Keystone Authentication - Authorization Failed: The resource could not be found.

[Vignesh Kumar]

Openstack Code: Mitaka
OS: Ubuntu 14.04
H/W: VM
Stuck while installing openstack, completed up to installation of Glance (following the installation guide
). While creating image for verifying glance installation I got following error,

root@ub-cont-01:~# openstack image create "cirros" --file cirros-0.3.4-x86_64-disk.img --disk-format qcow2 --container-format bare --public
503 Service Unavailable: The server is currently unavailable. Please try again at a later time. (HTTP 503)

While digging in it is found Keystone authentication issue, for instance.

root@ub-cont-01:~# keystone user-list
Authorization Failed: The resource could not be found. (HTTP 404) (Request-ID: req-b2c28221-66ae-42ef-b371-19062dc88e35)

**Attached the admin-openrc file for reference

root@ub-cont-01:~# curl -i -X POST http://localhost:35357/v3/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient"
HTTP/1.1 404 Not Found
Vary: X-Auth-Token
X-Distribution: Ubuntu
Content-Type: application/json
Content-Length: 93
X-Openstack-Request-Id: req-c4d1c8d7-cd3b-40af-a086-d430d0504ca5
Date: Wed, 22 Jun 2016 16:47:31 GMT

{"error": {"message": "The resource could not be found.", "code": 404, "title": "Not Found"}}

-----------------------------------
Release: 0.1 on 2016-06-22 07:57
SHA: c936f3ced045c1cb8e7093fdbacb0972c0f8b03b
Source: http://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/install-guide/source/glance-verify.rst
URL: http://docs.openstack.org/mitaka/install-guide-ubuntu/glance-verify.html

[Guang Yee (guang-yee)]

Looks like your curl is incorrect. It should be "http://localhost:35357/v3/auth/tokens", not "http://localhost:35357/v3/tokens"

[Steve Martinelli (stevemar)]

for further reference, avoid using the `keystone` CLI. stick to the `openstack` CLI for identity operations, like listing users and projects.

The 503 seems suspicious, i'd try re-running those commands with --debug to see what's going on

[Jamie Lennox (jamielennox)]

yea, you've got a /v3 auth_url and you're using keystoneclient which is trying to construct a v2 auth request which is adding /tokens. OS_IDENTITY_API_VERSION is an openstackclient thing and OS_AUTH_VERSION is not a thing at all so neither are being ready by keystoneclient. I can't remember how to force v3 auth with keystoneclient, it's been a while.

Please use openstackclient.

keystoneclient shell was deprecated and is now removed so i think this should be closed.