The above stacktrace indicated something went wrong while CPBM was trying to copy the SSO key from Cloudstack. This could fail if Cloudstack management server is not running, or port 8096 in the CS node is not opened, or the global config in CS is not set.

If you still see the same issue with CS 3.0.1, please do the following:

1. Create ipTables rule allowing accessing to the port 8096 (only need to be done once on a fresh CS install)
2. Set CS global configuration integration.api.port to 8096
3. Restart the servers
4. If you still see the same error, the workaround is to manually copy SSO key, and also the admin's api_key/secret_key over. Please follow the manual steps below to they keys, then restart CPBM (server restart is not really needed, but it's good to restart so that you know this issue is really solved and there's no other server startup problems).

Steps to manually copy the SSO key, and admin's api_key/secret_key over

1. curl command to find out the SSO key and admin's api_key and secret_key
2. mysql query to update CPBM's db with the keys from #1

1) ssh in to the server running cloudstack management server

a) do the following to get the SSO key:
curl "http://localhost:8096/client/api?command=listConfigurations&name=security.singlesignon.key"

e.g. output
<?xml version="1.0" encoding="ISO-8859-1"?>
<listconfigurationsresponse cloud-stack-version="3.0.1.20120402225003">
<count>1</count>
<configuration>
<category>Secure</category>
<name>security.singlesignon.key</name>
<value>UpMYRhtgQvVsLwOZ24d-OQn2l6ECFCT6x9qgiSfyo0t9bjZgIj0LngJbsh1A8ZrPvQOte-zqk1jScokyeRCzlQ</value>
<description>A Single Sign-On key used for logging into the cloud</description>
</configuration>
</listconfigurationsresponse>

b) and do the following to get admin's api/secret keys
curl "http://localhost:8096/client/api?command=listUsers&username=admin"

e.g. output
<?xml version="1.0" encoding="ISO-8859-1"?>
<listusersresponse cloud-stack-version="3.0.1.20120402225003">
<count>1</count>
<user>
<id>59922f73-e0eb-494a-8784-f046f8d07fae</id>
<username>admin</username>
<firstname>admin</firstname>
<lastname>cloud</lastname>
<created>2012-04-14T09:57:00+0000</created>
<state>enabled</state>
<account>admin</account>
<accounttype>1</accounttype>
<domainid>f95b0190-fbf0-45c3-a169-c26b6c1a44a5</domainid>
<domain>ROOT</domain>
<apikey>3FmVP5zheIGdi4vFNzXVuPSZPQQv8fhPu3vCjXo6GLNSDqSUYVPnoeXXvLpUypMe9UlnMfdBeb4-GVXqjUcp8A</apikey>
<secretkey>DOKmWp1GP52temBBjdBGFspVVzs2v-UZkBFZbkljlgi4doB2XWoS6GmdXtJ99jkzXRNYIj65f3-gXEKWbUqRGw</secretkey>
<accountid>f44cf1eb-d555-4bdb-908c-1373b603873e</accountid>
</user>
</listusersresponse>

2) ssh in to sever running mysql cloud_portal, at command line, type:

mysql -u root -e "update cloud_portal.configuration set value='{value from #1a above}' where name='security.singlesignon.key'"

mysql -u root -e "update cloud_portal.cloud_accounts set api_key='{value of apikey from #1b above}', secret_key='{value of secretkey from #1b above}' where account_name = 'admin'"

Cindy

Edited by: Wan-Harl on Apr 25, 2012 6:35 PM