Re: swiftclient call radosgw, it always response 401 Unauthorized

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 

no body meet this situation? Can somebody help me slove the issue, please !!! THX

2016-09-16 13:02 GMT+08:00 Brian Chang-Chien <brian.changchien@xxxxxxxxx>:

Can anyone know this problem,please help me to watch this


2016年9月13日 下午5:58，"Brian Chang-Chien" <brian.changchien@xxxxxxxxx>寫道：
Hi ,naga.b

I use Ceph jewel 10.2.2
my ceph.conf  as follow
[global]
fsid = d056c174-2e3a-4c36-a067-cb774d176ce2
mon_initial_members = brianceph
mon_host = 10.62.9.140
auth_cluster_required = cephx
auth_service_required = cephx
auth_client_required = cephx
osd_crush_chooseleaf_type = 0
osd_pool_default_size = 1
osd_journal_size = 100
[client.radosgw.gateway]
host = brianceph
keyring = /etc/ceph/ceph.client.radosgw.keyring
log_file = /var/log/ceph/radosgw.log
rgw_dns_name = brianceph
rgw_keystone_url = http://10.62.13.253:35357
rgw_keystone_admin_token = 7bb8e26cbc714c47a26ffec3d96f246f
rgw_keystone_accepted_roles = admin, swiftuser
rgw_ketstone_token_cache_size = 200
rgw_keystone_revocation_interval = 30
rgw_s3_auth_use_keystone = true
nss_db_path = /var/ceph/nss

and my radosgw.log

2016-09-13 17:42:38.638462 7efd964619c0  0 starting handler: fastcgi
2016-09-13 17:42:38.638523 7efcadf9b700  0 ERROR: no socket server point defined, cannot start fcgi frontend
2016-09-13 17:47:33.597070 7efcdeffd700  1 ====== starting new request req=0x7efcdeff7710 =====
2016-09-13 17:47:33.597329 7efcdeffd700  1 ====== req done req=0x7efcdeff7710 op status=0 http_status=401 ======
2016-09-13 17:47:33.597379 7efcdeffd700  1 civetweb: 0x7efd20000bb0: 10.62.9.34 - - [13/Sep/2016:17:47:33 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0
2016-09-13 17:47:34.755291 7efcdffff700  1 ====== starting new request req=0x7efcdfff9710 =====
2016-09-13 17:47:34.755443 7efcdffff700  1 ====== req done req=0x7efcdfff9710 op status=0 http_status=401 ======
2016-09-13 17:47:34.755481 7efcdffff700  1 civetweb: 0x7efd48004020: 10.62.9.34 - - [13/Sep/2016:17:47:34 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0
2016-09-13 17:49:04.718249 7efcdf7fe700  1 ====== starting new request req=0x7efcdf7f8710 =====
2016-09-13 17:49:04.718438 7efcdf7fe700  1 ====== req done req=0x7efcdf7f8710 op status=0 http_status=401 ======
2016-09-13 17:49:04.718483 7efcdf7fe700  1 civetweb: 0x7efd68001f60: 10.62.9.34 - - [13/Sep/2016:17:49:04 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0
2016-09-13 17:49:05.870115 7efcde7fc700  1 ====== starting new request req=0x7efcde7f6710 =====
2016-09-13 17:49:05.870280 7efcde7fc700  1 ====== req done req=0x7efcde7f6710 op status=0 http_status=401 ======
2016-09-13 17:49:05.870324 7efcde7fc700  1 civetweb: 0x7efd28000bb0: 10.62.9.34 - - [13/Sep/2016:17:49:05 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0
2016-09-13 17:51:32.036065 7efd157fa700  1 handle_sigterm
2016-09-13 17:51:32.036099 7efd157fa700  1 handle_sigterm set alarm for 120
2016-09-13 17:51:32.036153 7efd964619c0 -1 shutting down
2016-09-13 17:51:32.037977 7efd78df9700  0 monclient: hunting for new mon
2016-09-13 17:51:32.038172 7efd783f6700  0 -- 10.62.9.140:0/1002906388 >> 10.62.9.140:6789/0 pipe(0x7efd60016670 sd=7 :0 s=1 pgs=0 cs=0 l=1 c=0x7efd60014d70).fault
2016-09-13 17:51:32.906553 7efd964619c0  1 final shutdown
2016-09-13 17:51:39.294948 7ff5175f29c0  0 deferred set uid:gid to 167:167 (ceph:ceph)
2016-09-13 17:51:39.295097 7ff5175f29c0  0 ceph version 10.2.2 (45107e21c568dd033c2f0a3107dec8f0b0e58374), process radosgw, pid 13251
2016-09-13 17:51:39.318311 7ff5175e8700  0 -- :/175783115 >> 10.62.9.140:6789/0 pipe(0x7ff51987b9b0 sd=7 :0 s=1 pgs=0 cs=0 l=1 c=0x7ff519842430).fault
2016-09-13 17:51:39.596568 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :0 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).fault
2016-09-13 17:51:40.197109 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42233 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:40.997618 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42234 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:42.598080 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42235 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:45.798587 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42236 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:52.199050 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42237 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:54.596518 7ff4fc10d700  0 -- 10.62.9.140:0/175783115 >> 10.62.9.140:6800/11336 pipe(0x7ff519880080 sd=8 :42238 s=1 pgs=0 cs=0 l=1 c=0x7ff519881390).connect claims to be 10.62.9.140:6800/13358 not 10.62.9.140:6800/11336 - wrong node!
2016-09-13 17:51:54.611720 7ff5175f29c0  0 RGWZoneParams::create(): error creating default zone params: (17) File exists
2016-09-13 17:51:55.285047 7ff5175f29c0  0 starting handler: civetweb
2016-09-13 17:51:55.285405 7ff4f5d7b700  0 monclient: hunting for new mon
2016-09-13 17:51:55.289646 7ff5175f29c0  0 starting handler: fastcgi
2016-09-13 17:51:55.289712 7ff42dfa3700  0 ERROR: no socket server point defined, cannot start fcgi frontend
2016-09-13 17:52:40.055599 7ff469ffb700  1 handle_sigterm
2016-09-13 17:52:40.055639 7ff469ffb700  1 handle_sigterm set alarm for 120
2016-09-13 17:52:40.055652 7ff5175f29c0 -1 shutting down
2016-09-13 17:52:40.825472 7ff5175f29c0  1 final shutdown
2016-09-13 17:52:40.855310 7f488bcd19c0  0 deferred set uid:gid to 167:167 (ceph:ceph)
2016-09-13 17:52:40.855346 7f488bcd19c0  0 ceph version 10.2.2 (45107e21c568dd033c2f0a3107dec8f0b0e58374), process radosgw, pid 14025
2016-09-13 17:52:40.893218 7f488bcd19c0  0 RGWZoneParams::create(): error creating default zone params: (17) File exists
2016-09-13 17:52:40.980767 7f488bcd19c0  0 starting handler: civetweb
2016-09-13 17:52:40.981060 7f486a57c700  0 monclient: hunting for new mon
2016-09-13 17:52:40.984229 7f488bcd19c0  0 starting handler: fastcgi
2016-09-13 17:52:40.984290 7f47a379e700  0 ERROR: no socket server point defined, cannot start fcgi frontend
2016-09-13 17:52:47.822307 7f47f5ffb700  1 ====== starting new request req=0x7f47f5ff5710 =====
2016-09-13 17:52:47.829912 7f47f5ffb700  1 ====== req done req=0x7f47f5ff5710 op status=0 http_status=200 ======
2016-09-13 17:52:47.829982 7f47f5ffb700  1 civetweb: 0x7f4850003e40: 10.62.8.246 - - [13/Sep/2016:17:52:47 +0800] "GET / HTTP/1.1" 200 0 - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36
2016-09-13 17:53:13.496015 7f47f4ff9700  1 ====== starting new request req=0x7f47f4ff3710 =====
2016-09-13 17:53:13.496232 7f47f4ff9700  1 ====== req done req=0x7f47f4ff3710 op status=0 http_status=401 ======
2016-09-13 17:53:13.496314 7f47f4ff9700  1 civetweb: 0x7f4858001280: 10.62.13.253 - - [13/Sep/2016:17:53:13 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0
2016-09-13 17:53:14.597218 7f47d3fff700  1 ====== starting new request req=0x7f47d3ff9710 =====
2016-09-13 17:53:14.597366 7f47d3fff700  1 ====== req done req=0x7f47d3ff9710 op status=0 http_status=401 ======
2016-09-13 17:53:14.597403 7f47d3fff700  1 civetweb: 0x7f4818000bb0: 10.62.13.253 - - [13/Sep/2016:17:53:14 +0800] "HEAD /swift/v1 HTTP/1.1" 401 0 - python-swiftclient-2.6.0


Please help me to find out problem, Thx


2016-09-13 2:21 GMT+08:00 B, Naga Venkata <naga.b@xxxxxxx>:

The parameters you configured for keystone in ceph.conf are correct? Can you provide your radosgw configuration in ceph.conf?

And include radosgw.log after radosgw service restart and during swift list.

 

Thanks & Regards,

Naga Venkata

 

From: ceph-users [mailto:ceph-users-bounces@lists.ceph.com] On Behalf Of Brian Chang-Chien
Sent: Monday, September 12, 2016 11:35 AM
To: ceph-users@xxxxxxxxxxxxxx
Subject: swiftclient call radosgw, it always response 401 Unauthorized

 

Hi all

 

I use openstack keystone to integrate with ceph radosgw for object storage

But when i call "swift stat" command , it always 401 error

"Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized"

 

following is log

 

DEBUG:keystoneclient.auth.identity.v2:Making authentication request to http://10.62.13.253:5000/v2.0/tokens
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 10.62.13.253
DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3638
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 10.62.9.140
DEBUG:requests.packages.urllib3.connectionpool:"HEAD /swift/v1 HTTP/1.1" 401 0
INFO:swiftclient:REQ: curl -i http://10.62.9.140:7480/swift/v1 -I -H "X-Auth-Token: 677444dfb01b41f98d786a28c84ad4e2"
INFO:swiftclient:RESP STATUS: 401 Unauthorized
INFO:swiftclient:RESP HEADERS: [('X-Trans-Id', 'tx000000000000000000001-0057d6600f-d352-default'), ('Content-Length', '12'), ('Accept-Ranges', 'bytes'), ('Content-Type', 'text/plain; charset=utf-8'), ('Date', 'Mon, 12 Sep 2016 07:58:07 GMT')]
DEBUG:keystoneclient.auth.identity.v2:Making authentication request to http://10.62.13.253:5000/v2.0/tokens
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 10.62.13.253
DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3638
INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 10.62.9.140
DEBUG:requests.packages.urllib3.connectionpool:"HEAD /swift/v1 HTTP/1.1" 401 0
INFO:swiftclient:REQ: curl -i http://10.62.9.140:7480/swift/v1 -I -H "X-Auth-Token: f67c29ebff52413a9b2f0119fbf9c60e"
INFO:swiftclient:RESP STATUS: 401 Unauthorized
INFO:swiftclient:RESP HEADERS: [('X-Trans-Id', 'tx000000000000000000002-0057d66010-d352-default'), ('Content-Length', '12'), ('Accept-Ranges', 'bytes'), ('Content-Type', 'text/plain; charset=utf-8'), ('Date', 'Mon, 12 Sep 2016 07:58:08 GMT')]
ERROR:swiftclient:Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 1390, in _retry
    service_token=self.service_token, **kwargs)
  File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 591, in head_account
    http_response_content=body)
ClientException: Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized
ERROR:swiftclient.service:Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/swiftclient/service.py", line 435, in stat
    items, headers = get_future_result(stats_future)
  File "/usr/lib/python2.7/site-packages/swiftclient/service.py", line 204, in get_future_result
    res = f.result(timeout=timeout)
  File "/usr/lib/python2.7/site-packages/concurrent/futures/_base.py", line 403, in result
    return self.__get_result()
  File "/usr/lib/python2.7/site-packages/concurrent/futures/thread.py", line 55, in run
    result = self.fn(*self.args, **self.kwargs)
  File "/usr/lib/python2.7/site-packages/swiftclient/multithreading.py", line 188, in conn_fn
    return fn(*conn_args, **kwargs)
  File "/usr/lib/python2.7/site-packages/swiftclient/command_helpers.py", line 23, in stat_account
    headers = conn.head_account()
  File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 1430, in head_account
    return self._retry(None, head_account)
  File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 1390, in _retry
    service_token=self.service_token, **kwargs)
  File "/usr/lib/python2.7/site-packages/swiftclient/client.py", line 591, in head_account
    http_response_content=body)
ClientException: Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized
Account HEAD failed: http://10.62.9.140:7480/swift/v1 401 Unauthorized

 

Could you tell me what happened ?

 

 



_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]

  Powered by Linux