Re: swiftclient call radosgw, it always response 401 Unauthorized

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 

hi Radoslaw Zarzynski

After i retry mamy times,

I find when swift generate keystone user to radosgw first time

the message will dump




2016-09-22 17:10:36.077496 7f8104ff9700 10 host=10.62.9.140
2016-09-22 17:10:36.077503 7f8104ff9700 20 subdomain= domain= in_hosted_domain=0 in_hosted_domain_s3website=0
2016-09-22 17:10:36.093169 7f8104ff9700 10 ver=v1 first= req=
2016-09-22 17:10:36.093189 7f8104ff9700 10 handler=29RGWHandler_REST_Service_SWIFT
2016-09-22 17:10:36.093194 7f8104ff9700  2 req 1:0.015742:swift:HEAD /swift/v1::getting op 3
2016-09-22 17:10:36.093203 7f8104ff9700 10 op=29RGWStatAccount_ObjStore_SWIFT
2016-09-22 17:10:36.093205 7f8104ff9700  2 req 1:0.015753:swift:HEAD /swift/v1:stat_account:authorizing
2016-09-22 17:10:36.093229 7f8104ff9700 20 token_id=bd4f5e7007a04e968a0b7473e8d6bf33
2016-09-22 17:10:36.093274 7f8104ff9700 20 sending request to http://10.62.13.253:35357/v2.0/tokens/bd4f5e7007a04e968a0b7473e8d6bf33
2016-09-22 17:10:36.114965 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.114977 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=HTTP/1.1 200 OK
2016-09-22 17:10:36.114981 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.114982 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=Vary: X-Auth-Token
2016-09-22 17:10:36.114985 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.114986 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=Content-Type: application/json
2016-09-22 17:10:36.114988 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.114999 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=Content-Length: 3638
2016-09-22 17:10:36.115002 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.115005 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=X-Openstack-Request-Id: req-a54df9bd-d219-4146-aac8-bf284e7fcf5f
2016-09-22 17:10:36.115008 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.115009 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=Date: Thu, 22 Sep 2016 09:08:05 GMT
2016-09-22 17:10:36.115020 7f8104ff9700 20 RGWPostHTTPData::receive_header parsing HTTP headers
2016-09-22 17:10:36.115021 7f8104ff9700 20 RGWPostHTTPData::receive_header: line=
2016-09-22 17:10:36.115188 7f8104ff9700 20 received response: {"access": {"token": {"issued_at": "2016-09-22T09:08:05.688414", "expires": "2016-09-22T10:08:05Z", "id": "bd4f5e7007a04e968a0b7473e8d6bf33", "tenant": {"enabled": true, "id": "d72acd4eb56a4278ace834a391eeb158", "name": "admin", "description": "admin tenant"}, "audit_ids": ["TVhVSAdqQxqlhAJhNXBUTg"]}, "serviceCatalog": [{"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:8774/v2/d72acd4eb56a4278ace834a391eeb158", "region": "RegionOne", "publicURL": "http://10.62.13.253:8774/v2/d72acd4eb56a4278ace834a391eeb158", "id": "26f84b92d9f446e9bdc1367d5c680ea2", "internalURL": "http://10.62.13.253:8774/v2/d72acd4eb56a4278ace834a391eeb158"}], "type": "compute", "name": "nova"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:9696", "region": "RegionOne", "publicURL": "http://10.62.13.253:9696", "id": "33dd45b1fda34376b73750f401403dd8", "internalURL": "http://10.62.13.253:9696"}], "type": "network", "name": "neutron"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:8776/v2/d72acd4eb56a4278ace834a391eeb158", "region": "RegionOne", "publicURL": "http://10.62.13.253:8776/v2/d72acd4eb56a4278ace834a391eeb158", "id": "823be35e35a447cd88006c94aa953837", "internalURL": "http://10.62.13.253:8776/v2/d72acd4eb56a4278ace834a391eeb158"}], "type": "volumev2", "name": "cinderv2"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://127.0.0.1:8774/v3", "region": "RegionOne", "publicURL": "http://127.0.0.1:8774/v3", "id": "1a36a9257f9245cfac35a4d792e5a101", "internalURL": "http://127.0.0.1:8774/v3"}], "type": "computev3", "name": "novav3"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:9292", "region": "RegionOne", "publicURL": "http://10.62.13.253:9292", "id": "2e5c0bb777184d078b7859fd59b75ed7", "internalURL": "http://10.62.13.253:9292"}], "type": "image", "name": "glance"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:8777", "region": "RegionOne", "publicURL": "http://10.62.13.253:8777", "id": "d126c0eaa5c0457a801a729f0ad33c7f", "internalURL": "http://10.62.13.253:8777"}], "type": "metering", "name": "ceilometer"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:8776/v1/d72acd4eb56a4278ace834a391eeb158", "region": "RegionOne", "publicURL": "http://10.62.13.253:8776/v1/d72acd4eb56a4278ace834a391eeb158", "id": "6dc2fe16ef3948e4b05ce012a93d947a", "internalURL": "http://10.62.13.253:8776/v1/d72acd4eb56a4278ace834a391eeb158"}], "type": "volume", "name": "cinder"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:8773/services/Admin", "region": "RegionOne", "publicURL": "http://10.62.13.253:8773/services/Cloud", "id": "1f98895bc24745b3925d2f845180e2d7", "internalURL": "http://10.62.13.253:8773/services/Cloud"}], "type": "ec2", "name": "nova_ec2"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.9.140:7480/swift/v1", "region": "RegionOne", "publicURL": "http://10.62.9.140:7480/swift/v1", "id": "5366d03ba9104b93b45f04f17375ca0c", "internalURL": "http://10.62.9.140:7480/swift/v1"}], "type": "object-store", "name": "swift"}, {"endpoints_links": [], "endpoints": [{"adminURL": "http://10.62.13.253:35357/v2.0", "region": "RegionOne", "publicURL": "http://10.62.13.253:5000/v2.0", "id": "9ade29d900434e558eec20e1f3c1b05d", "internalURL": "http://10.62.13.253:5000/v2.0"}], "type": "identity", "name": "keystone"}], "user": {"username": "admin", "roles_links": [], "id": "f94a2334efd4477abe136d3eccdf036d", "roles": [{"name": "admin"}], "name": "admin"}, "metadata": {"is_admin": 0, "roles": ["829f2966c3ec4b06aad875525bf0a7d9"]}}}
2016-09-22 17:10:36.117222 7f8104ff9700  0 validated token: admin:admin expires: 1474538885
2016-09-22 17:10:36.117240 7f8104ff9700 20 updating user=d72acd4eb56a4278ace834a391eeb158
2016-09-22 17:10:36.117292 7f8104ff9700 20 get_system_obj_state: rctx=0x7f8104ff1f70 obj=default.rgw.users.uid:d72acd4eb56a4278ace834a391eeb158$d72acd4eb56a4278ace834a391eeb158 state=0x7f8148067918 s->prefetch_data=0
2016-09-22 17:10:36.117303 7f8104ff9700 10 cache get: name=default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158$d72acd4eb56a4278ace834a391eeb158 : miss
2016-09-22 17:10:36.118300 7f8104ff9700 10 cache put: name=default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158$d72acd4eb56a4278ace834a391eeb158 info.flags=0
2016-09-22 17:10:36.118321 7f8104ff9700 10 adding default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158$d72acd4eb56a4278ace834a391eeb158 to cache LRU end
2016-09-22 17:10:36.118346 7f8104ff9700 20 get_system_obj_state: rctx=0x7f8104ff1f70 obj=default.rgw.users.uid:d72acd4eb56a4278ace834a391eeb158 state=0x7f8148067918 s->prefetch_data=0
2016-09-22 17:10:36.118355 7f8104ff9700 10 cache get: name=default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158 : miss
2016-09-22 17:10:36.119091 7f8104ff9700 10 cache put: name=default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158 info.flags=0
2016-09-22 17:10:36.119109 7f8104ff9700 10 adding default.rgw.users.uid+d72acd4eb56a4278ace834a391eeb158 to cache LRU end
2016-09-22 17:10:36.119116 7f8104ff9700  0 NOTICE: couldn't map swift user d72acd4eb56a4278ace834a391eeb158




and then will stop here

any suggest for this issue?
Thx














2016-09-21 19:09 GMT+08:00 Radoslaw Zarzynski <rzarzynski@xxxxxxxxxxxx>:
Hi,

Responded inline.

On Wed, Sep 21, 2016 at 4:54 AM, Brian Chang-Chien
<brian.changchien@xxxxxxxxx> wrote:
>
>
> [global]
> ...
> debug rgw = 20
> [client.radosgw.gateway]
> host = brianceph
> rgw keystone url = "" href="http://10.62.13.253:35357" target="_blank" rel="noreferrer">http://10.62.13.253:35357
> rgw keystone admin token = 7bb8e26cbc714c47a26ffec3d96f246f
> rgw keystone accepted roles = admin, swiftuser, user, _member_, Member
> rgw keystone token cache size = 500
> rgw keystone revocation interval = 60
> rgw keystone make new tenants = true
> rgw s3 auth use keystone = true
> nss db path = /var/ceph/nss

The debug_rgw=20 has been put into the global section.
I bet that's the sole reason why this particular RadosGW
instance sees it.

> and I still some config problem
>
> Q3 : when i edit /etc/ceph/ceph.conf , if my hostname is brianceph
> the radosgw term in ceph.conf should be  [client.radosgw.gateway] or [client.radosgw.brianceph]
> which one is correct?
>
> PS: when i create radosgw, i call th cmd " ceph-deploy rgw create brianceph"

Most likely your current section naming is wrong. I haven't
poked with ceph-deloy too much but I would say it should
be [client.rgw.brianceph] or [client.radosgw.brianceph].
I don't have now any cluster alive to disambiguate, sorry.

> Q4: when i finish to edit ceph.conf, i need restart radosgw service or restart ceph service
>  in this case, i use ceph jewel, so which cmd need to call " systemctl restart ceph-radosgw.target " or  "systemctl ceph.target"

Take a look on that:
http://docs.ceph.com/docs/jewel/install/install-ceph-gateway/

> Q5: when i use ceph-deploy new brianceph, ceph will generate a ceph.cof, what kind edit ceph.conf to create rgw is prefer
>
> Method1: i direct edit ceph.conf from ceph geerated, and use ceph-deploy --overwrite-conf rgw create brianceph
>
> Method2(i used in the case) : first i call ceph-deploy rgw create brianceph, and then  edit ceph.conf in /etc/ceph/ folder , then call systemctl restart ceph-radosgw.target
>
>
> two methods i find some different issues,
> in Method1, the radosgw item of the ceph.conf in /etc/ceph/  like "rgw keystone url" will convert rgw_keystone_url ,

Spaces and underscores in configurables' names are treated
in the same way. No difference.

Regards,
Radoslaw Zarzynski

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]

  Powered by Linux