On 3/13/2014 5:49 PM, Lars Kellogg-Stedman wrote:
On Thu, Mar 13, 2014 at 03:24:05PM -0400, Xin Zhao wrote:
> One thing strange is that quantum commands, like "quantum net-list", fail
> run on the network host, returned "403 Forbidden" error message. But using
> the same admin credential, the quantum commands work from the controller
Are you certain the you're using the same credentialson the network
host? I would start by comparing all the OS_ environments in your
environment on the controller with those on your network host (not
just the username/password, but also the value of OS_AUTH_URL).
You could watch both /var/log/neutron/server.log and
/var/log/keystone/keystone.log to see if there are any corresponding
errors that shed light on the problem.
You can run the client with --debug to make sure it's talking to what
you think it's talking to.
The debug option (-v) does help, there is a proxy in the middle that
blocked the curl command to the
controller from the network host. Now it works.