After creating some users with an script, keystone stopped to work because of the following error
2017-01-31 20:29:11.111462 2017-01-31 20:29:11.110 39594 DEBUG keystone.middleware.auth [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] RBAC: auth_context: {'is_delegated_auth': False, 'access_token_id': None, 'user_id': u'ebaefe56b50f40e4a884e0ac713cfdc2', 'roles': [u'admin'], 'user_domain_id': u'default', 'trustee_id': None, 'trustor_id': None, 'consumer_id': None, 'token': <KeystoneToken (audit_id=ZYOuJOmtR8ySdqv1qOzUNw, audit_chain_id=ZYOuJOmtR8ySdqv1qOzUNw) at 0x7f6c92fe9e30>, 'project_id': u'16c3015d618542c6bba0d1abd576b5b5', 'trust_id': None, 'project_domain_id': u'default'} process_request /usr/lib/python2.7/dist-packages/keystone/middleware/auth.py:221
2017-01-31 20:29:11.114669 2017-01-31 20:29:11.114 39594 INFO keystone.common.wsgi [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] GET http://192.168.200.2:35357/v3/auth/tokens
2017-01-31 20:29:11.115339 2017-01-31 20:29:11.114 39594 DEBUG keystone.common.controller [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] RBAC: Authorizing identity:validate_token() _build_policy_check_credentials /usr/lib/python2.7/dist-packages/keystone/common/controller.py:80
2017-01-31 20:29:11.115886 2017-01-31 20:29:11.115 39594 DEBUG keystone.common.controller [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] RBAC: using auth context from the request environment _build_policy_check_credentials /usr/lib/python2.7/dist-packages/keystone/common/controller.py:85
2017-01-31 20:29:11.127038 2017-01-31 20:29:11.126 39594 DEBUG keystone.policy.backends.rules [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] enforce identity:validate_token: {'is_delegated_auth': False, 'access_token_id': None, 'user_id': u'ebaefe56b50f40e4a884e0ac713cfdc2', 'roles': [u'admin'], 'user_domain_id': u'default', 'trustee_id': None, 'trustor_id': None, 'consumer_id': None, 'token': <KeystoneToken (audit_id=ZYOuJOmtR8ySdqv1qOzUNw, audit_chain_id=ZYOuJOmtR8ySdqv1qOzUNw) at 0x7f6c92fe9e30>, 'project_id': u'16c3015d618542c6bba0d1abd576b5b5', 'trust_id': None, 'project_domain_id': u'default'} enforce /usr/lib/python2.7/dist-packages/keystone/policy/backends/rules.py:76
2017-01-31 20:29:11.129622 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi [req-5ea06271-928b-4f50-a5d6-aa60ab642852 ebaefe56b50f40e4a884e0ac713cfdc2 16c3015d618542c6bba0d1abd576b5b5 - default default] Expecting property name enclosed in double quotes: line 202 column 1 (char 9768)
2017-01-31 20:29:11.129639 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi Traceback (most recent call last):
2017-01-31 20:29:11.129645 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/keystone/common/wsgi.py", line 249, in __call__
2017-01-31 20:29:11.129650 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi result = method(context, **params)
2017-01-31 20:29:11.129654 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/keystone/common/controller.py", line 179, in inner
2017-01-31 20:29:11.129659 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi utils.flatten_dict(policy_dict))
2017-01-31 20:29:11.129663 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/keystone/policy/backends/rules.py", line 77, in enforce
2017-01-31 20:29:11.129668 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi enforce(credentials, action, target)
2017-01-31 20:29:11.129672 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/keystone/policy/backends/rules.py", line 69, in enforce
2017-01-31 20:29:11.129677 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi return _ENFORCER.enforce(action, target, credentials, **extra)
2017-01-31 20:29:11.129681 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 540, in enforce
2017-01-31 20:29:11.129685 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi self.load_rules()
2017-01-31 20:29:11.129690 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 446, in load_rules
2017-01-31 20:29:11.129694 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi overwrite=self.overwrite)
2017-01-31 20:29:11.129699 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 490, in _load_policy_file
2017-01-31 20:29:11.129704 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi rules = Rules.load_json(data, self.default_rule)
2017-01-31 20:29:11.129709 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/oslo_policy/policy.py", line 306, in load_json
2017-01-31 20:29:11.129714 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi for k, v in jsonutils.loads(data).items()}
2017-01-31 20:29:11.129718 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/dist-packages/oslo_serialization/jsonutils.py", line 229, in loads
2017-01-31 20:29:11.129734 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi return json.loads(encodeutils.safe_decode(s, encoding), **kwargs)
2017-01-31 20:29:11.129739 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/json/__init__.py", line 338, in loads
2017-01-31 20:29:11.129744 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi return _default_decoder.decode(s)
2017-01-31 20:29:11.129748 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/json/decoder.py", line 366, in decode
2017-01-31 20:29:11.129752 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi obj, end = self.raw_decode(s, idx=_w(s, 0).end())
2017-01-31 20:29:11.129756 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi File "/usr/lib/python2.7/json/decoder.py", line 382, in raw_decode
2017-01-31 20:29:11.129760 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi obj, end = self.scan_once(s, idx)
2017-01-31 20:29:11.129764 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi ValueError: Expecting property name enclosed in double quotes: line 202 column 1 (char 9768)
2017-01-31 20:29:11.129769 2017-01-31 20:29:11.127 39594 ERROR keystone.common.wsgi
~
I deleted the new users and roles without any luck
Fixed, was a problem with the policy.json
Once I replaced the modified with the original one it started to work.
https:/
The error should be handled better, it tooks me a lot of hours to pinpoint the problem.