New Question

Gnocchi - Keystone Unable to Validate Token

asked 2017-10-27 07:48:19 +0200

awestin1 gravatar image

updated 2017-10-27 07:51:36 +0200

I am trying to set up Ceilometer with Gnocchi. Gnocchi has been installed and configured. However, after starting the Gnocchi api and metricd, I keep getting an error when attempting to test Gnicchi. When I run gnocchi metric list, I get the following error:

[~]# gnocchi metric list
{"message": "The server is currently unavailable. Please try again at a later time.<br /><br />\n\n\n", "code": "503 Service Unavailable", "title": "Service Unavailable"} (HTTP 503)

At the same time, I get the following error from /etc/var/log/gnocchi/gnocchi.log:

2017-10-27 00:32:27.241 3231 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}}
2017-10-27 00:32:27.242 3231 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data

I also get the following from stderr on gnocchi-api:

[~]# gnocchi-api -p 8041 -b
Option "verbose" from group "DEFAULT" is deprecated for removal.  Its value may be silently ignored in the future.
STARTING test server
Available at http://gcp-openstack:8041/
DANGER! For testing only, do not use in production
******************************************************************************** - - [26/Oct/2017 23:32:21] "GET /v1/metric HTTP/1.1" 503 170

The [keystone_authtoken] section in my /etc/gnocchi/gnocchi.conf is as follows:

auth_type = password
auth_url = http://controller:5000/v3
project_domain_name = Default
user_domain_name = Default
project_name = service
username = gnocchi
password = P@ssw0rd
interface = internalURL
region_name = RegionOne

Does anyone have any suggestions for troubleshooting this issue? I have already sourced admin-openrc before running the Gnocchi client. So, I am not sure why I am receiving this message. My admin-openrc is as follows:

[~]# cat admin-openrc 
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin_P@ssw0rd
export OS_AUTH_URL=http://controller:35357/v3
export OS_AUTH_TYPE=password

Are there any other environment variables I am supposed to be setting?

Edit: I am running Ocata RDO on RHEL 7.

edit retag flag offensive close merge delete

2 answers

Sort by » oldest newest most voted

answered 2017-10-27 08:52:29 +0200

eimazas gravatar image

I had similiar issue. The problem was that i couldn't be authenticated through https (SSL). I needed to change servers interface MTU to 1500

edit flag offensive delete link more

answered 2017-10-27 11:08:14 +0200

alexpilotti gravatar image

Hi, since this is a generic question on Gnocchi, I'd recommend to post it on

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2017-10-27 07:48:19 +0200

Seen: 15 times

Last updated: Oct 27