[Bug 1433595] Re: Keystone writes "Access denied" for DB-Connection to its configured logfile

[James Page]

This is due to the fact that the keystone daemon is not started with a
--log-file parameter like all other openstack daemons; this is fixed in
release since Ubuntu vivid (and for OpenStack Kilo) but will cause
/var/log/keystone/keystone.log to not be used for Icehouse/Juno.

Triaging accordingly

** Also affects: keystone (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: keystone (Ubuntu Wily)
   Importance: Low
       Status: Triaged

** Also affects: keystone (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Changed in: keystone (Ubuntu Wily)
       Status: Triaged => Fix Released

** Changed in: keystone (Ubuntu Vivid)
       Status: New => Fix Released

** Changed in: keystone (Ubuntu Vivid)
   Importance: Undecided => Low

** Changed in: keystone (Ubuntu Trusty)
       Status: New => Triaged

** Changed in: keystone (Ubuntu Trusty)
   Importance: Undecided => Medium

** Summary changed:

- Keystone writes "Access denied" for DB-Connection to its configured logfile
+ keystone logging not configured correctly for OpenStack Icehouse

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to keystone in Ubuntu.
https://bugs.launchpad.net/bugs/1433595

Title:
  keystone logging not configured correctly for OpenStack Icehouse

Status in keystone package in Ubuntu:
  Fix Released
Status in keystone source package in Trusty:
  Triaged
Status in keystone source package in Vivid:
  Fix Released
Status in keystone source package in Wily:
  Fix Released

Bug description:
  So my Keystone doesn't work because it can't connect to it's DB,
  understandable.

  But why is its configured logfile empty and the error is only logged
  to stderr*?

  root at hw-ctrl:~# grep log /etc/keystone/logging.conf 
  [loggers]
  [logger_root]
  args=('/var/log/keystone/keystone.log', 'a')
  root at hw-ctrl:~# grep "Access denied" /var/log/upstart/keystone.log | tail -n 1
  2015-03-18 14:31:38.633 9577 TRACE keystone.common.wsgi OperationalError: (OperationalError) (1045, "Access denied for user 'keystone'@'192.168.2.10' (using password: YES)") None None
  root at hw-ctrl:~# grep "Access denied" /var/log/upstart/keystone.log | wc -l
  56
  root at hw-ctrl:~# ls -al /var/log/keystone/
  total 8
  drwx------  2 keystone keystone 4096 Mär 18 12:17 .
  drwxrwxr-x 14 root     syslog   4096 Mär 18 12:17 ..

  *) and thus ends up in /var/log/upstart/keystone.log on Ubuntu

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/keystone/+bug/1433595/+subscriptions