Project

General

Profile

Actions

Bug #17186

closed

radosgw keystonev3 token revocation error

Added by Matt Benjamin over 7 years ago. Updated over 7 years ago.

Status:
Can't reproduce
Priority:
High
Target version:
-
% Done:

0%

Source:
Community (user)
Tags:
Backport:
jewel
Regression:
No
Severity:
2 - major
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

I am getting some unusual errors in my radosgw.log.
I have Keystone configured with fernet tokens.
I have RGW configured to use Keystone V3.
RGW starts.
Glance is configured to use swift provided by RGW.
Glance is able to upload an image.

However, I am getting the following error repeatedly:
2016-08-30 12:02:39.783567 7f1f55ffb700 0 revoked tokens response is missing signed section
2016-08-30 12:02:39.783590 7f1f55ffb700 0 ERROR: keystone revocation processing returned error r=-22

Any suggestions about how to resolve this error message?
Is it a red herring, a bug in my configuration, a bug in RGW?

Here is my RGW config from my ceph.conf file
[client.radosgw.gateway]
rgw_keystone_api_version = 3
rgw_keystone_token_cache_size = 500
user = ceph
rgw_keystone_admin_domain = default
rgw_keystone_url = https://127.0.0.1:35357
rgw_s3_auth_use_keystone = True
rgw_keystone_admin_password = secret
rgw_keystone_admin_user = rgwuser
rgw_frontends = civetweb port=8080
log_file = /var/log/ceph/radosgw.log
rgw_keystone_admin_project = services
host = clone
rgw_keystone_accepted_roles = admin,Member
keyring = /etc/ceph/ceph.client.radosgw.gateway.keyring

Actions

Also available in: Atom PDF