install guide: [keystone_authtoken] values for *_domain_name are inconsistent with other instructions

Bug #1747181 reported by Egor Panfilov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Glance
Fix Released
Medium
Brian Rosmaita
Queens
Fix Committed
Medium
Brian Rosmaita

Bug Description

This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:

- [x] This doc is inaccurate in this way:

I'm newbie in OpenStack and trying to install minimal deployment.

When editing both glance .conf files (api.conf and registry.conf), guide advise to fill [keystone_authtoken] section with project_domain_name and user_domain_name equal "default" domain (first letter lowercase). In previous steps of guide (when configuring keystone) we created scripts and tokens for admin and demo users with domain name "Default" (first letter uppercase). As a result, when we try to create image (as described here - https://docs.openstack.org/glance/pike/install/verify.html) we get error

    503 Service Unavailable: The server is currently unavailable. Please try again at a later time.

with messages in /var/log/glance/api.log like

    CRITICAL keystonemiddleware.auth_token [-] Unable to validate token...

So, I was advised to do one of the following:
1) change values project_domain_name and user_domain_name on "Default", or
2) change name of project_domain_name and user_domain_name on *_domain_id

and everything works fine with first option.

glance version: 1:15.0.0-2.el7

-----------------------------------
Release: 15.0.1.dev2 on 'Tue Sep 19 08:50:14 2017, commit 06af2eb'
SHA: 06af2eb5abe0332f7035a7d7c2fbfd19fbc4dae7
Source: https://git.openstack.org/cgit/openstack/glance/tree/doc/source/install/install-rdo.rst
URL: https://docs.openstack.org/glance/pike/install/install-rdo.html

tags: added: documentation
Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

I guess the advantage of using *_domain_id is that they'd be UUIDs and not case-sensitive (not sure about that, though -- I thought the domain_name was case insensitive).

summary: - Install and configure (Red Hat) in glance
+ install guide: [keystone_authtoken] values for *_domain_name are
+ inconsistent with other instructions
Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

Domain names in keystone are *supposed to be* case sensitive (though for a while they weren't *actually* case sensitive in v3). See this keystone bug report for details and date of the fix:
https://bugs.launchpad.net/keystone/+bug/1229093

In any case, the key issue is that Egor is entirely correct, our install docs need to be consistent with the keystone docs on this.

Changed in glance:
status: New → Triaged
Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

May want to backport this to stable/queens and stable/pike

Changed in glance:
importance: Undecided → Medium
Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

Change proposed to master: https://review.openstack.org/#/c/559505/

Changed in glance:
assignee: nobody → Brian Rosmaita (brian-rosmaita)
status: Triaged → In Progress
milestone: none → rocky-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to glance (master)

Reviewed: https://review.openstack.org/559505
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=57310ad88f64214869ab1962184e74583e0845b6
Submitter: Zuul
Branch: master

commit 57310ad88f64214869ab1962184e74583e0845b6
Author: Brian Rosmaita <email address hidden>
Date: Sat Apr 7 18:02:25 2018 -0400

    Use 'Default' as sample install domain name

    The Glance install guide suggests using 'default' as the
    user_domain_name and project_domain_name, whereas the Keystone
    install guide, which people would be consulting earlier, instructs
    the installer to use 'Default'. Since the name is case-sensitive,
    this is causing problems for first-time installers of OpenStack.

    Change-Id: Iade47bcd69b7a2a99b990885a0270c962de282a1
    Closes-bug: #1747181

Changed in glance:
status: In Progress → Fix Released
Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

Cherry-pick to stable/queens: https://review.openstack.org/#/c/559752/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to glance (stable/queens)

Reviewed: https://review.openstack.org/559752
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=5326f644439f5b7c81a8da12189af52dec6f33b1
Submitter: Zuul
Branch: stable/queens

commit 5326f644439f5b7c81a8da12189af52dec6f33b1
Author: Brian Rosmaita <email address hidden>
Date: Sat Apr 7 18:02:25 2018 -0400

    Use 'Default' as sample install domain name

    The Glance install guide suggests using 'default' as the
    user_domain_name and project_domain_name, whereas the Keystone
    install guide, which people would be consulting earlier, instructs
    the installer to use 'Default'. Since the name is case-sensitive,
    this is causing problems for first-time installers of OpenStack.

    Change-Id: Iade47bcd69b7a2a99b990885a0270c962de282a1
    Closes-bug: #1747181
    (cherry picked from commit 57310ad88f64214869ab1962184e74583e0845b6)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/glance 17.0.0.0b1

This issue was fixed in the openstack/glance 17.0.0.0b1 development milestone.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/glance 16.0.1

This issue was fixed in the openstack/glance 16.0.1 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.