keystone logging not configured correctly for OpenStack Icehouse

[Florian Ermisch]

So my Keystone doesn't work because it can't connect to it's DB, understandable.

But why is its configured logfile empty and the error is only logged to stderr*?

root@hw-ctrl:~# grep log /etc/keystone/logging.conf
[loggers]
[logger_root]
args=('/var/log/keystone/keystone.log', 'a')
root@hw-ctrl:~# grep "Access denied" /var/log/upstart/keystone.log | tail -n 1
2015-03-18 14:31:38.633 9577 TRACE keystone.common.wsgi OperationalError: (OperationalError) (1045, "Access denied for user 'keystone'@'192.168.2.10' (using password: YES)") None None
root@hw-ctrl:~# grep "Access denied" /var/log/upstart/keystone.log | wc -l
56
root@hw-ctrl:~# ls -al /var/log/keystone/
total 8
drwx------ 2 keystone keystone 4096 Mär 18 12:17 .
drwxrwxr-x 14 root syslog 4096 Mär 18 12:17 ..

*) and thus ends up in /var/log/upstart/keystone.log on Ubuntu

[Florian Ermisch (0xf10e)]

Ah, crap, forgot versions...

So, Icehouse on Ubuntu 14.04 with CloudArchive pkgs.
Keystone is version 2014.1.3-0ubuntu2.1.

Anything else you need to know?

[James Page (james-page)]

This is due to the fact that the keystone daemon is not started with a --log-file parameter like all other openstack daemons; this is fixed in release since Ubuntu vivid (and for OpenStack Kilo) but will cause /var/log/keystone/keystone.log to not be used for Icehouse/Juno.

Triaging accordingly