[rhos-list] Cannot create/modify projects: no default role Member
Lodgen, Brad
Brad.Lodgen at centurylink.com
Thu Jul 10 19:35:01 UTC 2014
Thanks for the response. I'm studying, but I'll include a few details here and then maybe next week I can try out V5 and see if the same thing happens.
Fresh brand new packstack install:
-Clicking volume page on dashboard brings up error:
Horizon log shows:
2014-07-10 19:20:42,307 7066 ERROR django.request Internal Server Error: /dashboard/admin/projects/0acfc028d399441fb66846d24e06597d/update/
Traceback (most recent call last):
File "/usr/lib/python2.6/site-packages/django/core/handlers/base.py", line 111, in get_response
response = callback(request, *callback_args, **callback_kwargs)
File "/usr/lib/python2.6/site-packages/horizon/decorators.py", line 38, in dec
return view_func(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/horizon/decorators.py", line 86, in dec
return view_func(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/horizon/decorators.py", line 54, in dec
return view_func(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/horizon/decorators.py", line 38, in dec
return view_func(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/django/views/generic/base.py", line 48, in view
return self.dispatch(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/django/views/generic/base.py", line 69, in dispatch
return handler(request, *args, **kwargs)
File "/usr/lib/python2.6/site-packages/horizon/workflows/views.py", line 126, in get
context = self.get_context_data(**kwargs)
File "/usr/lib/python2.6/site-packages/horizon/workflows/views.py", line 91, in get_context_data
workflow = self.get_workflow()
File "/usr/lib/python2.6/site-packages/horizon/workflows/views.py", line 76, in get_workflow
extra_context = self.get_initial()
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/dashboards/admin/projects/views.py", line 183, in get_initial
redirect=reverse(INDEX_URL))
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/dashboards/admin/projects/views.py", line 173, in get_initial
tenant_id=project_id)
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/usage/quotas.py", line 122, in get_tenant_quota_data
tenant_id=tenant_id)
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/usage/quotas.py", line 104, in _get_quota_data
quotasets.append(getattr(cinder, method_name)(request, tenant_id))
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/api/cinder.py", line 129, in tenant_quota_get
return base.QuotaSet(c_client.quotas.get(tenant_id))
File "/usr/lib/python2.6/site-packages/cinderclient/v1/quotas.py", line 39, in get
"quota_set")
File "/usr/lib/python2.6/site-packages/cinderclient/base.py", line 145, in _get
resp, body = self.api.client.get(url)
File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line 207, in get
return self._cs_request(url, 'GET', **kwargs)
File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line 199, in _cs_request
raise exceptions.ConnectionError(msg)
ConnectionError: Unable to establish connection: [Errno 113] No route to host
Looked at iptables for cinder node, found only:
-A INPUT -s {compute1}/32 -p tcp -m multiport --dports 3260,8776 -m comment --comment "001 cinder incoming cinder_{compute1}" -j ACCEPT
-A INPUT -s {compute2}/32 -p tcp -m multiport --dports 3260,8776 -m comment --comment "001 cinder incoming cinder_{compute2}" -j ACCEPT
Added line for
-A INPUT -s {controller/horizon}/32 -p tcp -m multiport --dports 3260,8776 -m comment --comment "001 cinder incoming cinder_{controller/horizon}" -j ACCEPT
Restarted iptables on cinder node and now page comes up fine.
-Other issue we worked through was the Member role vs _member_ role.
Fresh packstack install same as above, cannot modify projects, horizon log shows:
2014-07-10 19:30:13,492 7231 ERROR django.request Internal Server Error: /dashboard/admin/projects/0acfc028d399441fb66846d24e06597d/update/
Traceback (most recent call last):
File "/usr/lib/python2.6/site-packages/django/core/handlers/base.py", line 136, in get_response
response = response.render()
File "/usr/lib/python2.6/site-packages/django/template/response.py", line 104, in render
self._set_content(self.rendered_content)
File "/usr/lib/python2.6/site-packages/django/template/response.py", line 81, in rendered_content
content = template.render(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 140, in render
return self._render(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 134, in _render
return self.nodelist.render(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 823, in render
bit = self.render_node(node, context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 837, in render_node
return node.render(context)
File "/usr/lib/python2.6/site-packages/django/template/defaulttags.py", line 478, in render
output = self.nodelist.render(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 823, in render
bit = self.render_node(node, context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 837, in render_node
return node.render(context)
File "/usr/lib/python2.6/site-packages/django/template/loader_tags.py", line 53, in render
result = self.nodelist.render(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 823, in render
bit = self.render_node(node, context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 837, in render_node
return node.render(context)
File "/usr/lib/python2.6/site-packages/django/template/defaulttags.py", line 193, in render
nodelist.append(node.render(context))
File "/usr/lib/python2.6/site-packages/django/template/defaulttags.py", line 275, in render
match = condition.eval(context)
File "/usr/lib/python2.6/site-packages/django/template/defaulttags.py", line 825, in eval
return self.value.resolve(context, ignore_failures=True)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 571, in resolve
obj = self.var.resolve(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 721, in resolve
value = self._resolve_lookup(context)
File "/usr/lib/python2.6/site-packages/django/template/base.py", line 772, in _resolve_lookup
current = current()
File "/usr/lib/python2.6/site-packages/horizon/workflows/base.py", line 451, in has_required_fields
return any(field.required for field in self.action.fields.values())
File "/usr/lib/python2.6/site-packages/horizon/workflows/base.py", line 376, in action
context)
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/dashboards/admin/projects/workflows.py", line 167, in __init__
redirect=reverse(INDEX_URL))
File "/usr/share/openstack-dashboard/openstack_dashboard/wsgi/../../openstack_dashboard/dashboards/admin/projects/workflows.py", line 163, in __init__
raise exceptions.NotFound(msg)
NotFound: Could not find default role "Member" in Keystone
-Check the keystone roles:
[root at ostack-ctlr ~(keystone_admin)]# keystone role-list
+----------------------------------+---------------+
| id | name |
+----------------------------------+---------------+
| bbffaf6f4dff4303bbef42a67a0bdfb7 | SwiftOperator |
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
| cd6706af8e7746cea297b35f76486015 | admin |
+----------------------------------+---------------+
[root at ostack-ctlr ~(keystone_admin)]#
-Edit /etc/openstack-dashboard/local_settings
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "Member"
To
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"
And
/etc/init.d/httpd restart
Now, it's possible to edit projects with no errors.
-----Original Message-----
From: Steve Gordon [mailto:sgordon at redhat.com]
Sent: Thursday, July 10, 2014 8:32 AM
To: Lodgen, Brad
Cc: rhos-list at redhat.com
Subject: Re: [rhos-list] Cannot create/modify projects: no default role Member
----- Original Message -----
> From: "Brad Lodgen" <Brad.Lodgen at centurylink.com>
> To: "Steve Gordon" <sgordon at redhat.com>
>
> I deployed via packstack using the RHEL-OSP V4 evaluation. Before
> looking at the roles today, I hadn't used the keystone command at all
> with this deployment.
>
> There was another issue earlier with packstack not creating the proper
> iptables rules on the cinder node, and I moved over to packstack
> because the foreman deployment was doing similar things. For example,
> it turned sasl auth on in qpid by default, but left saslauthd turned
> off in chkconfig and never started saslauthd service, so none of the services could communicate.
>
> Does the eval version have different packages?
Apologies for the delayed response, forgot to hit send on this yesterday :).
No, the evaluation provides access to the same repositories as a paid subscription would - we can assist with filing a bug to track any issues you encounter if you provide more details (logs etc.). It would also be interesting to see if these issues present on RHELOSP 5 or not though I recognize you are concentrating on the training preparation for now.
Thanks,
Steve
--
Steve Gordon, RHCE
Sr. Technical Product Manager,
Red Hat Enterprise Linux OpenStack Platform
More information about the rhos-list
mailing list