am trying to install openstack and I can't log into dashboard. In fact, to be accurate, this problem surfaced after I updated openstack packages for debian from http://33.apt-proxy.gplhost.com/debian. It was working before. I don't what went wrong with this upgrade. nova, keystone, gla

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Jay Pipes
Please paste the results of SELECT User, Host, Password FROM mysql.user when running as root... Thanks! -jay On 03/08/2013 02:25 PM, Samuel Winchenbach wrote: > Here are my grants. I don't know if this helps, but I did verify that > the password was identical for each grant: http://paste2.org/p

Re: [Openstack] [Swift] File Upload Problems after Upgrade

2013-03-08 Thread Samuel Merritt
On 3/8/13 4:31 AM, Heiko Krämer wrote: Hi Guys, I've upgraded my swift setup (2 Storage Nodes and 2 Proxy Nodes) from 1.4.6 to 1.7.6. It was upgraded without errors and i've followed this guides: https://lists.launchpad.net/openstack/msg16188.html https://wiki.openstack.org/wiki/ReleaseNotes/Fo

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Aaron Rosen
Hi Rick, You are right. I just ran curl to test for myself and it does set the DF bit. Why is this? Any ideas why it specifies that the packet cannot be fragmented? Thanks, Aaron On Fri, Mar 8, 2013 at 11:27 AM, Rick Jones wrote: > On 03/08/2013 09:55 AM, Aaron Rosen wrote: >> >> Hi Sylvain, >

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Brad Knowles
On Mar 8, 2013, at 1:49 PM, Aaron Rosen wrote: > You are right. I just ran curl to test for myself and it does set the > DF bit. Why is this? Any ideas why it specifies that the packet cannot > be fragmented? http://lmgtfy.com/?q=don%27t+fragment+bit+path+mtu -- Brad Knowles Senior Consultant

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Brad Knowles
On Mar 8, 2013, at 1:54 PM, Brad Knowles wrote: > On Mar 8, 2013, at 1:49 PM, Aaron Rosen wrote: > >> You are right. I just ran curl to test for myself and it does set the >> DF bit. Why is this? Any ideas why it specifies that the packet cannot >> be fragmented? > > http://lmgtfy.com/?q=don%

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Rick Jones
On 03/08/2013 11:49 AM, Aaron Rosen wrote: Hi Rick, You are right. I just ran curl to test for myself and it does set the DF bit. Why is this? Any ideas why it specifies that the packet cannot be fragmented? Because most, if not virtually all TCP stacks going back to the mid 1990s (RFC 1191 i

Re: [Openstack] [QUANTUM] (Bug ?) L3 routing not correctly fragmenting packets ?

2013-03-08 Thread Aaron Rosen
Thanks Rick that makes sense. I've never run into this myself. I just assumed that a host would by default just set packets at it's MTU size and the network would handle the fragmentation for you. Good to know. Aaron On Fri, Mar 8, 2013 at 11:56 AM, Rick Jones wrote: > On 03/08/2013 11:49 AM, A

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
oops. guess I need to change the root password now :P On Fri, Mar 8, 2013 at 3:09 PM, Samuel Winchenbach wrote: > > http://paste2.org/p/3085807 > > > On Fri, Mar 8, 2013 at 2:46 PM, Jay Pipes wrote: > >> Please paste the results of SELECT User, Host, Password FROM mysql.user >> when running as

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
http://paste2.org/p/3085807 On Fri, Mar 8, 2013 at 2:46 PM, Jay Pipes wrote: > Please paste the results of SELECT User, Host, Password FROM mysql.user > when running as root... > > Thanks! > -jay > > On 03/08/2013 02:25 PM, Samuel Winchenbach wrote: > > Here are my grants. I don't know if this

Re: [Openstack] Rebooted, now can't ping my guest

2013-03-08 Thread The King in Yellow
A little more information, or a completely different problem...I just realized my network node can't ping its public gateway. (Instead of 7.7.7.0/24, I am using 10.42.36.0/23. My gateway is .1 (and has non-redundant IP of .10), and my Network Node IP is .130). This did work at one time. root@os

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Jay Pipes
I'm stumped :( Looks like everything is set up correctly to me. What is interested is that your nova user access works from test2, but there is no nova@test2 user in the mysql.user table. What about doing a DROP USER nova@test1; FLUSH PRIVILEGES; and then see if that fixes things... since the nova@

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Samuel Winchenbach
I dropped those users and no change. I also set up general logging in mysql but it really doesn't provide any additional information. Any idea for a next step I could take? I am almost at the point of taking a tcpdump and trying to recreate the salted password. :/ Thanks for the help Sam

Re: [Openstack] Incredibly odd mysql permission error

2013-03-08 Thread Jay Pipes
Sorry, I really can't think of anything :( On 03/08/2013 03:52 PM, Samuel Winchenbach wrote: > I dropped those users and no change. > > I also set up general logging in mysql but it really doesn't provide any > additional information. Any idea for a next step I could take? > > I am almost at th

[Openstack] PTL Elections are Open!

2013-03-08 Thread Monty Taylor
If you are an ATC for a keystone, nova or ceilometer, you should have now received in the mail your link to vote in the PTL election for that project be sure to vote! The elections end March 14. For the other projects, there was only one person standing for election, so congratulations guys, you w

Re: [Openstack] Keystone V3 Policy Resource Question

2013-03-08 Thread Dolph Mathews
In designing the API, the goal was to simply store policy.json files (or any future iterations of it) in any format as a blob in a centralized location (keystone) that could be retrieved by remote services. While discussing the design, it spawned a lot of great questions about how to map policies t

[Openstack] OpenStack Community Weekly Newsletter (Mar 1 -8)

2013-03-08 Thread Stefano Maffulli
Highlights of the week We Wrote an OpenStack Operations Guide in 5 Days! And here it is…the OpenStack Operations Guide. You can read it in EPUB, MOBI, PDF, or print. The electronic formats are free to download so click away. The print version costs $29.90 an

[Openstack] Failed to log into dashboard web interface

2013-03-08 Thread Mohammed Amine SAYA
After many hours investigating sign in error in horizon, I found the last line responsible for this issue in /var/log/apache2/error.log : [Sat Mar 09 01:12:18 2013] [error] File "/usr/lib/python2.7/dist-packages/novaclient/client.py", line 195, in request [Sat Mar 09 01:12:18 2013] [error] r