1. 错误信息

安装Openstack Train创建glance时发现无法上传镜像
/var/log/glance/api.log 有大量报错.错误信息大致就是token认证失败

2021-12-13 08:45:28.417 64333 WARNING keystonemiddleware.auth_token [-] Identity response: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}
: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-5aee6191-9886-4c88-88cc-159587224627)
2021-12-13 08:45:28.682 64333 WARNING keystonemiddleware.auth_token [-] Identity response: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}
: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-dbb0841f-c06e-463e-8c79-5886cd44b311)
2021-12-13 08:45:28.682 64333 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data: ServiceError: Identity server rejected authorization necessary to fetch token data
2021-12-13 08:45:28.692 64333 INFO eventlet.wsgi.server [-] 192.168.31.17 - - [13/Dec/2021 08:45:28] "GET /v2/images?limit=20&sort_key=name&sort_dir=asc HTTP/1.1" 401 569 0.561660
2021-12-13 08:45:29.333 64334 WARNING keystonemiddleware.auth_token [-] Identity response: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}
: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-2768933f-0db6-4409-8920-fcb1a32d49cd)
2021-12-13 08:45:29.602 64334 WARNING keystonemiddleware.auth_token [-] Identity response: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}
: Unauthorized: The request you have made requires authentication. (HTTP 401) (Request-ID: req-d671cef6-f532-4e59-9417-cc0fe4c9647f)
2021-12-13 08:45:29.603 64334 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data: ServiceError: Identity server rejected authorization necessary to fetch token data

2. 定位问题

通过发过来的截图可以看到,创建glance用户时,需要输入两次密码.当时是复制的glance,可能前后带了空格或者没复制上直接把粘贴板里内容作为密码复制进去了.

openstack user create --domain default --password-prompt glance

给的截图如下:
很明显第一次输入的时候两次密码有异常,之后通过鼠标的粘贴2次密码成功了.

此时的密码和/etc/glance/glance-api.conf 的密码存在差异,最终导致了认证失败.

3. 解决问题

修改glance的密码

命令格式如下:
openstack user set --password 新密码 用户名

openstack user set --password glance glance

再次执行上传,就恢复正常了.
执行glance image-list 也能看到镜像