Bug 975529 - RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround for: ERROR: Unable to sign token. (HTTP 500)
Summary: RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround fo...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: doc-Release_Notes
Version: 3.0
Hardware: x86_64
OS: Linux
high
high
Target Milestone: ---
: 3.0
Assignee: Stephen Gordon
QA Contact: ecs-bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-06-18 17:23 UTC by Omri Hochman
Modified: 2013-06-19 20:15 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-06-19 20:15:53 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Omri Hochman 2013-06-18 17:23:47 UTC
RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround for: ERROR: Unable to sign token. (HTTP 500)

After following the steps how to upgrade Folsom to Grizzly from this guide:
http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_OpenStack/3/html/Release_Notes/chap-OpenStackNotes-Upgrading.html

Each nova cli command returned : "ERROR: Unable to sign token. (HTTP 500)" 

To workaround this problem - user should do the following :
----------------------------------------------------------
A) keystone-manage pki_setup
B) chown -R keystone:keystone /etc/keystone/ssl/

--------------------------------------------------------------

[root@puma03 ~(keystone_admin)]$ . ~/keystonerc_admin 
[root@puma03 ~(keystone_admin)]$ nova list
ERROR: Unable to sign token. (HTTP 500)


[root@puma03 ~(keystone_admin)]$ keystone-manage pki_setup
Generating RSA private key, 1024 bit long modulus
..............++++++
...++++++
e is 65537 (0x10001)
Generating RSA private key, 1024 bit long modulus
............................++++++
..........++++++
e is 65537 (0x10001)
Using configuration from /etc/keystone/ssl/certs/openssl.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'US'
stateOrProvinceName   :PRINTABLE:'Unset'
localityName          :PRINTABLE:'Unset'
organizationName      :PRINTABLE:'Unset'
commonName            :PRINTABLE:'www.example.com'
Certificate is to be certified until Jun 18 16:58:25 2014 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
[root@puma03 ~(keystone_admin)]$ chown -R keystone:keystone /etc/keystone/ssl/
[root@puma03 ~(keystone_admin)]$ nova list
+--------------------------------------+------------+---------+--------------------------+
| ID                                   | Name       | Status  | Networks                 |
+--------------------------------------+------------+---------+--------------------------+
| 0af4c534-088e-48e3-878d-4b02d4e75cce | rhel64-001 | SHUTOFF | novanetwork=192.168.32.2 |
| 6d9eda39-59f8-44a9-a786-d027d2a387be | rhel64-002 | SHUTOFF | novanetwork=192.168.32.3 |
| 97310f9a-360c-4b5f-86a7-05f60339f843 | rhel64-003 | SHUTOFF | novanetwork=192.168.32.4 |
+--------------------------------------+------------+---------+--------------------------+


Note You need to log in before you can comment on or make changes to this bug.