HEAT authentication error

Solution In Progress - Updated -

Issue

  • Heat doesn't work - Authorization error while all other services work OK
  • OSP 7.3 deplored using OSP-d 7.3 using ssl
  • Glance, nova, keystone, etc . seem to be working fine
[root@ tempest]# heat stack-list
    ERROR: Authentication required

    [root@ tmp]# heat stack-create --template-file test-template.yaml test01
    ERROR: Authentication required

    [root@ tmp]# heat -d stack-create --template-file test-template.yaml test01
    DEBUG (session) REQ: curl -g -i -X GET https://ost-ah1.service.dsn.inet:13000/v2.0 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
    INFO (connectionpool) Starting new HTTPS connection (1): ost-ah1.service.dsn.inet
    ..
    DEBUG (v2) Making authentication request to https://ost-ah1.service.dsn.inet:13000/v2.0/tokens
    DEBUG (connectionpool) "POST /v2.0/tokens HTTP/1.1" 200 4235
    DEBUG (connectionpool) "POST /v1/21004ef23fd94e2d9cc5010e81b65184/stacks HTTP/1.1" 401 23
    DEBUG (session) RESP:
    Traceback (most recent call last):
      File "/bin/heat", line 10, in <module>
        sys.exit(main())
    ..
      File "/usr/lib/python2.7/site-packages/heatclient/common/http.py", line 363, in _http_request
        raise exc.from_response(resp)
    heatclient.exc.HTTPUnauthorized: ERROR: Authentication required
  • Heat logs from the controller:
    2016-02-29 13:54:09.138 12732 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
    2016-02-29 13:54:10.212 12732 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:06.331 9230 DEBUG heat-api [-] ******************************************************************************** log_opt_values /usr/lib/python2.7/site-packages/oslo_config/cfg.py:2201
2016-03-01 16:50:06.332 9230 INFO heat.api [-] Starting Heat ReST API on 172.0.0.13:8004
2016-03-01 16:50:06.334 9230 INFO heat.common.wsgi [-] Starting single process server
2016-03-01 16:50:06.335 9230 INFO eventlet.wsgi.server [-] (9230) wsgi starting up on http://172.0.0.13:8004/
2016-03-01 16:50:48.258 9230 INFO eventlet.wsgi.server [-] (9230) accepted ('172.0.0.13', 54553)
2016-03-01 16:50:48.261 9230 DEBUG heat.api.middleware.version_negotiation [-] Processing request: GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks Accept: application/json process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:50
2016-03-01 16:50:48.262 9230 DEBUG heat.api.middleware.version_negotiation [-] Matched versioned URI. Version: 1.0 process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:65
2016-03-01 16:50:48.264 9230 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://172.0.0.16:35357 -H "Accept: application/json" -H "User-Agent: python-keystoneclient" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:195
2016-03-01 16:50:48.298 9230 DEBUG keystoneclient.session [-] RESP: [300] date: Tue, 01 Mar 2016 15:50:48 GMT vary: X-Auth-Token content-length: 595 content-type: application/json connection: keep-alive 
RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://172.0.0.16:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://172.0.0.16:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
 _http_log_response /usr/lib/python2.7/site-packages/keystoneclient/session.py:224
2016-03-01 16:50:48.300 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.403 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.405 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.405 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.495 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.497 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.498 9230 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
2016-03-01 16:50:48.500 9230 INFO eventlet.wsgi.server [-] 172.0.0.13 - - [01/Mar/2016 16:50:48] "GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks HTTP/1.1" 401 264 0.240091
2016-03-01 16:50:48.658 9230 DEBUG heat.api.middleware.version_negotiation [-] Processing request: GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks Accept: application/json process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:50
2016-03-01 16:50:48.659 9230 DEBUG heat.api.middleware.version_negotiation [-] Matched versioned URI. Version: 1.0 process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:65
2016-03-01 16:50:48.660 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.754 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.756 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.757 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.846 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.847 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.849 9230 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
2016-03-01 16:50:48.851 9230 INFO eventlet.wsgi.server [-] 172.0.0.13 - - [01/Mar/2016 16:50:48] "GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks HTTP/1.1" 401 264 0.193575
2016-03-01 16:52:00.948 9230 INFO eventlet.wsgi.server [-] (9230) accepted ('172.0.0.13', 56520)

Environment

  • Red Hat OpenStack 7.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In