Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/

Bug 1080224

Summary: rhel70, keystone can not access mysql
Product: [Community] RDO Reporter: wes hayutin <whayutin>
Component: openstack-packstackAssignee: Martin Magr <mmagr>
Status: CLOSED WORKSFORME QA Contact: Udi Kalifon <ukalifon>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: aortega, apevec, ayoung, derekh, mmagr, ukalifon, whayutin, yeylon
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-11-10 16:01:00 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
rhel7.0 icehouse packstack install log none

Description wes hayutin 2014-03-25 00:35:00 UTC 
Created attachment 878261 [details]
rhel7.0 icehouse packstack install log

Description of problem:

00:36:09.870 Error: /Stage[main]/Keystone::Roles::Admin/Keystone_role[_member_]: Could not evaluate: Execution of '/usr/bin/keystone --os-endpoint http://127.0.0.1:35357/v2.0/ role-list' returned 1: An unexpected error prevented the server from fulfilling your request. (OperationalError) (1045, "Access denied for user 'keystone_admin'@'rdo-ice-rhel70-stage-controller.novalocal' (using password: YES)") None None (HTTP 500)
00:36:09.871 You will find full trace in log /var/tmp/packstack/20140324-202337-3WGNTN/manifests/172.16.7.9_keystone.pp.log


See full trace in logs
Comment 1 Martin Magr 2014-03-25 10:14:56 UTC 
After the log investigation I found out that user 'keystone_admin' was not created in DB. Instead user 'keystone' was created, which should not happen. There is a merged patch [1] in 1018 release which ensures correct name. By any chance, are you able to check /usr/lib/python2.7/site-packages/packstack/puppet/templates/mysql_keystone_install.pp file if it is the same as in [1]? I will do the test myself too now, but theoretically this should not happen :/.

[1] https://review.openstack.org/#/c/78187/2/packstack/puppet/templates/mysql_keystone_install.pp
Comment 2 Udi Kalifon 2014-03-25 14:37:58 UTC 
Also the "connection" string in keystone.conf is commented out. Perhaps the password is not used? Why is this line commented?