Comment 2 for bug 1653483

Revision history for this message
Tadas Ustinavičius (tadas-u) wrote :

Hello,
according to:
http://docs.ceph.com/docs/giant/radosgw/keystone/
RadosGW must query Keystone to get list of revoked tokens. For it be able to decode tokens, certificate files from Keystone must be converted to nss db format. But since there are no certificates, I cannot create nss db.
I think this causes RadosGW to spam these errors:

2017-01-04 11:17:21.720271 7f5aaf7d6700 0 Keystone token parse error: missing mandatory field access
2017-01-04 11:17:21.720297 7f5aaf7d6700 0 ERROR: keystone revocation processing returned error r=-22

Please note, that object storage works fine - I can put data to ceph via Openstack Horizon dashboard.
Its just these errors that makes me think, that not everything is configured properly.

I'm using Openstack Ansible 14.0.3
Thank you for the support.