关于keystone under httpd的问题

biglazybug

按照官方文档http://docs.openstack.org/kilo/i ... ystone-install.html 安装keystone后， httpd服务可以正常启动。
但在执行查询命令（openstack  user list）时遇到了问题，在log中有下面的错误：
[-] (OperationalError) (1045, "Access denied for user 'keystone'@'localhost' (using password: YES)" None None
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi Traceback (most recent call last):
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/wsgi.py", line 449, in __call__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     response = self.process_request(request)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/middleware/core.py", line 238, in process_request
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     auth_context = self._build_auth_context(request)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/middleware/core.py", line 218, in _build_auth_context
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     token_data=self.token_provider_api.validate_token(token_id))
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/token/provider.py", line 198, in validate_token
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     token = self._validate_token(unique_id)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in decorate
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     should_cache_fn)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in get_or_create
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     async_creator) as value:
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in __enter__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return self._enter()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     generated = self._enter_create(createdtime)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in _enter_create
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     created = self.creator()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in gen_value
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     created_value = creator()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in creator
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return fn(*arg, **kw)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/token/provider.py", line 262, in _validate_token
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     token_ref = self._persistence.get_token(token_id)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/token/persistence/core.py", line 66, in get_token
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     token_ref = self._get_token(unique_id)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1040, in decorate
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     should_cache_fn)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 651, in get_or_create
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     async_creator) as value:
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 158, in __enter__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return self._enter()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 98, in _enter
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     generated = self._enter_create(createdtime)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/core/dogpile.py", line 149, in _enter_create
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     created = self.creator()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 619, in gen_value
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     created_value = creator()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/dogpile/cache/region.py", line 1036, in creator
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return fn(*arg, **kw)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/token/persistence/core.py", line 77, in _get_token
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return self.driver.get_token(token_id)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/token/persistence/backends/sql.py", line 91, in get_token
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     session = sql.get_session()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/sql/core.py", line 192, in get_session
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return _get_engine_facade().get_session(expire_on_commit=expire_on_commit)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/keystone/common/sql/core.py", line 176, in _get_engine_facade
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     _engine_facade = db_session.EngineFacade.from_config(CONF)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/session.py", line 880, in from_config
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     retry_interval=conf.database.retry_interval)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/session.py", line 796, in __init__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     **engine_kwargs)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/session.py", line 413, in create_engine
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     _test_connection(engine, max_retries, retry_interval)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/session.py", line 583, in _test_connection
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return engine.connect()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/engine/base.py", line 1779, in connect
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return self._connection_cls(self, **kwargs)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/engine/base.py", line 60, in __init__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     self.__connection = connection or engine.raw_connection()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/compat/handle_error.py", line 225, in raw_connection
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     self.pool.unique_connection, _connection)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/compat/handle_error.py", line 219, in _wrap_pool_connect
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     e, dialect, self)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/compat/handle_error.py", line 324, in _handle_dbapi_exception_noconnection
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     six.reraise(type(newraise), newraise, exc_info[2])
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/compat/handle_error.py", line 215, in _wrap_pool_connect
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return fn()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 280, in unique_connection
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return _ConnectionFairy._checkout(self)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 641, in _checkout
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     fairy = _ConnectionRecord.checkout(pool)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 440, in checkout
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     rec = pool._do_get()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 961, in _do_get
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return self._create_connection()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 285, in _create_connection
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     return _ConnectionRecord(self)
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 411, in __init__
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     self.connection = self.__connect()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib64/python2.7/site-packages/sqlalchemy/pool.py", line 537, in __connect
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     connection = self.__pool._creator()
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi   File "/usr/lib/python2.7/site-packages/oslo_db/sqlalchemy/compat/handle_error.py", line 200, in connect
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi     raise original_exception
2015-05-23 11:42:06.417 4265 TRACE keystone.common.wsgi OperationalError: (OperationalError) (1045, "Access denied for user 'keystone'@'localhost' (using password: YES)" None None

应该是数据库没有连接上的问题，但是我在keystone的配置文件中的connection=mysql://keystonepenstack@controller/keystone应该是没有问题的。
因为我停掉httpd利用openstack-keystone启动eventlet的服务器时查询命令都是正常的。。。求解惑

juandx

楼主，同样遇到一样的问题，困扰一天了。。。是不是kilo的新问题啊，，，记得上个kilo版本都没有这个问题的。。。。

navywang

同样等待答案

juandx

应该是keystone服务没启动的问题，你们试试

juandx

已解决，就是按照配置会被httpd占用端口，使得keystone不能绑定端口，就会无法启动keystone，搞定这点就ok。

biglazybug

回复 5# juandx


  是的，只能把wsgi的那个文件干掉利用eventlet服务器跑openstack-keystone服务，这样horizon服务就可以跑起来

天上红花

遇到问题不断学习

hiyachen

有用debian的吗？kilo的安装文档在哪？