[Openstack] [Horizon][Keystone] Migration to keystone v3
Since nova-compute reports that failure, what is your auth_url in
/etc/nova/nova.conf in the [placement] section?
Zitat von Davide Panarese <dpanarese at enter.eu>:
> Yes keystone:5000 is my endpoint.
> OPENSTACK_KEYSTONE_URL = "http://%s/v3 <http://%s/v3>" % OPENSTACK_HOST
> Still not working.
> Davide Panarese
>> On 28 Sep 2018, at 13:50, Eugen Block <eblock at nde.ag> wrote:
>> what is your current horizon configuration?
>> control:~ # grep KEYSTONE_URL
>> OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
>> Maybe this still configured to v2?
>> Zitat von Davide Panarese <dpanarese at enter.eu>:
>>> Goodmorning every one,
>>> i'm finally approaching migration to keystone v3 but i want to
>>> maintain keystone v2 compatibility for all users that have custom
>>> scripts for authentication to our openstack.
>>> Migration seems to be pretty simple, change endpoint direct into
>>> database changing http://keystone:5000/v2.0 to
>>> http://keystone:5000 <http://keystone:5000/>; Openstack client
>>> have the capability to add /v2.0 or /v3 at the end of url
>>> retrieved from catalog.
>>> But i'm stuck with horizon dashboard, login works but compute
>>> information are not available and error log show:
>>> â?? Forbidden: You are not authorized to perform the requested
>>> action: rescope a scoped token. (HTTP 403)"
>>> All other tabs works properly.
>>> I think that is a keystone issue but i don't understand why with
>>> openstack client works perfectly and with horizon not.
>>> Anyone can explain what i missed in migration?
>>> Thanks a lot,
>>> Davide Panarese
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack at lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Questo messaggio e' stato analizzato con Libra ESVA ed e' risultato
>> non infetto.
>> Seguire il link qui sotto per segnalarlo come