HEAT authentication error

Solution In Progress - Updated -

Issue

  • Heat doesn't work - Authorization error while all other services work OK
  • OSP 7.3 deplored using OSP-d 7.3 using ssl
  • Glance, nova, keystone, etc . seem to be working fine
[root@ tempest]# heat stack-list
    ERROR: Authentication required

    [root@ tmp]# heat stack-create --template-file test-template.yaml test01
    ERROR: Authentication required

    [root@ tmp]# heat -d stack-create --template-file test-template.yaml test01
    DEBUG (session) REQ: curl -g -i -X GET https://ost-ah1.service.dsn.inet:13000/v2.0 -H "Accept: application/json" -H "User-Agent: python-keystoneclient"
    INFO (connectionpool) Starting new HTTPS connection (1): ost-ah1.service.dsn.inet
    ..
    DEBUG (v2) Making authentication request to https://ost-ah1.service.dsn.inet:13000/v2.0/tokens
    DEBUG (connectionpool) "POST /v2.0/tokens HTTP/1.1" 200 4235
    DEBUG (connectionpool) "POST /v1/21004ef23fd94e2d9cc5010e81b65184/stacks HTTP/1.1" 401 23
    DEBUG (session) RESP:
    Traceback (most recent call last):
      File "/bin/heat", line 10, in <module>
        sys.exit(main())
    ..
      File "/usr/lib/python2.7/site-packages/heatclient/common/http.py", line 363, in _http_request
        raise exc.from_response(resp)
    heatclient.exc.HTTPUnauthorized: ERROR: Authentication required
  • Heat logs from the controller:
    2016-02-29 13:54:09.138 12732 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
    2016-02-29 13:54:10.212 12732 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:06.331 9230 DEBUG heat-api [-] ******************************************************************************** log_opt_values /usr/lib/python2.7/site-packages/oslo_config/cfg.py:2201
2016-03-01 16:50:06.332 9230 INFO heat.api [-] Starting Heat ReST API on 172.0.0.13:8004
2016-03-01 16:50:06.334 9230 INFO heat.common.wsgi [-] Starting single process server
2016-03-01 16:50:06.335 9230 INFO eventlet.wsgi.server [-] (9230) wsgi starting up on http://172.0.0.13:8004/
2016-03-01 16:50:48.258 9230 INFO eventlet.wsgi.server [-] (9230) accepted ('172.0.0.13', 54553)
2016-03-01 16:50:48.261 9230 DEBUG heat.api.middleware.version_negotiation [-] Processing request: GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks Accept: application/json process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:50
2016-03-01 16:50:48.262 9230 DEBUG heat.api.middleware.version_negotiation [-] Matched versioned URI. Version: 1.0 process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:65
2016-03-01 16:50:48.264 9230 DEBUG keystoneclient.session [-] REQ: curl -g -i -X GET http://172.0.0.16:35357 -H "Accept: application/json" -H "User-Agent: python-keystoneclient" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:195
2016-03-01 16:50:48.298 9230 DEBUG keystoneclient.session [-] RESP: [300] date: Tue, 01 Mar 2016 15:50:48 GMT vary: X-Auth-Token content-length: 595 content-type: application/json connection: keep-alive 
RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-03-30T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.4", "links": [{"href": "http://172.0.0.16:35357/v3/", "rel": "self"}]}, {"status": "stable", "updated": "2014-04-17T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v2.0+json"}], "id": "v2.0", "links": [{"href": "http://172.0.0.16:35357/v2.0/", "rel": "self"}, {"href": "http://docs.openstack.org/", "type": "text/html", "rel": "describedby"}]}]}}
 _http_log_response /usr/lib/python2.7/site-packages/keystoneclient/session.py:224
2016-03-01 16:50:48.300 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.403 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.405 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.405 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.495 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.497 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.498 9230 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
2016-03-01 16:50:48.500 9230 INFO eventlet.wsgi.server [-] 172.0.0.13 - - [01/Mar/2016 16:50:48] "GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks HTTP/1.1" 401 264 0.240091
2016-03-01 16:50:48.658 9230 DEBUG heat.api.middleware.version_negotiation [-] Processing request: GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks Accept: application/json process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:50
2016-03-01 16:50:48.659 9230 DEBUG heat.api.middleware.version_negotiation [-] Matched versioned URI. Version: 1.0 process_request /usr/lib/python2.7/site-packages/heat/api/middleware/version_negotiation.py:65
2016-03-01 16:50:48.660 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.754 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.756 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.757 9230 DEBUG keystoneclient.auth.identity.v2 [-] Making authentication request to http://172.0.0.16:35357/v2.0/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v2.py:76
2016-03-01 16:50:48.846 9230 DEBUG keystoneclient.session [-] Request returned failure status: 401 request /usr/lib/python2.7/site-packages/keystoneclient/session.py:396
2016-03-01 16:50:48.847 9230 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2016-03-01 16:50:48.849 9230 WARNING keystonemiddleware.auth_token [-] Authorization failed for token
2016-03-01 16:50:48.851 9230 INFO eventlet.wsgi.server [-] 172.0.0.13 - - [01/Mar/2016 16:50:48] "GET /v1/ee042d3c99e4445885595cbe75d185b2/stacks HTTP/1.1" 401 264 0.193575
2016-03-01 16:52:00.948 9230 INFO eventlet.wsgi.server [-] (9230) accepted ('172.0.0.13', 56520)

Environment

  • Red Hat OpenStack 7.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content