Maximenu
Hot Shot
Hot Shot

Keystone issue?

Jump to solution

Hello guys, Javier here

I have an VIO3.1, NSX 6.3 and vSphere 6.5 environment...and I got an strange error when I type some commands like "neutron-list":

"Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.

Could not determine a suitable URL for the plugin"

Here with nova list:

"No handlers could be found for logger "keystoneauth.identity.generic.base"

ERROR (DiscoveryFailure): Could not determine a suitable URL for the plugin

What do you think? Googeling I found some errors related to keystone but nothing too clear to solve my issue.

Any idea?

Thank you very much

Javier

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
1 Solution

Accepted Solutions
admin
Immortal
Immortal

good!

I suppose two can be the root causes of the issue:

1) a bad rc file:

after sourcing cloudadmin.rc file, does the system ask you the password? If not, can you try adding OS_password="your admin password" inside cloudadmin.rc file, sourcing again the file?

2) the SSL certificate has been created on the wrong OMS hostname (localhost). Could you, please follow:

https://kb.vmware.com/kb/2146879

to modify OMS hostname and try again an openstack command?

P.S.

it can be really interesting taking a look at keystone log file

Cheers,

Domenico

View solution in original post

0 Kudos
12 Replies
admin
Immortal
Immortal

Hi Javier,

I just got the following error:

"Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL."

sourcing a wrong RC file.

1) Which RC file did you use? the one (cloudadmin.rc) placed in one of the controller node or did you customize it?

2) Did you find any error message running openstack cli command? Please consider, with VIO 3.1, neutron commands are deprecated.

3) Did you find any error keystone.log file?

Cheers,

Domenico

0 Kudos
ZeMiracle
Enthusiast
Enthusiast

If it can help, i made an article (sorry in french) to install the openstack Cli on Windows.

The procedure is nearly the same for linux.

Seem your environment is not configured correctly.

Install OpenStack Client for Windows

Cédric.

Maximenu
Hot Shot
Hot Shot

Hi Marinod,

Yes the cloudadmin.rc is in the controller (Im using the Compact deployment).

I'm trying to execute a simple "nova list" and the server response "Error (Unauthorized):  The request you have made requires authentication, (HTTP 401)

I will check the keystone.log

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
0 Kudos
admin
Immortal
Immortal

just to get more information on the possible issue, could you run:

openstack endpoint list

Does the above gives you you an error message:

Cheers,

Domenico

0 Kudos
Maximenu
Hot Shot
Hot Shot

hey marinod,

the cloudadmin.rc is located in the controller node (should be there?) and I execute command correctly but when I try a simple "nova list" the server response

"The request you have made requires autheticathion. (HTTP 401)"

I can login in the controller node by vmware console but its impossible by ssh

The output of "openstack endpoint list" is missing because i need to provice the "source cloudadmin.rc"

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
0 Kudos
admin
Immortal
Immortal

Hi Maximenu,

in a VIO HA deployment, cloudadmin.rc files are stored into the controller nodes... is it is normal the file is there Smiley Happy

You can login to the controller trough OMS only, it is by design.

What I need to clarify, in order to try to help you is if you are able to run any openstack commands.

Please, try logging to one of the two controller nodes (trough OMS), source cloudadmin.rc file, run openstack endpoint list command and let me know.

Cheers,

Domenico

0 Kudos
Maximenu
Hot Shot
Hot Shot

Hi Marinod,

No, I cannot run any openstack command

The output of the "openstack endpoint list" I think is ok, all services are enabled

The most strange is that i cannot access to the controller by ssh from the OMS

root@localhost:~# ssh 192.168.1.111

Permission denied (publickey).

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
0 Kudos
admin
Immortal
Immortal

Hi Maximenu,

by design, you can access to any of the VMs (controller, db, compute, ecc) using their names and only from viouser; it is not allowed to access using root user.

Please, try the following:

viouser@localhost:~# ssh controller0

it will work.

P.S.

considering your command line, it seems the OMS has not been configured using a reachable DNS server (or not configurated at all), during the deployment stage.

Let me know if this is a POC or a production site.

Cheers,

Domenico

0 Kudos
Maximenu
Hot Shot
Hot Shot

Hello

SSH issue  Solved! True, the issue with the ssh was my fault.

Now if I type "nova list" the output is next:

root@loadbalancer01:~# nova list

ERROR (Unauthorized): The request you have made requires authentication. (HTTP 401) (Request-ID: req-67f3aa38-4921-42dd-9d8b-79cfb38ac8de)

No worries, this is only my home lab, not a production enviroment.

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
0 Kudos
admin
Immortal
Immortal

good!

I suppose two can be the root causes of the issue:

1) a bad rc file:

after sourcing cloudadmin.rc file, does the system ask you the password? If not, can you try adding OS_password="your admin password" inside cloudadmin.rc file, sourcing again the file?

2) the SSL certificate has been created on the wrong OMS hostname (localhost). Could you, please follow:

https://kb.vmware.com/kb/2146879

to modify OMS hostname and try again an openstack command?

P.S.

it can be really interesting taking a look at keystone log file

Cheers,

Domenico

0 Kudos
Maximenu
Hot Shot
Hot Shot

AND THE OSCAR GOES TO............!!!

solved!, now any openstack command works! I added the password to the cloudadmin file and works!!

THANK YOU VERY MUCH

Javier Galvez

IaaS Evangelist

Joined the VMTN Community in Dic, 2004

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful.
0 Kudos
admin
Immortal
Immortal

Thank you so much!!

I'm very happy it works fine now!

Cheers,

Domenico

0 Kudos