Getting unauthorized from swift after a while

Bug #1834147 reported by Dincer Celik
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Invalid
Undecided
Unassigned

Bug Description

Using stable/rocky and swift is running on 3 nodes with ceph backend. After a while, users are logged out when they try to browse into Object Store>Containers. Below are horizon and keystone logs.

### horizon.log ###
[Tue Jun 25 09:39:56.245689 2019] [:error] [pid 20] REQ: curl -i http://10.10.26.10:6780/info -X GET -H "Accept-Encoding: gzip"
[Tue Jun 25 09:39:56.246374 2019] [:error] [pid 20] RESP STATUS: 404 Not Found
[Tue Jun 25 09:39:56.247290 2019] [:error] [pid 20] RESP HEADERS: {u'Date': u'Tue, 25 Jun 2019 06:39:56 GMT', u'Content-Length': u'218', u'x-amz-request-id': u'tx00000000000000000000b-005d11c1bc-346580-default', u'Content-Type': u'application/xml', u'Accept-Ranges': u'bytes'}
[Tue Jun 25 09:39:56.247889 2019] [:error] [pid 20] RESP BODY: <?xml version="1.0" encoding="UTF-8"?><Error><Code>NoSuchBucket</Code><BucketName>info</BucketName><RequestId>tx00000000000000000000b-005d11c1bc-346580-default</RequestId><HostId>346580-default-default</HostId></Error>
[Tue Jun 25 09:39:56.267068 2019] [:error] [pid 19] REQ: curl -i http://10.10.26.10:6780/swift/v1?format=json&limit=1001 -X GET -H "Accept-Encoding: gzip" -H "X-Auth-Token: gAAAAABdEcF0dyua..."
[Tue Jun 25 09:39:56.267258 2019] [:error] [pid 19] RESP STATUS: 401 Unauthorized
[Tue Jun 25 09:39:56.268369 2019] [:error] [pid 19] RESP HEADERS: {u'Content-Length': u'121', u'Accept-Ranges': u'bytes', u'X-Trans-Id': u'tx000000000000000000102-005d11c1bc-3047c7-default', u'Date': u'Tue, 25 Jun 2019 06:39:56 GMT', u'Content-Type': u'application/json; charset=utf-8', u'X-Openstack-Request-Id': u'tx000000000000000000102-005d11c1bc-3047c7-default'}
[Tue Jun 25 09:39:56.270061 2019] [:error] [pid 19] RESP BODY: {"Code":"AccessDenied","RequestId":"tx000000000000000000102-005d11c1bc-3047c7-default","HostId":"3047c7-default-default"}
[Tue Jun 25 09:39:56.329256 2019] [:error] [pid 17] REQ: curl -i http://10.10.26.10:6780/swift/v1?format=json&limit=1001 -X GET -H "Accept-Encoding: gzip" -H "X-Auth-Token: gAAAAABdEcF0dyua..."
[Tue Jun 25 09:39:56.329466 2019] [:error] [pid 17] RESP STATUS: 401 Unauthorized
[Tue Jun 25 09:39:56.330099 2019] [:error] [pid 17] RESP HEADERS: {u'Content-Length': u'121', u'Accept-Ranges': u'bytes', u'X-Trans-Id': u'tx000000000000000000103-005d11c1bc-3047c7-default', u'Date': u'Tue, 25 Jun 2019 06:39:56 GMT', u'Content-Type': u'application/json; charset=utf-8', u'X-Openstack-Request-Id': u'tx000000000000000000103-005d11c1bc-3047c7-default'}
[Tue Jun 25 09:39:56.330436 2019] [:error] [pid 17] RESP BODY: {"Code":"AccessDenied","RequestId":"tx000000000000000000103-005d11c1bc-3047c7-default","HostId":"3047c7-default-default"}
[Tue Jun 25 09:39:56.343055 2019] [:error] [pid 21] Logging out user "dincer.celik".
[Tue Jun 25 09:39:56.373784 2019] [:error] [pid 20] Logging out user "".

### keystone.log ###
2019-06-25 09:39:54.970 19 INFO keystone.common.wsgi [req-8805d369-9967-4772-8f50-650fa0574e28 aa550435634847e2ad32147b28a3c437 - - default -] GET http://10.10.26.10:5000/v3/users/aa550435634847e2ad32147b28a3c437/projects
2019-06-25 09:39:55.357 20 INFO keystone.common.wsgi [req-29f90a42-32a6-4155-9f25-b3af38c849e4 aa550435634847e2ad32147b28a3c437 f28043164275487b949a9ce7a9524991 - default default] POST http://10.10.26.10:5000/v3/auth/tokens
2019-06-25 09:39:55.582 23 INFO keystone.common.wsgi [req-1c91afae-09ba-471a-8bdd-22e9a30cefa4 3168651b31a14edc8a648d051a97d2b6 d967624c25f94c17a8090b288b902c33 - default default] GET http://10.10.26.10:35357/v3/auth/tokens
2019-06-25 09:39:56.251 26 INFO keystone.middleware.auth [req-488549e0-4896-462f-81bf-6a80f2022778 6fde7f3890cc413094dae3bc5bf7c85b d967624c25f94c17a8090b288b902c33 - default default] Invalid user token
2019-06-25 09:39:56.254 26 INFO keystone.common.wsgi [req-455c9aa5-196b-49f5-8ee5-39f79e27c562 - - - - -] GET http://10.10.26.10:35357/v3/auth/tokens
2019-06-25 09:39:56.256 26 WARNING keystone.common.wsgi [req-455c9aa5-196b-49f5-8ee5-39f79e27c562 - - - - -] Authorization failed. The request you have made requires authentication. from 10.10.26.133: Unauthorized: The request you have made requires authentication.
2019-06-25 09:39:56.314 23 INFO keystone.middleware.auth [req-1c91afae-09ba-471a-8bdd-22e9a30cefa4 3168651b31a14edc8a648d051a97d2b6 d967624c25f94c17a8090b288b902c33 - default default] Invalid user token
2019-06-25 09:39:56.317 23 INFO keystone.common.wsgi [req-400cc15d-8ba8-45c9-a21c-7bc69f8d01c0 - - - - -] GET http://10.10.26.10:35357/v3/auth/tokens
2019-06-25 09:39:56.319 23 WARNING keystone.common.wsgi [req-400cc15d-8ba8-45c9-a21c-7bc69f8d01c0 - - - - -] Authorization failed. The request you have made requires authentication. from 10.10.26.133: Unauthorized: The request you have made requires authentication.
2019-06-25 09:39:56.350 21 INFO keystone.common.wsgi [req-61e4aa92-317c-4a26-89dd-70f5ffe2415e aa550435634847e2ad32147b28a3c437 - - default -] GET http://10.10.26.10:5000/v3/users/aa550435634847e2ad32147b28a3c437/projects

Revision history for this message
Michal Nasiadka (mnasiadka) wrote :

Rocky is EOL long time, please try with Yoga+ and report issues again.

Changed in kolla-ansible:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.