Bug 975529 - RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround for: ERROR: Unable to sign token. (HTTP 500)
RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround fo...
Status: CLOSED CURRENTRELEASE
Product: Red Hat OpenStack
Classification: Red Hat
Component: doc-Release_Notes (Show other bugs)
3.0
x86_64 Linux
high Severity high
: ---
: 3.0
Assigned To: Stephen Gordon
ecs-bugs
: Documentation
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2013-06-18 13:23 EDT by Omri Hochman
Modified: 2013-06-19 16:15 EDT (History)
2 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2013-06-19 16:15:53 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Omri Hochman 2013-06-18 13:23:47 EDT
RHOS-Doc: Upgrade Folsom to Grizzly Release notes guide - add a workaround for: ERROR: Unable to sign token. (HTTP 500)

After following the steps how to upgrade Folsom to Grizzly from this guide:
http://documentation-devel.engineering.redhat.com/docs/en-US/Red_Hat_OpenStack/3/html/Release_Notes/chap-OpenStackNotes-Upgrading.html

Each nova cli command returned : "ERROR: Unable to sign token. (HTTP 500)" 

To workaround this problem - user should do the following :
----------------------------------------------------------
A) keystone-manage pki_setup
B) chown -R keystone:keystone /etc/keystone/ssl/

--------------------------------------------------------------

[root@puma03 ~(keystone_admin)]$ . ~/keystonerc_admin 
[root@puma03 ~(keystone_admin)]$ nova list
ERROR: Unable to sign token. (HTTP 500)


[root@puma03 ~(keystone_admin)]$ keystone-manage pki_setup
Generating RSA private key, 1024 bit long modulus
..............++++++
...++++++
e is 65537 (0x10001)
Generating RSA private key, 1024 bit long modulus
............................++++++
..........++++++
e is 65537 (0x10001)
Using configuration from /etc/keystone/ssl/certs/openssl.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'US'
stateOrProvinceName   :PRINTABLE:'Unset'
localityName          :PRINTABLE:'Unset'
organizationName      :PRINTABLE:'Unset'
commonName            :PRINTABLE:'www.example.com'
Certificate is to be certified until Jun 18 16:58:25 2014 GMT (365 days)

Write out database with 1 new entries
Data Base Updated
[root@puma03 ~(keystone_admin)]$ chown -R keystone:keystone /etc/keystone/ssl/
[root@puma03 ~(keystone_admin)]$ nova list
+--------------------------------------+------------+---------+--------------------------+
| ID                                   | Name       | Status  | Networks                 |
+--------------------------------------+------------+---------+--------------------------+
| 0af4c534-088e-48e3-878d-4b02d4e75cce | rhel64-001 | SHUTOFF | novanetwork=192.168.32.2 |
| 6d9eda39-59f8-44a9-a786-d027d2a387be | rhel64-002 | SHUTOFF | novanetwork=192.168.32.3 |
| 97310f9a-360c-4b5f-86a7-05f60339f843 | rhel64-003 | SHUTOFF | novanetwork=192.168.32.4 |
+--------------------------------------+------------+---------+--------------------------+

Note You need to log in before you can comment on or make changes to this bug.