{"action":"closed","issue":{"url":"https://api.github.com/repos/ansible/ansible/issues/14588","repository_url":"https://api.github.com/repos/ansible/ansible","labels_url":"https://api.github.com/repos/ansible/ansible/issues/14588/labels{/name}","comments_url":"https://api.github.com/repos/ansible/ansible/issues/14588/comments","events_url":"https://api.github.com/repos/ansible/ansible/issues/14588/events","html_url":"https://github.com/ansible/ansible/issues/14588","id":134997006,"number":14588,"title":"OpenStack authentication not working anymore?","user":{"login":"Darwiner","id":1523386,"avatar_url":"https://avatars.githubusercontent.com/u/1523386?v=3","gravatar_id":"","url":"https://api.github.com/users/Darwiner","html_url":"https://github.com/Darwiner","followers_url":"https://api.github.com/users/Darwiner/followers","following_url":"https://api.github.com/users/Darwiner/following{/other_user}","gists_url":"https://api.github.com/users/Darwiner/gists{/gist_id}","starred_url":"https://api.github.com/users/Darwiner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Darwiner/subscriptions","organizations_url":"https://api.github.com/users/Darwiner/orgs","repos_url":"https://api.github.com/users/Darwiner/repos","events_url":"https://api.github.com/users/Darwiner/events{/privacy}","received_events_url":"https://api.github.com/users/Darwiner/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ansible/ansible/labels/bug_report","name":"bug_report","color":"fbca04"},{"url":"https://api.github.com/repos/ansible/ansible/labels/cloud","name":"cloud","color":"c7def8"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-02-19T23:04:11Z","updated_at":"2016-03-11T20:06:40Z","closed_at":"2016-03-11T20:06:40Z","body":"##### Issue Type:\r\n\r\n - Bug Report\r\n\r\n##### Ansible Version:\r\n\r\n```\r\n$ ansible --version\r\nansible 2.1.0 (devel 11f081cb99) last updated 2016/02/19 16:15:02 (GMT -400)\r\n  lib/ansible/modules/core: (detached HEAD 8d126bd877) last updated 2016/02/19 16:15:05 (GMT -400)\r\n  lib/ansible/modules/extras: (detached HEAD f6c5ed987f) last updated 2016/02/19 16:15:08 (GMT -400)\r\n  config file = /home/darwiner/ansible/ansible.cfg\r\n  configured module search path = Default w/o overrides\r\n```\r\n\r\n##### Ansible Configuration:\r\n\r\nNone relevant.\r\n\r\n##### Environment:\r\n\r\nAnsible host:  CentOS release 6.6 (Final)\r\n\r\n##### Summary:\r\n\r\nOpenStack authentication does not seem to be working anymore.\r\n\r\n##### Steps To Reproduce:\r\n\r\n```\r\n$ ansible-playbook -i inventory/production --private-key=~/.ssh/ostack-infra-key playbooks/infra-ostack-create-centos7-test.yaml\r\n\r\nPLAY [OpenStack] ***************************************************************\r\n\r\nTASK [os-security-group : Group | Create security group] ***********************\r\nfailed: [127.0.0.1] => (item={u'name': u'infra-test', u'description': u'Infra-Test'}) => {\"failed\": true, \"item\": {\"description\": \"Infra-Test\", \"name\": \"infra-test\"}, \"msg\": \"Error fetching security group list: SSL exception connecting to https://mtl-ostack.example.com:5000/v2.0/tokens: [Errno bad ca_certs: 'True'] [('system library', 'fopen', 'No such file or directory'), ('BIO routines', 'BIO_new_file', 'no such file'), ('x509 certificate routines', 'X509_load_cert_crl_file', 'system lib')]\"}\r\n\r\nNO MORE HOSTS LEFT *************************************************************\r\n        to retry, use: --limit @playbooks/infra-ostack-create-centos7-test.retry\r\n\r\nPLAY RECAP *********************************************************************\r\n127.0.0.1                  : ok=0    changed=0    unreachable=0    failed=1\r\n\r\nTASK: os-security-group : Group | Create security group ----------------- 2.57s\r\nPlaybook run took 0 days, 0 hours, 0 minutes, 2 seconds\r\n```\r\n\r\n##### Expected Results:\r\n\r\n```\r\n$ ansible-playbook -i inventory/production --private-key=~/.ssh/ostack-infra-key playbooks/infra-ostack-create-centos7-test.yaml\r\n\r\nPLAY [OpenStack] ***************************************************************\r\n\r\nTASK [os-security-group : Group | Create security group] ***********************\r\nok: [127.0.0.1] => (item={u'name': u'infra-test', u'description': u'Infra-Test'})\r\n\r\nTASK [os-security-group : debug] ***********************************************\r\n\r\nTASK [os-security-group : Group | Create security group rules] *****************\r\n[DEPRECATION WARNING]: Using bare variables is deprecated. Update your playbooks so that the environment value uses the full variable syntax ('{{os_security_group_rule}}'). This feature will be removed in a \r\nfuture release. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.\r\nok: [127.0.0.1] => (item={u'port_range_min': -1, u'port_range_max': -1, u'protocol': u'icmp', u'remote_ip_prefix': u'0.0.0.0/0'})\r\nok: [127.0.0.1] => (item={u'port_range_min': 22, u'port_range_max': 22, u'protocol': u'tcp', u'remote_ip_prefix': u'0.0.0.0/0'})\r\nok: [127.0.0.1] => (item={u'port_range_min': 80, u'port_range_max': 80, u'protocol': u'tcp', u'remote_ip_prefix': u'0.0.0.0/0'})\r\nok: [127.0.0.1] => (item={u'port_range_min': 443, u'port_range_max': 443, u'protocol': u'tcp', u'remote_ip_prefix': u'0.0.0.0/0'})\r\n\r\nTASK [os-security-group : debug] ***********************************************\r\n\r\nPLAY RECAP *********************************************************************\r\n127.0.0.1                  : ok=2    changed=0    unreachable=0    failed=0\r\n\r\nTASK: os-security-group : Group | Create security group rules ----------- 9.32s\r\nTASK: os-security-group : Group | Create security group ----------------- 2.87s\r\nTASK: os-security-group : debug ----------------------------------------- 0.07s\r\nTASK: os-security-group : debug ----------------------------------------- 0.07s\r\nPlaybook run took 0 days, 0 hours, 0 minutes, 12 seconds\r\n```\r\n\r\n##### Actual Results:\r\n\r\nRunning with ansible from 2016/02/19, commit 11f081cb99, the playbook does not work correctly.\r\n\r\nRunning with ansible from 2016/02/10, commit 1b8dec9c88, the playbook works correctly.\r\n\r\nTried looking at changes between the two dates to pinpoint what might have changed, but not finding anything in particular...\r\n\r\nThe only module that gets called before the error happens, is os_security_group.\r\n\r\nThe auth_url specified in clouds.yaml is using a valid SSL certificate (not self-signed)."}}