Error Creating Inf.: Invalid credentials with the provider

Reproducubility

High

Command

#curl -L -i -H 'Content-type: text/yaml' -H "Authorization: id = ost; type = OpenStack; host = https://horizon.cloud.cnaf.infn.it:5000/v3; username = indigo-dc; password = $IAM_ACCESS_TOKEN; tenant = oidc; auth_version = 3.x_oidc_access_token; service_region = regionOne;\nid = im; type = InfrastructureManager; token =  $IAM_ACCESS_TOKEN" -X POST https://im-dodas.cloud.cnaf.infn.it/infrastructures --data-binary @"simple_tosca_im.yaml"

Output

HTTP/1.1 100 Continue
HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 04 Feb 2020 11:31:29 GMT
Content-Type: text/plain
Content-Length: 58
Connection: keep-alive
Error Creating Inf.: Invalid credentials with the provider

Log

cloud-ctrl: /var/log/httpd/keystone-error.log
...
2020-02-04 02:50:20.803757 AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
2020-02-04 02:50:20.803806 AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)
2020-02-04 02:50:20.803826 oidc_check_user_id: incoming request: "/v3/OS-FEDERATION/identity_providers/deep-hdc/protocols/oidc/auth?(null)", ap_is_initial_req(r)=1
2020-02-04 02:50:20.803847 oidc_util_request_matches_url: comparing "/v3/OS-FEDERATION/identity_providers/deep-hdc/protocols/oidc/auth"=="/v3/auth/OS-FEDERATION/websso/oidc/redirect"
2020-02-04 02:50:20.803861 oidc_oauth_get_bearer_token: authorization header found
2020-02-04 02:50:20.803878 oidc_oauth_get_bearer_token: bearer token: <TOKEN>
2020-02-04 02:50:20.803899 oidc_cache_memcache_get: enter, section="access_token", key="<KEY>"
2020-02-04 02:50:20.804625 oidc_cache_memcache_get: apr_memcache_getp returned an error; perhaps your memcache server is not available?
2020-02-04 02:50:20.804729 oidc_util_http_post_form: post data="token= <TOKEN>"
2020-02-04 02:50:20.804755 oidc_util_http_call: url=https://esaco.cloud.cnaf.infn.it/introspect, data=token=<TOKEN>, content_type=application/x-www-form-urlencoded, basic_auth=aesacus:<BASUC_AUTH>, bearer_token=(null), ssl_validate_server=1
2020-02-04 02:50:20.865868 oidc_util_http_call: response=<html>\r\n<head><title>503 Service Temporarily Unavailable</title></head>\r\n<body bgcolor="white">\r\n<center><h1>503 Service Temporarily Unavailable</h1></center>\r\n<hr><center>nginx/1.13.12</center>\r\n</body>\r\n</html>\r\n
2020-02-04 02:50:20.866198 oidc_util_decode_json_and_check_error: JSON parsing returned an error: '[' or '{' expected near '<'

Solution

Restart esaco service