openstack nova service-list认证问题

宿主机系统:centos7openstack版本:kilo
问题:
在安装openstack过程中,本来第一次装好后,所有组件均能正常使用。但是重启控制节点后,除keystone,glance组件以外的其他组件均出现认证错误。详细信息如下【以nova service-list为例】:
[root@node5 ~]# nova --debug service-list
DEBUG (session:195) REQ: curl -g -i -X GET http://node5:35357/v3 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
INFO (connectionpool:203) Starting new HTTP connection (1): node5
DEBUG (connectionpool:383) "GET /v3 HTTP/1.1" 200 245
DEBUG (session:224) RESP: [200] content-length: 245 vary: X-Auth-Token keep-alive: timeout=5, max=100 server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 connection: Keep-Alive date: Tue, 11 Aug 2015 03:11:28 GMT content-type: application/json x-openstack-request-id: req-de609777-0331-4bb0-998d-4431e3a097d7 
RESP BODY: {"version": {"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://node5:35357/v3/", "rel": "self"}]}}

DEBUG (base:171) Making authentication request to http://node5:35357/v3/auth/tokens
DEBUG (connectionpool:383) "POST /v3/auth/tokens HTTP/1.1" 201 5740
DEBUG (iso8601:184) Parsed 2015-08-11T04:11:28.435147Z into {'tz_sign': None, 'second_fraction': u'435147', 'hour': u'04', 'daydash': u'11', 'tz_hour': None, 'month': None, 'timezone': u'Z', 'second': u'28', 'tz_minute': None, 'year': u'2015', 'separator': u'T', 'monthdash': u'08', 'day': None, 'minute': u'11'} with default timezone 
DEBUG (iso8601:140) Got u'2015' for 'year' with default None
DEBUG (iso8601:140) Got u'08' for 'monthdash' with default 1
DEBUG (iso8601:140) Got 8 for 'month' with default 8
DEBUG (iso8601:140) Got u'11' for 'daydash' with default 1
DEBUG (iso8601:140) Got 11 for 'day' with default 11
DEBUG (iso8601:140) Got u'04' for 'hour' with default None
DEBUG (iso8601:140) Got u'11' for 'minute' with default None
DEBUG (iso8601:140) Got u'28' for 'second' with default None
DEBUG (session:195) REQ: curl -g -i -X GET http://node5:8774/v2/943cb4c0ae4d48158e9c1ef9d67f97b3/os-services -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}de5538fadcfb8c6deb6f3fab2fd00a62efef5036"
INFO (connectionpool:203) Starting new HTTP connection (1): node5
DEBUG (connectionpool:383) "GET /v2/943cb4c0ae4d48158e9c1ef9d67f97b3/os-services HTTP/1.1" 401 23
DEBUG (session:224) RESP:
DEBUG (base:171) Making authentication request to http://node5:35357/v3/auth/tokens
DEBUG (connectionpool:383) "POST /v3/auth/tokens HTTP/1.1" 201 5740
DEBUG (connectionpool:383) "GET /v2/943cb4c0ae4d48158e9c1ef9d67f97b3/os-services HTTP/1.1" 401 23
DEBUG (session:224) RESP:
DEBUG (shell:914) Unauthorized (HTTP 401) (Request-ID: req-faf78ed3-ab2d-4493-b42b-8c35f0ed68a7)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/novaclient/shell.py", line 911, in main
    OpenStackComputeShell().main(argv)
  File "/usr/lib/python2.7/site-packages/novaclient/shell.py", line 838, in main
    args.func(self.cs, args)
  File "/usr/lib/python2.7/site-packages/novaclient/v2/shell.py", line 3442, in do_service_list
    result = cs.services.list(host=args.host, binary=args.binary)
  File "/usr/lib/python2.7/site-packages/novaclient/v2/services.py", line 49, in list
    return self._list(url, "services")
  File "/usr/lib/python2.7/site-packages/novaclient/base.py", line 64, in _list
    _resp, body = self.api.client.get(url)
  File "/usr/lib/python2.7/site-packages/keystoneclient/adapter.py", line 170, in get
    return self.request(url, 'GET', **kwargs)
  File "/usr/lib/python2.7/site-packages/novaclient/client.py", line 96, in request
    raise exceptions.from_response(resp, body, url, method)
Unauthorized: Unauthorized (HTTP 401) (Request-ID: req-faf78ed3-ab2d-4493-b42b-8c35f0ed68a7)
ERROR (Unauthorized): Unauthorized (HTTP 401) (Request-ID: req-faf78ed3-ab2d-4493-b42b-8c35f0ed68a7)


admin-openrc.sh
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=admin
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=tairancloud
export OS_AUTH_URL=http://node5:35357/v3
export OS_IMAGE_API_VERSION=2
export OS_VOLUME_API_VERSION=2


/etc/nova/nova.conf 认证片段
[keystone_authtoken]

auth_uri=http://node5:5000
auth_url=http://node5:35357
auth_plugin=password
project_domain_id=default
user_domain_id=default
project_name=service
username=nova
password=tairancloud


时区和token信息如下
[root@node5 ~]# openstack token issue
+------------+----------------------------------+
| Field      | Value                            |
+------------+----------------------------------+
| expires    | 2015-08-11T04:14:51.783318Z      |
| id         | e80f3205193742feac4627ab46f1bce6 |
| project_id | 943cb4c0ae4d48158e9c1ef9d67f97b3 |
| user_id    | b7bb1bdcafc64bf1a28f3da40a68fe66 |
+------------+----------------------------------+
[root@node5 ~]# timedatectl 
      Local time: Tue 2015-08-11 11:14:55 CST
  Universal time: Tue 2015-08-11 03:14:55 UTC
        RTC time: Tue 2015-08-11 03:14:55
        Timezone: Asia/Shanghai (CST, +0800)
     NTP enabled: yes
NTP synchronized: yes
 RTC in local TZ: no
      DST active: n/a
参与5

1同行回答

evilswordevilsword系统架构师艺鉴通
你的keystone和glance是不是和mysql安装在一台机器上,如果是可以到mysql中检查下你的数据库中除了这两个库之外的数据库的授权,就是访问地址,我以前遇到过我做了授权还连不上是因为我在做授权的时候有一条写错了 ,mysql会从头往后读没读到正确的那条。...显示全部

你的keystone和glance是不是和mysql安装在一台机器上,如果是可以到mysql中检查下你的数据库中除了这两个库之外的数据库的授权,就是访问地址,我以前遇到过我做了授权还连不上是因为我在做授权的时候有一条写错了 ,mysql会从头往后读没读到正确的那条。

收起
互联网服务 · 2016-04-15
浏览3041

提问者

xwisen
软件架构设计师none

问题来自

问题状态

  • 发布时间:2015-08-11
  • 关注会员:3 人
  • 问题浏览:6765
  • 最近回答:2016-04-15
  • X社区推广