Keystone issue?

[Maximenu]

Hello guys, Javier here

I have an VIO3.1, NSX 6.3 and vSphere 6.5 environment...and I got an strange error when I type some commands like "neutron-list":

"Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.

Could not determine a suitable URL for the plugin"

Here with nova list:

"No handlers could be found for logger "keystoneauth.identity.generic.base"

ERROR (DiscoveryFailure): Could not determine a suitable URL for the plugin

What do you think? Googeling I found some errors related to keystone but nothing too clear to solve my issue.

Any idea?

Thank you very much

Javier

[admin]

Hi Javier,

I just got the following error:

"Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL."

sourcing a wrong RC file.

1) Which RC file did you use? the one (cloudadmin.rc) placed in one of the controller node or did you customize it?

2) Did you find any error message running openstack cli command? Please consider, with VIO 3.1, neutron commands are deprecated.

3) Did you find any error keystone.log file?

Cheers,

Domenico

[ZeMiracle]

If it can help, i made an article (sorry in french) to install the openstack Cli on Windows.

The procedure is nearly the same for linux.

Seem your environment is not configured correctly.

Install OpenStack Client for Windows

Cédric.

[Maximenu]

Hi Marinod,

Yes the cloudadmin.rc is in the controller (Im using the Compact deployment).

I'm trying to execute a simple "nova list" and the server response "Error (Unauthorized):  The request you have made requires authentication, (HTTP 401)

I will check the keystone.log

[admin]

just to get more information on the possible issue, could you run:

openstack endpoint list

Does the above gives you you an error message:

Cheers,

Domenico

[Maximenu]

hey marinod,

the cloudadmin.rc is located in the controller node (should be there?) and I execute command correctly but when I try a simple "nova list" the server response

"The request you have made requires autheticathion. (HTTP 401)"

I can login in the controller node by vmware console but its impossible by ssh

The output of "openstack endpoint list" is missing because i need to provice the "source cloudadmin.rc"

[admin]

Hi Maximenu,

in a VIO HA deployment, cloudadmin.rc files are stored into the controller nodes... is it is normal the file is there

You can login to the controller trough OMS only, it is by design.

What I need to clarify, in order to try to help you is if you are able to run any openstack commands.

Please, try logging to one of the two controller nodes (trough OMS), source cloudadmin.rc file, run openstack endpoint list command and let me know.

Cheers,

Domenico

[Maximenu]

Hi Marinod,

No, I cannot run any openstack command

The output of the "openstack endpoint list" I think is ok, all services are enabled

The most strange is that i cannot access to the controller by ssh from the OMS

root@localhost:~# ssh 192.168.1.111

Permission denied (publickey).

[admin]

Hi Maximenu,

by design, you can access to any of the VMs (controller, db, compute, ecc) using their names and only from viouser; it is not allowed to access using root user.

Please, try the following:

viouser@localhost:~# ssh controller0

it will work.

P.S.

considering your command line, it seems the OMS has not been configured using a reachable DNS server (or not configurated at all), during the deployment stage.

Let me know if this is a POC or a production site.

Cheers,

Domenico

[Maximenu]

Hello

SSH issue  Solved! True, the issue with the ssh was my fault.

Now if I type "nova list" the output is next:

root@loadbalancer01:~# nova list

ERROR (Unauthorized): The request you have made requires authentication. (HTTP 401) (Request-ID: req-67f3aa38-4921-42dd-9d8b-79cfb38ac8de)

No worries, this is only my home lab, not a production enviroment.

[admin · Accepted solution]

good!

I suppose two can be the root causes of the issue:

1) a bad rc file:

after sourcing cloudadmin.rc file, does the system ask you the password? If not, can you try adding OS_password="your admin password" inside cloudadmin.rc file, sourcing again the file?

2) the SSL certificate has been created on the wrong OMS hostname (localhost). Could you, please follow:

https://kb.vmware.com/kb/2146879

to modify OMS hostname and try again an openstack command?

P.S.

it can be really interesting taking a look at keystone log file

Cheers,

Domenico

[Maximenu]

AND THE OSCAR GOES TO............!!!

solved!, now any openstack command works! I added the password to the cloudadmin file and works!!

THANK YOU VERY MUCH

[admin]

Thank you so much!!

I'm very happy it works fine now!

Cheers,

Domenico