ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 400

2018-02-01 15:29:13.453 60498 WARNING keystonemiddleware.auth_token [-] Use of the auth_admin_prefix, auth_host, auth_port, auth_protocol, identity_uri, adm
in_token, admin_user, admin_password, and admin_tenant_name configuration options is deprecated in favor of auth_plugin and related options and may be removed in a future release.2018-02-01 15:29:13.454 60498 WARNING keystonemiddleware.auth_token [-] Configuring admin URI using auth fragments. This is deprecated, use 'identity_uri' i
nstead.2018-02-01 15:29:13.456 60498 INFO heat.api [-] Starting Heat REST API on 0.0.0.0:8004
2018-02-01 15:29:13.459 60498 INFO heat.common.wsgi [-] Starting 2 workers
2018-02-01 15:29:13.475 60498 INFO heat.common.wsgi [-] Started child 60560
2018-02-01 15:29:13.480 60498 INFO heat.common.wsgi [-] Started child 60564
2018-02-01 15:30:14.498 60564 ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 400
2018-02-01 15:30:14.512 60564 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Expecting to find username or userId in pa
sswordCredentials - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error.", "code": 400, "title": "Bad Request"}}2018-02-01 15:30:14.512 60564 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Failed to fetch token data from identity server
2018-02-01 15:30:27.613 60564 ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 400
2018-02-01 15:30:27.615 60564 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Expecting to find username or userId in pa
sswordCredentials - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error.", "code": 400, "title": "Bad Request"}}2018-02-01 15:30:27.616 60564 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Failed to fetch token data from identity server
2018-02-01 15:31:00.923 60564 ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 400
2018-02-01 15:31:00.924 60564 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Expecting to find username or userId in pa
sswordCredentials - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error.", "code": 400, "title": "Bad Request"}}2018-02-01 15:31:00.925 60564 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Failed to fetch token data from identity server

安装heat之后，dashboard上报错 Error: Unable to retrieve stack list. 

log 显示：

ERROR keystonemiddleware.auth_token [-] Bad response code while validating token: 400

WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "Expecting to find username or userId in passwordCredentials - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error.", "code": 400, "title": "Bad Request"}}2018-02-01 15:31:00.925 60564 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Failed to fetch token data from identity server

解决方法：

之前的heat 认证配置是：

[keystone_authtoken]
auth_host = 192.168.179.140
auth_port = 35357
auth_protocol = http
auth_uri = http://192.168.179.140:5000/v2.0
signing_dir = /tmp/keystone-signing-heat

改成如下配置：

[keystone_authtoken]
admin_tenant_name = services
admin_user = heat
admin_password= redhat
auth_host = 192.168.179.140
auth_port = 35357
auth_protocol = http
auth_uri = http://192.168.179.140:5000/v2.0
signing_dir = /tmp/keystone-signing-heat

重启服务：

# systemctl restart openstack-heat-api.service openstack-heat-api-cfn.service openstack-heat-engine.service