<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi All,,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">While running the command to create magnum cluster template or any magnum command I receive error
<b><i>like ERROR: “errors”<o:p></o:p></i></b></p>
<p class="MsoNormal"><b>I </b>am using simplex mode installation of the StarlingX.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I checked the log files of magnum api and it shows some authentication problem as below<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.394 241971 WARNING oslo_reports.guru_meditation_report [-] Guru meditation now registers SIGUSR1 and SIGUSR2 by default for backward compatibility. SIGUSR1 will no longer be registered in a future release, so please
use SIGUSR2 to generate reports.<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.395 241971 INFO magnum.api.app [-] Full WSGI config used: /etc/magnum/api-paste.ini<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.493 241971 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set
this to True.<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.505 241971 INFO magnum.cmd.api [-] Starting server in PID 241971<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.510 241971 INFO magnum.cmd.api [-] Serving on http://127.168.204.2:9511<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.511 241971 INFO magnum.cmd.api [-] Server will handle each request in a new process up to 112 concurrent processes<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:41.511 241971 INFO werkzeug [-] * Running on http://127.168.204.2:9511/<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:56.090 244289 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request
you have made requires authentication. (HTTP 401) (Request-ID: req-361ef3fe-3749-4959-b33f-69c1a10fd84b)<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:56.403 244289 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request
you have made requires authentication. (HTTP 401) (Request-ID: req-06c1c183-3d8d-48fa-95f5-311c77990435)<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:56.403 244289 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data: ServiceError: Identity server rejected authorization necessary
to fetch token data<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-11 17:53:56.404 244289 INFO werkzeug [-] 127.168.204.3 - - [11/Mar/2019 17:53:56] "POST /v1/clustertemplates HTTP/1.1" 503 -<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-12 10:02:27.172 202974 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request
you have made requires authentication. (HTTP 401) (Request-ID: req-6be81e7b-ac2e-4943-8967-b5a1adab1139)<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-12 10:02:27.481 202974 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}: Unauthorized: The request
you have made requires authentication. (HTTP 401) (Request-ID: req-4c848660-982f-491f-a3a8-186a5f3f124e)<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-12 10:02:27.482 202974 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data: ServiceError: Identity server rejected authorization necessary
to fetch token data<o:p></o:p></i></p>
<p class="MsoNormal"><i>2019-03-12 10:02:27.482 202974 INFO werkzeug [-] 127.168.204.3 - - [12/Mar/2019 10:02:27] "GET /v1/mservices HTTP/1.1" 503 -<o:p></o:p></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">”<o:p></o:p></p>
<p class="MsoNormal">Where as my magnum KEYSTONE_AUTHTOKEN configuration in magnum.conf is as below.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">“<o:p></o:p></p>
<p class="MsoNormal"><i># Authentication type to load (string value)<o:p></o:p></i></p>
<p class="MsoNormal"><i># Deprecated group/name - [keystone_authtoken]/auth_plugin<o:p></o:p></i></p>
<p class="MsoNormal"><i>#auth_type = <None><o:p></o:p></i></p>
<p class="MsoNormal"><i>auth_type = password<o:p></o:p></i></p>
<p class="MsoNormal"><i><o:p> </o:p></i></p>
<p class="MsoNormal"><i># Config Section from which to load plugin specific options (string value)<o:p></o:p></i></p>
<p class="MsoNormal"><i>#auth_section = <None><o:p></o:p></i></p>
<p class="MsoNormal"><i>project_name=services<o:p></o:p></i></p>
<p class="MsoNormal"><i>username=magnum<o:p></o:p></i></p>
<p class="MsoNormal"><i>password=f7e60b57917fTi0*<o:p></o:p></i></p>
<p class="MsoNormal"><i>auth_url=http://127.168.204.2:5000”<o:p></o:p></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I checked the user magnum, and its domain. It looks configured to me. Will you tell me if I am missing something.
<o:p></o:p></p>
<p class="MsoNormal">If you need any further information then please let me know.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:blue">Mit freundlichen Grüßen,</span><span lang="DE" style="font-size:12.0pt;font-family:"Arial",sans-serif">
</span><span lang="DE" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:blue">with best regards,</span><o:p></o:p></p>
<p class="MsoNormal">Yatindra Shashi<o:p></o:p></p>
<p class="MsoNormal">Intel Corporation<o:p></o:p></p>
<p class="MsoNormal">Munich, Germany<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>