devstack does not function with PKI tokens

Bug #1443975 reported by gordon chung
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
devstack
Invalid
Undecided
Unassigned

Bug Description

disclaimer: i don't know root cause of bug.

if you enable KEYSTONE_TOKEN_FORMAT=PKI, and you turn on either Ceilometer or Heat, stack.sh will not complete properly.

if Heat is enabled, when devstack works against g-api, it will throw: (before heat is ever started)

2015-04-14 09:50:36.583 ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 500
2015-04-14 09:50:36.583 WARNING keystonemiddleware.auth_token [-] Identity response: <!DOCTYPE HTML PUBLIC "-//IETF//D
TD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator at
 root@localhost to inform them of the time this error occurred,
 and the actions you performed just before this error.</p>
<p>More information about this error may be available
in the server error log.</p>
</body></html>

if Ceilometer is started, ceilometer services start but the same error is throw in n-api

keystone logs show many instances similar to (in both cases):

2015-04-14 09:50:36.283450 28936 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not build auth context. process_request /opt/stack/keystone/keystone/middleware/core.py:229
2015-04-14 09:50:36.351037 28936 INFO keystone.common.wsgi [-] POST /auth/tokens?
2015-04-14 09:50:36.581633 Premature end of script headers: admin

i'm not sure exactly what is happening but it seems some step in create_*_accounts() for at least ceilometer and heat (possibly other non-default services) seems to be mucking up the roles/accounts of all services.

Revision history for this message
Ilonka (ilonka-o) wrote :

Hi... I have same issue by creating a cirros image during ./stack.sh. I attach the g-api log and the stack.sh.log. If you need further information or logs please tell me.
I try to install devstack kilo on a ubuntu Server 14.04.3 in a Virtual Box

Revision history for this message
Ilonka (ilonka-o) wrote :
Revision history for this message
Sean Dague (sdague) wrote :

This devstack bug was last updated over 180 days ago, as devstack
is a fast moving project and we'd like to get the tracker down to
currently actionable bugs, this is getting marked as Invalid. If the
issue still exists, please feel free to reopen it.

Changed in devstack:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.