Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized

I was trying to deploy openstack swift, all went well but verification failed and suck a lot of time after trying many things. Here are some tips in case one faces similar problem.

 Problem : Swift proxy is not authenticating user "demo"with keystone.

Reason 1: Account, container, object rings run on separate ports on controller. Many a time during doing redundant job of copyin and pasting stuff, one may forget to change the ports.

Reason 2: You need to restart the Apache server on which swift proxy runs. This apache server is same which exposes keystone authentication api's. Somehow new user is not identified by and you need to restart it on controller node.

# service apache2 restart



DEBUG:keystoneclient.auth.identity.v3.base:Making authentication request to http://controller:5000/v3/auth/tokens
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): controller
DEBUG:requests.packages.urllib3.connectionpool:"POST /v3/auth/tokens HTTP/1.1" 201 4738
DEBUG:iso8601.iso8601:Parsed 2016-03-07T17:22:22.226032Z into {'tz_sign': None, 'second_fraction': u'226032', 'hour': u'17', 'daydash': u'07', 'tz_hour': None, 'month': None, 'timezone': u'Z', 'second': u'22', 'tz_minute': None, 'year': u'2016', 'separator': u'T', 'monthdash': u'03', 'day': None, 'minute': u'22'} with default timezone <iso8601.iso8601.Utc object at 0x7ff3eb0ffb90>
DEBUG:iso8601.iso8601:Got u'2016' for 'year' with default None
DEBUG:iso8601.iso8601:Got u'03' for 'monthdash' with default 1
DEBUG:iso8601.iso8601:Got 3 for 'month' with default 3
DEBUG:iso8601.iso8601:Got u'07' for 'daydash' with default 1
DEBUG:iso8601.iso8601:Got 7 for 'day' with default 7
DEBUG:iso8601.iso8601:Got u'17' for 'hour' with default None
DEBUG:iso8601.iso8601:Got u'22' for 'minute' with default None
DEBUG:iso8601.iso8601:Got u'22' for 'second' with default None
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): controller
DEBUG:requests.packages.urllib3.connectionpool:"HEAD /v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 HTTP/1.1" 401 0
INFO:swiftclient:REQ: curl -i http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 -I -H "X-Auth-Token: 732f39d4581c470a9606fad40774fb98"
INFO:swiftclient:RESP STATUS: 401 Unauthorized
INFO:swiftclient:RESP HEADERS: [('Date', 'Mon, 07 Mar 2016 16:22:22 GMT'), ('Content-Length', '0'), ('Content-Type', 'text/html; charset=UTF-8'), ('Www-Authenticate', 'Swift realm="AUTH_f5d59946d78a4085ac5c02003c3dcf03"'), ('X-Trans-Id', 'txda0ea612e1f34e27b639c-0056ddaabe')]
DEBUG:keystoneclient.auth.identity.v3.base:Making authentication request to http://controller:5000/v3/auth/tokens
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): controller
DEBUG:requests.packages.urllib3.connectionpool:"POST /v3/auth/tokens HTTP/1.1" 201 4738
DEBUG:iso8601.iso8601:Parsed 2016-03-07T17:22:23.327847Z into {'tz_sign': None, 'second_fraction': u'327847', 'hour': u'17', 'daydash': u'07', 'tz_hour': None, 'month': None, 'timezone': u'Z', 'second': u'23', 'tz_minute': None, 'year': u'2016', 'separator': u'T', 'monthdash': u'03', 'day': None, 'minute': u'22'} with default timezone <iso8601.iso8601.Utc object at 0x7ff3eb0ffb90>
DEBUG:iso8601.iso8601:Got u'2016' for 'year' with default None
DEBUG:iso8601.iso8601:Got u'03' for 'monthdash' with default 1
DEBUG:iso8601.iso8601:Got 3 for 'month' with default 3
DEBUG:iso8601.iso8601:Got u'07' for 'daydash' with default 1
DEBUG:iso8601.iso8601:Got 7 for 'day' with default 7
DEBUG:iso8601.iso8601:Got u'17' for 'hour' with default None
DEBUG:iso8601.iso8601:Got u'22' for 'minute' with default None
DEBUG:iso8601.iso8601:Got u'23' for 'second' with default None
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): controller
DEBUG:requests.packages.urllib3.connectionpool:"HEAD /v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 HTTP/1.1" 401 0
INFO:swiftclient:REQ: curl -i http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 -I -H "X-Auth-Token: 7c2fcb90d8b848a394d43c00c81a631b"
INFO:swiftclient:RESP STATUS: 401 Unauthorized
INFO:swiftclient:RESP HEADERS: [('Date', 'Mon, 07 Mar 2016 16:22:23 GMT'), ('Content-Length', '0'), ('Content-Type', 'text/html; charset=UTF-8'), ('Www-Authenticate', 'Swift realm="AUTH_f5d59946d78a4085ac5c02003c3dcf03"'), ('X-Trans-Id', 'txd4c9cf5a0312493390162-0056ddaabf')]
ERROR:swiftclient:Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 1390, in _retry
    service_token=self.service_token, **kwargs)
  File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 591, in head_account
    http_response_content=body)
ClientException: Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized
ERROR:swiftclient.service:Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/swiftclient/service.py", line 435, in stat
    items, headers = get_future_result(stats_future)
  File "/usr/lib/python2.7/dist-packages/swiftclient/service.py", line 204, in get_future_result
    res = f.result(timeout=timeout)
  File "/usr/lib/python2.7/dist-packages/concurrent/futures/_base.py", line 403, in result
    return self.__get_result()
  File "/usr/lib/python2.7/dist-packages/concurrent/futures/thread.py", line 55, in run
    result = self.fn(*self.args, **self.kwargs)
  File "/usr/lib/python2.7/dist-packages/swiftclient/multithreading.py", line 188, in conn_fn
    return fn(*conn_args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/swiftclient/command_helpers.py", line 23, in stat_account
    headers = conn.head_account()
  File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 1430, in head_account
    return self._retry(None, head_account)
  File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 1390, in _retry
    service_token=self.service_token, **kwargs)
  File "/usr/lib/python2.7/dist-packages/swiftclient/client.py", line 591, in head_account
    http_response_content=body)
ClientException: Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized
Account HEAD failed: http://controller:8080/v1/AUTH_f5d59946d78a4085ac5c02003c3dcf03 401 Unauthorized

Comments

Post a Comment

Popular posts from this blog

Caused by: java.sql.SQLTimeoutException: ORA-01013: user requested cancel of current operation

Many times we encounter this error and think that there might be some JPA issue or network issue. However, the error is pretty explicit in its nature, but still not clear to ring the bell very first time. As the error says there is a timeout, and since Oracle is saying, we shall accept it. Another clue is "user requested cancel of current operation". This means that the connection was closed by the application server not the database server, hence it can be safely concluded that application has configured timeouts on transactions at its end. However, if you feel that this transaction should have been concluded within the application server limits, your doubt might be true. This problem can arise in case there is a lock on the record being updated by JPA or lock on the table in which JPA is attempting to insert. The lock is most probably being held by some other application, and since application server configuration is on aggressive SLA, the transaction is waiting its
Read more

HashiCorp Vault Integration with Ansible Etower using approle

Image
HashiCorp Vault is  a secrets management tool specifically designed to control access to sensitive credentials in a low-trust environment . It can be used to store sensitive values and at the same time dynamically generate access for specific services/applications on lease.  Integrating the vault with Ansible Etower provides robust and secure automation. Following is the step-by-step guide for the integration. Enable key-value secret engine in Hashi Vault (also known as "kv" engine). Let's call the engine, the "kv" engine. Create a secret inside "kv". A secret can be a collection of key-value pairs or a JSON for nested structure.            Lets assume that secrets are stored as JSON  in the format   { "my_app":{ "service_account_name": "some_service", "service_account_password": "some_password" } } Create a secret policy defining what can be done with the above-defined secret. Create an
Read more

utility to extract date from text with java

Image
A date pattern recognition algorithm to not only identify date pattern but also fetches probable date in Java date format. This algorithm is very fast and lightweight. The processing time is linear and all dates are identified in a single pass. Algorithm resolves date using tree traverse mechanism. Tree data structures are custom created to build supported date, time and month patterns. Following Trees are used (Note: ^ sign denotes complete pattern) DATE PATTERN TREE Month Pattern Tree (Jan and January both are valid, identified using ^ sign) Time pattern (Identified as suffix to Date, $ sign indicates SPACE character) Tree structures are used in the following algorithm.  Date Part Identification algorithm flowchart Time part identification algorithm flowchart These flow charts are self-explanatory in most part. --> sign is used to denote next match in respective tree structures. The algorithm also acknowledges multipl
Read more