Unsolved
This post is more than 5 years old
13 Posts
0
3463
Error : Max number of tokens exceeded for this user
I have been trying to integrate cinder with coprHD and have run into the problem mentioned in the title. Whenever I try to authenticate my user through Viprcli it returns the error mentioned.
./viprcli authenticate -u root -d /tmp/cinder
Password :
The token is not generated by authentication service.Max number of tokens exceeded for this user
The same message is seen on coprHD GUI. I am running Viprcli on my cinder host.
If someone can please explain why this error is returned and how to rectify it, it would be greatly appreciated. Thanking you in anticipation.
Velik1
36 Posts
2
October 12th, 2016 08:00
Hi Mustafa,
thank you for your question
ViPR Controller has a limit internally of 100 tokens on users. If your automation code logs in with every execution but does not log out, then there is a strong chance that you would exceed 100 tokens for the account you are using.
Tokens take up to 8 hours to expire, unless logged out. There is also an api to expire all tokens, but one has to be logged in as administrator level user to issue such api call (or himself for his own tokens).
Solutions I recommend is to script such that you either log out at the end of execution (or for any exception/exit procedure), or alternatively that your script implements a basic 'whoami' api call to check whether it is logged in, prior to actually attempting to log in.
I don't favor second option because chances are token in use token might expire right in the middle of your automated execution. I recommend you make sure you log out no matter what at the end of your script.
Stanislav
MustafaM
13 Posts
0
October 13th, 2016 00:00
Hello Mr. Stanislav,
Thank you so much for your response as I was quite stuck with this. The current situation is that my administrator account is locked out due to above error. how can I rectify this issue.
I haven't used any automation scripts. Following work has been done by me till now:
1. Deployed coprHD
2. Installed Viprcli and added Vipr drivers.
3. Added keystone as authentication provider ( had to do it manually as coprHD Keystone Auth provider was not adding the endpoint with correct region )
3. Restarted cinder driver.
When logs are viewed:
How do I move forward from here. As my CoprHD root Account is locked out from GUI as well. Any guidance/help would be greatly appreciated.
PS : My apologies for the long log.
Regards
Mustafa.
MustafaM
13 Posts
0
October 17th, 2016 02:00
Hello Mr. Stanislav,
I completely removed Viprcli from my cinder host, cleared the CoprHD DB and brought it back to fresh install state. Re-installed Viprcli again and as soon as I try to authenticate the same error is repeated. I am really stuck with this and unable to move forward.
A side note in this is that cinder successfully lists volume information
root@controller2:/etc/init.d# cinder --insecure extra-specs-list
+---------------------------------------------------------------------+-------+-------------+---------------------------------------------------------
| ID | Name | extra_specs |
+---------------------------------------------------------------------+-------+-------------+---------------------------------------------------------
| urn:storageos:VirtualPool:e152307a-0217-467d-be12-ad249a73fca5:vdc1 | vPool | {} |
+---------------------------------------------------------------------+-------+-------------+----------------------------------------------------------
Velik1
36 Posts
0
October 17th, 2016 07:00
are you trying to use ViPR as a storage provider for Openstack or are you trying to use Openstack Cinder as a storage provider for a 3rd party array that ViPR doesn't support?
MustafaM
13 Posts
0
October 17th, 2016 21:00
Hello, Thank you for your response. Basically, I'm trying to integrate EMC SAN storage with OpenStack Cloud. For this purpose I'm using CoprHD/ViPR controller.
So basically to my understanding any storage provisioned through ViPR GUI catalog or through ViPR CLI should be visible to Cinder. Which can then be provisioned in OpenStack.
Mustafa.
Velik1
36 Posts
0
October 18th, 2016 07:00
yeah that is to use CopRHD to the south of Openstack, I am not familiar with that aspect, sorry man.
the best I can do is point you to this webpage - https://coprhd.atlassian.net/wiki/display/COP/Storage+Orchestration+For+OpenStack
MustafaM
13 Posts
0
October 18th, 2016 10:00
That's okay. I'm going to be trying to figure out a way to somehow refresh or release the tokens. Anyways thank you for all the help, it is much appreciated ! cheers.