Openstack Data Protection Extension for Avamar

Hello - There are several possibe ways you could have got that message.

1. Incorrect Openstack credentials for the DPE proxy service

    Please verify the credentials using "curl" or horizon login.

2. Openstack "Domains" enabled:

    We do not support Domains yet.

3. An openstack configuration issue

   Please see  https://ask.openstack.org/en/question/69418/not-authorized-to-list-projects-with-keystone-v3/

4. Openstack bug or bad parameter sequence

     Please see  https://review.openstack.org/#/c/311206/

You may also find login issues in the syslog of the controller node.

Hi Vijay,

1. Nothing wrong with my credentials. It's setup correctly.

Excerpt of my conf file:

[Keystone]

href=http://controller:5000/

username=backup_admin

password=password

#ssl_verify=/path/to/sslcert.pem

[Tenant]

name=avamar

If i try to run curl command instead, i'm getting the list of domains.

First, i request a token based on the file:

export TOKEN=`curl -si -d @token-request.json -H "Content-type: application/json" http://localhost:35357/v3/auth/tokens | awk '/X-Subject-Token/ {print $2}'`

Then use this token with my curl command.

root@Controller-POC:~/API-scripts# curl -si -H"X-Auth-Token:$TOKEN" -H "Content-type: application/json" http://localhost:5000/v3/domains

HTTP/1.1 200 OK

Date: Thu, 28 Jul 2016 07:46:35 GMT

Server: Apache/2.4.7 (Ubuntu)

Vary: X-Auth-Token

X-Distribution: Ubuntu

x-openstack-request-id: req-04c78c60-7146-4ba5-af9c-af4ae081d7e7

Content-Length: 305

Content-Type: application/json

{"domains": [{"links": {"self": "http://localhost:5000/v3/domains/default"}, "enabled": true, "description": "Owns users and tenants (i.e. projects) available on Identity API v2.", "name": "Default", "id": "default"}], "links": {"self": "http://localhost:5000/v3/domains", "previous": null, "next": null}}

2. I did not activate domains. I'm using Liberty which is supposed to work. Yet, i can notice there is a reference to domains, how can i verify this feature is not activated by mistake?

Do you know if there is some restrictions about the openstack deployment methode?

At this moment, i'm using a 3 nodes architecture, based on Ubuntu 14.04 and Liberty released deployed manually.

Anyway, thanks for your help.

JP

Please ensure the backup_admin user is a member of:

• admin project
• avamar project
• backup tenant project(s)

Find Keystone group membership from the CLI using:

keystone user-list --tenant_id=admin

As for curl calls to Keystone, please refer to:

API Examples using Curl — keystone 10.0.0.0b3.dev149 documentation

*initially you may use the default scope vs domain-scope or project-scope for the backup_admin user

I've just finished to deploy once again the dpe-proxy-service within a fresh new installation of Openstack Liberty on Ubuntu 14.04. Everything was working well unti i start the service:

2016-07-28 21:18:05.944863 2016-07-28 21:18:05.941 2885 ERROR keystone.auth.plugins.core DomainNotFound: Could not find domain: Default

2016-07-28 21:18:05.944866 2016-07-28 21:18:05.941 2885 ERROR keystone.auth.plugins.core

2016-07-28 21:18:05.947243 2016-07-28 21:18:05.945 2885 WARNING keystone.common.wsgi [req-bb5045e5-fce4-44dd-9b54-21836cba2749 - - - - -] Authorization failed. The request you have made requires authentication. from ::1

i'm struggling with this plugin, and i need to deliver a POC next week. Don't really know where to start. I've followed the installation guide with no success so far.

check your neutron and metadat conf !

metadata_agent.ini

project_domain_id = default

user_domain_id = default

neutron.conf:

project_domain_id = default

user_domain_id = default

this is the manual / default domain form OS Setup

alos, looks as if you are defaulting to an IPv6 controller ?

Do you use ip or dns names for the controller names in the scripts ?

is you DNS workin correctly ?