1
0
-1

Hi,

What could be the reason, if during VfModule creation i have error MSO-RA-9227E Exception while query VNF:vFirewall-0309-5 in RegionOne/390a384dabf34c33a0b997d7292c3cbd

<MY_URL> is valid KEYSTONE URL to OpenStack project
/etc/mso/config.d/cloud_config.json
{
  "cloud_config":
  {
    "identity_services":
    {
        "DEFAULT_KEYSTONE":
        {
          "identity_url": "http://<MY_URL>:5000/v2.0",
          "mso_id": "vnf_user",
          "mso_pass": "c124921a3a0efbe579782cde8227681e",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": true,
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        }
    },
    "cloud_sites":
    {
        "RegionOne":
        {
          "region_id": "RegionOne",
          "clli": "RegionOne",
          "aic_version": "2.5",
          "identity_service_id": "DEFAULT_KEYSTONE"
        }
    }
  }
}


Log:

2018-03-12T13:29:24.187Z|b22c6ead-9865-450c-83c3-c299a25c80ad|Found: CloudSite: id=RegionOne, regionId=RegionOne, identityServiceId=DEFAULT_KEYSTONE, aic_version=2.5, clli=RegionOne
2018-03-12T13:29:24.187Z|b22c6ead-9865-450c-83c3-c299a25c80ad|Found: Cloud Identity Service: id=DEFAULT_KEYSTONE, identityUrl=http://<MY_URL>:5000/v2.0, msoId=vnf_user, adminTenant=service, memberRole=admin, tenantMetadata=true, identityServerType=KEYSTONE, identityAuthenticationType=USERNAME_PASSWORD
2018-03-12T13:29:24.187Z|b22c6ead-9865-450c-83c3-c299a25c80ad|keystoneUrl=http://<MY_URL>:5000/v2.0
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|Config values RetryDelay:5 RetryCount:3 RetryCodes:504 ResponseCode:401
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|MSO-RA-9202E Exception communicating with OpenStack: Openstack Exception on Token request: org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=390a384dabf34c33a0b997d7292c3cbd,cloud=DEFAULT_KEYSTONE
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|MSO-RA-9227E Exception while query VNF:vFirewall-0309-5 in RegionOne/390a384dabf34c33a0b997d7292c3cbd
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|MSO-RA-9200E Exception: org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=390a384dabf34c33a0b997d7292c3cbd,cloud=DEFAULT_KEYSTONE -      at org.openecomp.mso.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:994) -        at org.openecomp.mso.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:646) -   at org.openecomp.mso.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:788) -        at org.openecomp.mso.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:388) -      at java.lang.Thread.run(Thread.java:748) -
2018-03-12T13:29:24.212Z|b22c6ead-9865-450c-83c3-c299a25c80ad|Exception raised
org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=390a384dabf34c33a0b997d7292c3cbd,cloud=DEFAULT_KEYSTONE
        at org.openecomp.mso.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:994) ~[mso-adapter-utils-1.1.1.jar:na]
        at org.openecomp.mso.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:646) ~[mso-adapter-utils-1.1.1.jar:na]
        at org.openecomp.mso.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:788) ~[classes:na]
        at org.openecomp.mso.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:388) [classes:na]
        at java.lang.Thread.run(Thread.java:748) [na:1.8.0_151]
2018-03-12T13:29:24.213Z|b22c6ead-9865-450c-83c3-c299a25c80ad|
2018-03-12T13:29:24.213Z|b22c6ead-9865-450c-83c3-c299a25c80ad|Exception :
org.openecomp.mso.adapters.vnf.exceptions.VnfException: org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=390a384dabf34c33a0b997d7292c3cbd,cloud=DEFAULT_KEYSTONE
        at org.openecomp.mso.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:798) ~[classes:na]
        at org.openecomp.mso.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:388) ~[classes:na]
        at java.lang.Thread.run(Thread.java:748) [na:1.8.0_151]
Caused by: org.openecomp.mso.openstack.exceptions.MsoAdapterException: Authentication Failure: tenant=390a384dabf34c33a0b997d7292c3cbd,cloud=DEFAULT_KEYSTONE
        at org.openecomp.mso.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:994) ~[mso-adapter-utils-1.1.1.jar:na]
        at org.openecomp.mso.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:646) ~[mso-adapter-utils-1.1.1.jar:na]
        at org.openecomp.mso.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:788) ~[classes:na]
        ... 2 common frames omitted
    CommentAdd your comment...

    2 answers

    1.  
      2
      1
      0

      Lukasz Urbanski

      Configuration looks good. I only suspect the password. How did you generate it?

      cd /dockerdata-nfs/onap/mso/mso

      MSO_ENCRYPTION_KEY=$(cat encryption.key)

      echo -n "your_password" | openssl aes-128-ecb -e -K $MSO_ENCRYPTION_KEY -nosalt | xxd -c 256 -p


      Validate the output with the configured password.


      Also vnf_user must present as a admin user in your keystone project.

      1. Lukasz Urbanski

        kranthi guttikonda Does this (echo -n "your_password" | openssl aes-128-ecb -e -K $MSO_ENCRYPTION_KEY -nosalt | xxd -c 256 -p) command generate valid password that i should use as mso_pass in cloud_config.json file?

      2. kranthi guttikonda

        Lukasz Urbanski yes, Substitute "your_password" with actual password. Also validate the output against already configured password in mso_docker.json. If different update with the newly created one.

      3. Lukasz Urbanski

        kranthi guttikonda actual means value of "mso_pass" = c124921a3a0efbe579782cde8227681e ?

      4. Lukasz Urbanski

        kranthi guttikonda This steps helps, thanks.Beacause problems with mso-docker.json i have got wrongly generated password. I generate new correct one and Authentication issue is solved.


      CommentAdd your comment...
    2.  
      1
      0
      -1

      Hi, kranthi guttikonda,

      I have the same password from mso_config.json and cloud_config.json files. But  I have the same error. How can I resolve this error?

        CommentAdd your comment...