OPenstack endpoint login failed

[jf-baltazar]

Hello,

I try to connect manageiq to our openstack 13, I have an admin account, with openstack webui it connect perfecty as admin. SO i'm sure about working account
With manageiq endpoint it fail with login failed error.
I'm still running on morphy.
Someone have an idea ?

[----] I, [2023-09-27T12:00:20.225697 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqGenericWorker::Runner#get_message_via_drb) Message id: [62042499], MiqWorker id: [17849], Zone: [], Role: [ems_operations], Server: [], MiqTask id: [159126], Ident: [generic], Target id: [], Instance id: [], Task id: [], Command: [ManageIQ::Providers::Openstack::InfraManager.verify_credentials?], Timeout: [600], Priority: [100], State: [dequeue], Deliver On: [], Data: [], Args: [{"endpoints"=>{"default"=>{"security_protocol"=>"ssl-no-validation", "hostname"=>"X.X.X.X", "port"=>"13000"}}, "authentications"=>{"default"=>{"userid"=>"openstackadminuser", "password"=>"********"}}, "name"=>"Qual B", "type"=>"ManageIQ::Providers::Openstack::InfraManager", "api_version"=>"v3", :task_id=>159126}], Dequeued in: [3.301964563] seconds
[----] I, [2023-09-27T12:00:20.228136 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqQueue#deliver) Message id: [62042499], Delivering...
[----] I, [2023-09-27T12:00:20.230453 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqTask#update_status) Task: [159126] [Active] [Ok] [Task starting]
[----] I, [2023-09-27T12:00:20.263665 #3181:2b01e2523960]  INFO -- evm: MIQ(MiqEmsMetricsProcessorWorker::Runner#sync_config) ID [17858], PID [3181], GUID [6002d1c8-2691-45e3-bc95-bb986b89c264], Zone [B], Active Roles [automate,database_operations,ems_inventory,ems_metrics_collector,ems_metrics_coordinator,ems_metrics_processor,ems_operations,event,git_owner,remote_console,reporting,smartproxy,smartstate,user_interface,web_services], Assigned Roles [automate,database_operations,database_owner,ems_inventory,ems_metrics_collector,ems_metrics_coordinator,ems_metrics_processor,ems_operations,event,git_owner,notifier,remote_console,reporting,scheduler,smartproxy,smartstate,user_interface,web_services], Configuration:
[----] I, [2023-09-27T12:00:20.264066 #3181:2b01e2523960]  INFO -- evm: 
---
:count: 2
:cpu_request_percent: 5
:cpu_threshold_percent: 100
:gc_interval: 900
:heartbeat_freq: 10
:heartbeat_timeout: 120
:memory_request: 524288000
:memory_threshold: 1073741824
:nice_delta: 7
:parent_time_threshold: 180
:poll: 3
:poll_escalate_max: 30
:poll_method: escalate
:starting_timeout: 600
:stopping_timeout: 600
:systemd_enabled: true
:dequeue_method: drb
:queue_timeout: 600
[----] I, [2023-09-27T12:00:20.264155 #3181:2b01e2523960]  INFO -- evm: ---
[----] I, [2023-09-27T12:00:20.264327 #3181:2b01e2523960]  INFO -- evm: 
---
:guid: 6002d1c8-2691-45e3-bc95-bb986b89c264
[----] I, [2023-09-27T12:00:20.264421 #3181:2b01e2523960]  INFO -- evm: MIQ(MiqEmsMetricsProcessorWorker::Runner#heartbeat) MIQ(MiqEmsMetricsProcessorWorker::Runner) Synchronizing configuration complete...
[----] I, [2023-09-27T12:00:20.274490 #3181:2b01e2523960]  INFO -- evm: MIQ(MiqEmsMetricsProcessorWorker::Runner#get_message_via_drb) Message id: [62035196], MiqWorker id: [17858], Zone: [B], Role: [ems_metrics_processor], Server: [], MiqTask id: [], Ident: [ems_metrics_processor], Target id: [], Instance id: [1], Task id: [], Command: [MiqRegion.perf_rollup], Timeout: [1800], Priority: [100], State: [dequeue], Deliver On: [2023-09-27 12:00:00 UTC], Data: [], Args: ["2023-09-27T11:00:00Z", "hourly"], Dequeued in: [3471.161768665] seconds
[----] I, [2023-09-27T12:00:20.276038 #3181:2b01e2523960]  INFO -- evm: MIQ(MiqQueue#deliver) Message id: [62035196], Delivering...
[----] I, [2023-09-27T12:00:20.277268 #3181:2b01e2523960]  INFO -- evm: MIQ(MiqRegion#perf_rollup) [hourly] Rollup for MiqRegion name: [Region 0], id: [1] for time: [2023-09-27T11:00:00Z]...
[----] I, [2023-09-27T12:00:20.286203 #3144:2b0242fa1634]  INFO -- evm: EMS: [vCenter Z1], id: [5] Saving EMS Inventory...
[----] E, [2023-09-27T12:00:20.350917 #2955:2abaf2a07968] ERROR -- evm: MIQ(ManageIQ::Providers::Openstack::InfraManager.ems_connect?) Error Class=Excon::Error::Unauthorized, Message=Expected([200, 201]) <=> Actual(401 Unauthorized)
excon.error.response
  :body          => "{\"error\": {\"message\": \"The request you have made requires authentication.\", \"code\": 401, \"title\": \"Unauthorized\"}}"
  :cookies       => [
  ]
  :headers       => {
    "Content-Length"         => "114"
    "Content-Type"           => "application/json"
    "Date"                   => "Wed, 27 Sep 2023 12:00:20 GMT"
    "Server"                 => "Apache"
    "Vary"                   => "X-Auth-Token"
    "WWW-Authenticate"       => "Keystone uri=\"https://X.X.X.X:13000\""
    "x-openstack-request-id" => "req-8e23b4e1-25aa-4b11-99fb-de41bb3c4a8b"
  }
  :host          => "X.X.X.X"
  :local_address => "Y.Y.Y.Y"
  :local_port    => 45224
  :path          => "/v3/auth/tokens"
  :port          => 13000
  :reason_phrase => "Unauthorized"
  :remote_ip     => "X.X.X.X"
  :status        => 401
  :status_line   => "HTTP/1.1 401 Unauthorized\r\n"

[----] E, [2023-09-27T12:00:20.351359 #2955:2abaf2a07968] ERROR -- evm: MIQ(MiqQueue#deliver) Message id: [62042499], Error: [Login failed.]
[----] I, [2023-09-27T12:00:20.351480 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqQueue#delivered) Message id: [62042499], State: [error], Delivered in [0.123466657] seconds
[----] I, [2023-09-27T12:00:20.352641 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqQueue#m_callback) Message id: [62042499], Invoking Callback with args: ["Finished", "error", "Login failed.", "nil"]
[----] I, [2023-09-27T12:00:20.352780 #2955:2abaf2a07968]  INFO -- evm: MIQ(MiqTask#update_status) Task: [159126] [Finished] [Error] [Login failed.]

[agrare]

Hey @jf-baltazar I believe this bug was fixed in a more recent version. I'll try to find the PR but could you try to reproduce on a more recent version like petrosian?

[jf-baltazar]

Hi, cool if it's patched. but unfortunately i cannot patch it for now, our redhat satellite is broken and I have to fix it before to update appliance.
I'm interested by the PR. If patch is simple and short i'll try to backport it.