Created attachment 1082426 [details]
nova_api.log

Description of problem:

openstack-packstack-2015.2-0.1.dev1654.gcbbf46e.el7.noarch
python-oslo-rootwrap-2.4.1-dev1.el7.centos.noarch
openstack-nova-api-13.0.0-dev157.el7.centos.noarch

10.209.24.126_api_nova.pp:                        [ ERROR ]           
Applying Puppet manifests                         [ ERROR ]           

ERROR : Error appeared during Puppet run: 10.209.24.126_api_nova.pp
Error: Could not start Service[nova-api]: Execution of '/usr/bin/systemctl start openstack-nova-api' returned 1: Job for openstack-nova-api.service failed. See 'systemctl status openstack-nova-api.service' and 'journalctl -xn' for details.                                                                                                                                                                                                                                           
You will find full trace in log /var/tmp/packstack/20151013-142042-TjRLjF/manifests/10.209.24.126_api_nova.pp.log   


[root@r-smg30 packstack]# sudo -u nova sudo nova-rootwrap /etc/nova/rootwrap.conf iptables-save -c
[sudo] password for root:

[root@r-smg30 packstack]# systemctl start openstack-nova-api
Job for openstack-nova-api.service failed. See 'systemctl status openstack-nova-api.service' and 'journalctl -xn' for details.
[root@r-smg30 packstack]# 


How reproducible:
every time

Steps to Reproduce:
1. run packstack installer
2.
3.

Actual results:


Expected results:


Additional info:

when commented the following line from sudoers file problem solved.
# Temporary allow-all-to-anyone line - will be deleted in future
ALL     ALL=(ALL) NOPASSWD: ALL, (root) PASSWD: FORBIDDEN, NOPASSWD: ALL, !FORBIDDEN