简体   繁体   English

无法启动Openstack实例:尝试创建端口时“需要身份验证”

[英]failed to launch Openstack instance: 'authentication required' when trying to create port

I'm trying to deploy Openstack Icehouse on Ubuntu Server 14.04 by following the official document. 我正在按照官方文档尝试在Ubuntu Server 14.04上部署Openstack Icehouse。 But after Keystone\\Nova\\Neutron\\Glance were deployed, when I tried to launch a CirrOS instance by 但是在部署Keystone \\ Nova \\ Neutron \\ Glance之后,当我尝试通过以下方式启动CirrOS实例时:

nova boot -nic ... -image ... -flavor ... nova boot -nic ... -image ... -flavor ...

, it failed. ,它失败了。

The log in Nova client shows that: Nova客户端中的日志显示:

  • The Neutron client (Yes, it's neutron. I guess there are interactions between them in booting) tried to connect with Neutron server to create a port on tenant's network. Neutron客户端 (是的,它是中子。我想它们在引导中会发生交互)试图与Neutron服务器连接以在租户的网络上创建端口。
  • But Neutron client set up the token-getting request using {username:neutron, password:REDACTED} to Keystone server and used that token to request for creating port to Neutron server. 但是Neutron客户端使用{username:neutron,password:REDACTED}到Keystone服务器设置了令牌获取请求并使用该令牌请求创建到Neutron服务器的端口。
  • Finally, the Neutron Server decided that that's an authentication problem. 最后,Neutron服务器认为这是身份验证问题。

I'm sure that I requested to create instance using tenant 'demo' 's info($OS_TENANT_NAME, $OS_USERNAME, $OS_PASSWORD, $OS_AUTH_URL were properly set with 'demo''s value) by 我确定我请求使用租户'demo'的信息创建实例($ OS_TENANT_NAME,$ OS_USERNAME,$ OS_PASSWORD,$ OS_AUTH_URL已正确设置为'demo's值),

source demoopenrc.sh 源demoopenrc.sh

with demo's credential in that file. 在该文件中带有演示的凭证。

Is that something wrong in the Neutron client's configuration or booting process? Neutron客户端的配置或启动过程中出了点问题吗? I paste a part of the neutron.conf here: 我在此处粘贴neutron.conf的一部分:

the Keystone setting 梯形失真校正设置

[keystone_authtoken]
auth_uri = http://controller:5000
auth_host = controller
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = neutron
admin_password = neutronpass
signing_dir = $state_path/keystone-signing

Since the Neutron client used 'neutron' user's credential for token getting, is there something wrong in this part? 由于Neutron客户端使用“ neutron”用户的凭证进行令牌获取,因此这部分有问题吗?

The problem has been solved after nearly a month. 这个问题已经解决了近一个月。 For anyone still interested in this problem, please visit here 对于仍对此问题感兴趣的任何人,请访问此处

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM