RadosGW is successfully started. But it doesn't work throw S3 protocol (there is no authorization via Keystone).
EC2 key in Keystone, I added:
root@fuel-controller-01:~# keystone ec2-credentials-list --user-id 4301a6f4cfa342d3825aa18b1c3e3e0b
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+--------+----------------------------------+----------------------------------+
| tenant | access | secret |
+--------+----------------------------------+----------------------------------+
| admin | de2188f43f354760961d4ee18b728867 | 3f3bf18f50394ee9868f00f250ea0382 |
+--------+----------------------------------+----------------------------------+
Here is a sample log of request to RGW via SWIFT API:
2013-07-03 03:20:36.182852 7f24b7d04780 20 enqueued request req=0x15171f0
2013-07-03 03:20:36.182866 7f24b7d04780 20 RGWWQ:
2013-07-03 03:20:36.182867 7f24b7d04780 20 req: 0x15171f0
2013-07-03 03:20:36.182869 7f24b7d04780 10 allocated request req=0x152e800
2013-07-03 03:20:36.182930 7f246c7d0700 20 dequeued request req=0x15171f0
2013-07-03 03:20:36.182933 7f246c7d0700 20 RGWWQ: empty
2013-07-03 03:20:36.182936 7f246c7d0700 1 ====== starting new request req=0x15171f0 =====
2013-07-03 03:20:36.182962 7f246c7d0700 2 req 17:0.000026::::initializing
2013-07-03 03:20:36.198916 7f246c7d0700 10 ver=v1 first= req=
2013-07-03 03:20:36.198929 7f246c7d0700 10 s->object=<NULL> s->bucket=<NULL>
2013-07-03 03:20:36.198933 7f246c7d0700 20 FCGI_ROLE=RESPONDER
2013-07-03 03:20:36.198934 7f246c7d0700 20 SCRIPT_URL=/swift/v1
2013-07-03 03:20:36.198935 7f246c7d0700 20 SCRIPT_URI=http://192.168.122.127:8080/swift/v1
2013-07-03 03:20:36.198936 7f246c7d0700 20 HTTP_AUTHORIZATION=
2013-07-03 03:20:36.198937 7f246c7d0700 20 HTTP_HOST=192.168.122.127:8080
2013-07-03 03:20:36.198937 7f246c7d0700 20 HTTP_ACCEPT_ENCODING=identity
2013-07-03 03:20:36.198938 7f246c7d0700 20 HTTP_X_AUTH_TOKEN=1e704f19139947258179e147669e7d7c
2013-07-03 03:20:36.198938 7f246c7d0700 20 PATH=/usr/local/bin:/usr/bin:/bin
2013-07-03 03:20:36.198939 7f246c7d0700 20 SERVER_SIGNATURE=
2013-07-03 03:20:36.198939 7f246c7d0700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu)
2013-07-03 03:20:36.198940 7f246c7d0700 20 SERVER_NAME=192.168.122.127
2013-07-03 03:20:36.198941 7f246c7d0700 20 SERVER_ADDR=192.168.122.127
2013-07-03 03:20:36.198941 7f246c7d0700 20 SERVER_PORT=8080
2013-07-03 03:20:36.198942 7f246c7d0700 20 REMOTE_ADDR=192.168.122.127
2013-07-03 03:20:36.198943 7f246c7d0700 20 DOCUMENT_ROOT=/var/www
2013-07-03 03:20:36.198943 7f246c7d0700 20 SERVER_ADMIN=[no address given]
2013-07-03 03:20:36.198944 7f246c7d0700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi
2013-07-03 03:20:36.198944 7f246c7d0700 20 REMOTE_PORT=34956
2013-07-03 03:20:36.198945 7f246c7d0700 20 GATEWAY_INTERFACE=CGI/1.1
2013-07-03 03:20:36.198945 7f246c7d0700 20 SERVER_PROTOCOL=HTTP/1.1
2013-07-03 03:20:36.198946 7f246c7d0700 20 REQUEST_METHOD=HEAD
2013-07-03 03:20:36.198946 7f246c7d0700 20 QUERY_STRING=page=swift¶ms=/v1
2013-07-03 03:20:36.198947 7f246c7d0700 20 REQUEST_URI=/swift/v1
2013-07-03 03:20:36.198947 7f246c7d0700 20 SCRIPT_NAME=/swift/v1
2013-07-03 03:20:36.198949 7f246c7d0700 2 req 17:0.016013:swift:HEAD /swift/v1::getting op
2013-07-03 03:20:36.198954 7f246c7d0700 2 req 17:0.016018:swift:HEAD /swift/v1:stat_account:authorizing
2013-07-03 03:20:36.198958 7f246c7d0700 20 token_id=1e704f19139947258179e147669e7d7c
2013-07-03 03:20:36.198970 7f246c7d0700 20 sending request to 192.168.122.127:5000/v2.0/tokens/1e704f19139947258179e147669e7d7c
2013-07-03 03:20:36.696256 7f246c7d0700 20 received response: {"access": {"token": {"issued_at": "2013-07-03T10:20:36.476423", "expires": "2013-07-04T10:20:35Z", "id": "1e704f19139947258179e147669e7d7c", "tenant": {"id": "42ed7b9a98504ccc81673f408fd99726", "enabled": true, "description": "admin tenant", "name": "admin"}}, "serviceCatalog": [{"endpoints": [{"adminURL": "http://10.10.10.127:8774/v2/42ed7b9a98504ccc81673f408fd99726", "region": "RegionOne", "internalURL": "http://10.10.10.127:8774/v2/42ed7b9a98504ccc81673f408fd99726", "id": "99955dec86684f28a25932c9c92c8caa", "publicURL": "http://192.168.122.127:8774/v2/42ed7b9a98504ccc81673f408fd99726"}], "endpoints_links": [], "type": "compute", "name": "nova"}, {"endpoints": [{"adminURL": "http://10.10.10.127:9696", "region": "RegionOne", "internalURL": "http://10.10.10.127:9696", "id": "4b7051ad6e64470cbd40da267f88cf44", "publicURL": "http://192.168.122.127:9696"}], "endpoints_links": [], "type": "network", "name": "quantum"}, {"endpoints": [{"adminURL": "http://10.10.10.127:8080", "region": "RegionOne", "internalURL": "http://10.10.10.127:8080", "id": "1dda06c73ea740899c8b90cd36f34b9c", "publicURL": "http://192.168.122.127:8080"}], "endpoints_links": [], "type": "s3", "name": "swift_s3"}, {"endpoints": [{"adminURL": "http://10.10.10.127:9292", "region": "RegionOne", "internalURL": "http://10.10.10.127:9292", "id": "42c148cb247141e78c527e45e69133fd", "publicURL": "http://192.168.122.127:9292"}], "endpoints_links": [], "type": "image", "name": "glance"}, {"endpoints": [{"adminURL": "http://10.10.10.127:8776/v1/42ed7b9a98504ccc81673f408fd99726", "region": "RegionOne", "internalURL": "http://10.10.10.127:8776/v1/42ed7b9a98504ccc81673f408fd99726", "id": "1f7ca47ddf8b41e5add97abc894a4277", "publicURL": "http://192.168.122.127:8776/v1/42ed7b9a98504ccc81673f408fd99726"}], "endpoints_links": [], "type": "volume", "name": "cinder"}, {"endpoints": [{"adminURL": "http://10.10.10.127:8773/services/Admin", "region": "RegionOne", "internalURL": "http://10.10.10.127:8773/services/Cloud", "id": "5ff651a900ad43618ba4f4c882764cf7", "publicURL": "http://192.168.122.127:8773/services/Cloud"}], "endpoints_links": [], "type": "ec2", "name": "nova_ec2"}, {"endpoints": [{"adminURL": "http://192.168.122.127:8080/swift/v1", "region": "regionOne", "internalURL": "http://192.168.122.127:8080/swift/v1", "id": "2e281762fbca43f68f93342dd637aacd", "publicURL": "http://192.168.122.127:8080/swift/v1"}], "endpoints_links": [], "type": "object-store", "name": "swift"}, {"endpoints": [{"adminURL": "http://10.10.10.127:35357/v2.0", "region": "RegionOne", "internalURL": "http://10.10.10.127:5000/v2.0", "id": "008acf36130448e291f67816c92f3f55", "publicURL": "http://192.168.122.127:5000/v2.0"}], "endpoints_links": [], "type": "identity", "name": "keystone"}], "user": {"username": "admin", "roles_links": [], "id": "4301a6f4cfa342d3825aa18b1c3e3e0b", "roles": [{"id": "3b8d88faa7c744b6b6fdb6e454aa4eda", "name": "admin"}], "name": "admin"}, "metadata": {"is_admin": 0, "roles": ["3b8d88faa7c744b6b6fdb6e454aa4eda"]}}}
2013-07-03 03:20:36.735312 7f246c7d0700 0 validated token: admin:admin expires: 1372933235
2013-07-03 03:20:36.735373 7f246c7d0700 20 get_obj_state: rctx=0x7f24900197f0 obj=.users.uid:42ed7b9a98504ccc81673f408fd99726 state=0x7f2490037f88 s->prefetch_data=0
2013-07-03 03:20:36.735399 7f246c7d0700 10 moving .users.uid+42ed7b9a98504ccc81673f408fd99726 to cache LRU end
2013-07-03 03:20:36.735413 7f246c7d0700 10 cache get: name=.users.uid+42ed7b9a98504ccc81673f408fd99726 : hit
2013-07-03 03:20:36.735432 7f246c7d0700 20 get_obj_state: s->obj_tag was set empty
2013-07-03 03:20:36.735447 7f246c7d0700 10 moving .users.uid+42ed7b9a98504ccc81673f408fd99726 to cache LRU end
2013-07-03 03:20:36.735458 7f246c7d0700 10 cache get: name=.users.uid+42ed7b9a98504ccc81673f408fd99726 : hit
2013-07-03 03:20:36.735503 7f246c7d0700 2 req 17:0.552566:swift:HEAD /swift/v1:stat_account:reading permissions
2013-07-03 03:20:36.735531 7f246c7d0700 2 req 17:0.552595:swift:HEAD /swift/v1:stat_account:reading the cors attr
2013-07-03 03:20:36.735551 7f246c7d0700 10 Going to read cors from attrs
2013-07-03 03:20:36.735564 7f246c7d0700 2 req 17:0.552627:swift:HEAD /swift/v1:stat_account:verifying op permissions
2013-07-03 03:20:36.735576 7f246c7d0700 2 req 17:0.552639:swift:HEAD /swift/v1:stat_account:verifying op params
2013-07-03 03:20:36.735595 7f246c7d0700 2 req 17:0.552658:swift:HEAD /swift/v1:stat_account:executing
2013-07-03 03:20:36.737436 7f246c7d0700 2 req 17:0.554500:swift:HEAD /swift/v1:stat_account:http status=204
2013-07-03 03:20:36.738418 7f246c7d0700 1 ====== req done req=0x15171f0 http_status=204 ======
And here is an sample log of a request via S3 IPA:
2013-07-03 03:18:42.187337 7f24b7d04780 20 enqueued request req=0x1520c20
2013-07-03 03:18:42.187352 7f24b7d04780 20 RGWWQ:
2013-07-03 03:18:42.187352 7f24b7d04780 20 req: 0x1520c20
2013-07-03 03:18:42.187355 7f24b7d04780 10 allocated request req=0x15171f0
2013-07-03 03:18:42.187427 7f246c7d0700 20 dequeued request req=0x1520c20
2013-07-03 03:18:42.187432 7f246c7d0700 20 RGWWQ: empty
2013-07-03 03:18:42.187437 7f246c7d0700 1 ====== starting new request req=0x1520c20 =====
2013-07-03 03:18:42.187468 7f246c7d0700 2 req 16:0.000032::::initializing
2013-07-03 03:18:42.187490 7f246c7d0700 10 s->object=<NULL> s->bucket=<NULL>
2013-07-03 03:18:42.187495 7f246c7d0700 20 FCGI_ROLE=RESPONDER
2013-07-03 03:18:42.187495 7f246c7d0700 20 SCRIPT_URL=/
2013-07-03 03:18:42.187496 7f246c7d0700 20 SCRIPT_URI=http://mystorage.local/
2013-07-03 03:18:42.187496 7f246c7d0700 20 HTTP_AUTHORIZATION=AWS admin:admin:QFRp+PUEAs1esadL3Zb8tEMDWLE=
2013-07-03 03:18:42.187497 7f246c7d0700 20 HTTP_HOST=mystorage.local
2013-07-03 03:18:42.187497 7f246c7d0700 20 HTTP_DATE=Wed, 03 Jul 2013 10:18:42 GMT
2013-07-03 03:18:42.187498 7f246c7d0700 20 HTTP_CONNECTION=Keep-Alive
2013-07-03 03:18:42.187498 7f246c7d0700 20 HTTP_USER_AGENT=DragonDisk 1.05 ( http://www.dragondisk.com )
2013-07-03 03:18:42.187498 7f246c7d0700 20 PATH=/usr/local/bin:/usr/bin:/bin
2013-07-03 03:18:42.187499 7f246c7d0700 20 SERVER_SIGNATURE=
2013-07-03 03:18:42.187499 7f246c7d0700 20 SERVER_SOFTWARE=Apache/2.2.22 (Ubuntu)
2013-07-03 03:18:42.187500 7f246c7d0700 20 SERVER_NAME=mystorage.local
2013-07-03 03:18:42.187500 7f246c7d0700 20 SERVER_ADDR=192.168.122.201
2013-07-03 03:18:42.187500 7f246c7d0700 20 SERVER_PORT=80
2013-07-03 03:18:42.187501 7f246c7d0700 20 REMOTE_ADDR=192.168.128.10
2013-07-03 03:18:42.187501 7f246c7d0700 20 DOCUMENT_ROOT=/var/www
2013-07-03 03:18:42.187502 7f246c7d0700 20 SERVER_ADMIN=[no address given]
2013-07-03 03:18:42.187502 7f246c7d0700 20 SCRIPT_FILENAME=/var/www/s3gw.fcgi
2013-07-03 03:18:42.187502 7f246c7d0700 20 REMOTE_PORT=54552
2013-07-03 03:18:42.187503 7f246c7d0700 20 GATEWAY_INTERFACE=CGI/1.1
2013-07-03 03:18:42.187503 7f246c7d0700 20 SERVER_PROTOCOL=HTTP/1.1
2013-07-03 03:18:42.187504 7f246c7d0700 20 REQUEST_METHOD=GET
2013-07-03 03:18:42.187504 7f246c7d0700 20 QUERY_STRING=page=¶ms=
2013-07-03 03:18:42.187504 7f246c7d0700 20 REQUEST_URI=/
2013-07-03 03:18:42.187505 7f246c7d0700 20 SCRIPT_NAME=/
2013-07-03 03:18:42.187506 7f246c7d0700 2 req 16:0.000070:s3:GET /::getting op
2013-07-03 03:18:42.187508 7f246c7d0700 2 req 16:0.000072:s3:GET /:list_buckets:authorizing
2013-07-03 03:18:42.188716 7f246c7d0700 5 error reading user info, uid=admin can't authenticate
2013-07-03 03:18:42.188720 7f246c7d0700 10 failed to authorize request
2013-07-03 03:18:42.188741 7f246c7d0700 2 req 16:0.001305:s3:GET /:list_buckets:http status=403
2013-07-03 03:18:42.189065 7f246c7d0700 1 ====== req done req=0x1520c20 http_status=403 ======
As seen in the second case the authentication via Keystone is not performed.
In general, in http://ceph.com/docs/master/radosgw/config/ have a description for the connection RGW only as swift storage for openstack.
Is somebody run RGW as S3 storage for openstatsk? If so, what additional configuration needs to be done?
2013/6/28 Yehuda Sadeh <yehuda@xxxxxxxxxxx>
It's a bit tricky to find out what's going on. The keystone and rgwOn Fri, Jun 28, 2013 at 1:11 AM, Vadim Izvekov <vizvekov@xxxxxxxxxxxx> wrote:
> Hello!
>
>
> We got a issue with integration of RadosGW and Keystone. Can you support us?
>
> We have such ceph configuration:
>
> [global]
> ....
> rgw socket path = /tmp/radosgw.sock
> ....
> [client.radosgw.gateway]
> host = fuel-controller-01
> user = www-data
> keyring = /etc/ceph/client.radosgw.gateway.keyring
> log file = /var/log/ceph/radosgw.log
> rgw enable usage log = true
> rgw usage log tick interval = 30
> rgw usage log flush threshold = 1024
> rgw usage max shards = 32
> rgw usage max user shards = 1
> rgw data = ""> > rgw dns name = fuel-controller-01
> rgw keystone url = "" href="http://10.10.10.127:5000" target="_blank">http://10.10.10.127:5000
> rgw keystone admin token = nova
> rgw keystone accepted roles = admin, SwiftOperator
> rgw keystone token cache size = 10
> rgw keystone revocation interval = 60
> nss db path = /var/ceph/nss
>
>
>
> When we start the RadosGW, we obtain such error in log:
>
> 2013-06-26 05:03:52.838089 7f2cc944c700 2 keystone revoke thread: start
> 2013-06-26 05:03:52.838123 7f2cc944c700 20 sending request to
> http://10.10.10.127:5000/v2.0/tokens/revoked
> 2013-06-26 05:03:53.073184 7f2cc944c700 10 request returned {"signed":
> "-----BEGIN
> CMS-----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\nfSkdijXjyzNgoJbVV2MYAIkV6cE=\n-----END
> CMS-----\n"}
> 2013-06-26 05:03:53.073239 7f2cc944c700 10 signed=-----BEGIN CMS-----
> MIIBkAYJKoZIhvcNAQcCoIIBgTCCAX0CAQExCTAHBgUrDgMCGjBrBgkqhkiG9w0B
> BwGgXgRceyJyZXZva2VkIjogW3siZXhwaXJlcyI6ICIyMDEzLTA2LTI3VDA3OjQ0
> OjA0WiIsICJpZCI6ICJlNmU4MTJiY2Y1YWM0ZTY4YjM2ODhiM2VlODYwZmY1MCJ9
> XX0xgf8wgfwCAQEwXDBXMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVW5zZXQxDjAM
> BgNVBAcTBVVuc2V0MQ4wDAYDVQQKEwVVbnNldDEYMBYGA1UEAxMPd3d3LmV4YW1w
> bGUuY29tAgEBMAcGBSsOAwIaMA0GCSqGSIb3DQEBAQUABIGAqbZEjICFOVUz22f3
> qkZ4CcjExMXo2bbgpODFE9J8XFQ+kOwT0X/gp1ALIq8y9gRYjX4LGBXQ0Nd2RqMQ
> km+vIIHkVzOt5q5nbKhXNSTkTWBGRrPLWdJo3IedAB64F7qfiAdhtqw9FUtwLSxr
> fSkdijXjyzNgoJbVV2MYAIkV6cE=
> -----END CMS-----
>
> 2013-06-26 05:03:53.073246 7f2cc944c700 10
> content=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
> 2013-06-26 05:03:53.073442 7f2cc944c700 0 ERROR: signer 0 status =
> BadSignature
> 2013-06-26 05:03:53.073451 7f2cc944c700 0 ERROR: problem decoding
> 2013-06-26 05:03:53.073452 7f2cc944c700 0 ceph_decode_cms returned -22
> 2013-06-26 05:03:53.073457 7f2cc944c700 0 ERROR: keystone revocation
> processing returned error r=-22
> 2013-06-26 05:04:51.395179 7f82be63a780 0 ceph version 0.61.4
> (1669132fcfc27d0c0b5e5bb93ade59d147e23404), process radosgw, pid 23148
> 2013-06-26 05:04:51.410852 7f82b1408700 2 garbage collection: start
>
>
> At the same time we obtain such rows in Keystone's log:
>
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] ********************
> REQUEST ENVIRON ********************
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] SCRIPT_NAME = /v2.0
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] webob.adhoc_attrs =
> {'response': <Response at 0x3d68150 200 OK>}
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] REQUEST_METHOD = GET
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] PATH_INFO =
> /tokens/revoked
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] SERVER_PROTOCOL =
> HTTP/1.0
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] HTTP_X_AUTH_TOKEN = nova
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] REMOTE_PORT = 39617
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] SERVER_NAME =
> 10.10.10.201
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] REMOTE_ADDR =
> 10.10.10.201
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] eventlet.input =
> <eventlet.wsgi.Input object at 0x3b55dd0>
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.url_scheme = http
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] SERVER_PORT = 5000
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.input =
> <eventlet.wsgi.Input object at 0x3b55dd0>
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] openstack.context =
> {'token_id': 'nova', 'is_admin': True}
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] HTTP_HOST =
> 10.10.10.127:5000
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.multithread = True
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] eventlet.posthooks = []
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.version = (1, 0)
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] RAW_PATH_INFO =
> /v2.0/tokens/revoked
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE =
> CGI/1.1
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.run_once = False
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.errors = <open file
> '<stderr>', mode 'w' at 0x7f083191d270>
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] wsgi.multiprocess =
> False
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] CONTENT_TYPE =
> text/plain
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi]
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] ********************
> REQUEST BODY ********************
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi]
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] arg_dict: {}
> 2013-06-26 05:04:53 INFO [sqlalchemy.engine.base.Engine] SELECT token.id
> AS token_id, token.expires AS token_expires, token.extra AS token_extra,
> token.valid AS token_valid, token.user_id AS token_user_id, token.trust_id
> AS token_trust_id
> FROM token
> WHERE token.expires > %s AND token.valid = %s
> 2013-06-26 05:04:53 INFO [sqlalchemy.engine.base.Engine]
> (datetime.datetime(2013, 6, 26, 12, 4, 53, 686305), 0)
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] ********************
> RESPONSE HEADERS ********************
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] Vary = X-Auth-Token
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] Content-Type =
> application/json
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] Content-Length = 612
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi]
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] ********************
> RESPONSE BODY ********************
> 2013-06-26 05:04:53 DEBUG [keystone.common.wsgi] {"signed": "-----BEGIN
> CMS-----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\npTOK419MwIXNtsohQ+D5j2RnQA0=\n-----END
> CMS-----\n"}
> 2013-06-26 05:04:53 DEBUG [eventlet.wsgi.server] 10.10.10.201 - -
> [26/Jun/2013 05:04:53] "GET /v2.0/tokens/revoked HTTP/1.1" 200 760 0.033900
>
>
>
> Can you help us, what are we doing wrong?
>
> Sofware versions:
> ceph:
> Installed: 0.61.4-1precise
> radosgw:
> Installed: 0.61.4-1precise
> keystone:
> Installed: 1:2013.1.1-0ubuntu2~cloud0 (grizzly)
> OS:
> Ubuntu 12.04
>
logs are pointing at different requests, from what I can tell. But
even so, when dealing with auth / encryption / signatures, it's very
hard to tell what went wrong. Usually the problem is with bad / wrong
certificates. Make sure that you have the correct files taken from the
keystone server, and that they're converted correctly. Did you try
that?
Yehuda
_______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
